# Issue 24504 evidence index

Test run: 2026-10-25 UTC. Head `203a30bacc0dbb269fa68b66f12b9c5e7cb6d0fc`; base `b3d382e1009d5430de8c528aef99a39854a7cbc4`. No implementation edits, forge writes, merge, watcher, or repository-wide checks.

## Essential end-to-end results

Two real, normally paired isolated servers cloned a real local bare git remote served over git://127.0.0.1:19454. The filtered three-file clone contained exactly .env (FIXTURE_ONLY=1), candidate-204 (seed204), and candidate-205 (seed205), including newlines: 3 files / 31 bytes. Candidate-001 was absent. The filtered cap clone contained exactly 200 ignored files / 1607 bytes, including .env and candidates 204/205, excluding candidate-001 and oversize. Both destinations contained all 205 tracked anchors and had clean git status. Full destination paths and contents are in clone-three.json and clone-cap.json.

## Matrix coverage

| Row | Result | Evidence / limitation |
|---|---|---|
| A | Passed | Panel and composer open; close/reopen resets query and picks to default .env. caller-layout-reset.mp4, secondary-runtime.json. |
| B | Passed | Same large fixture/defaults before/after at CSS1440×900 and390×844, light/dark; 200 initial rows, default1/15B, oversize disabled, search/truncation hint. base/head-initial images. |
| C | Passed | Trimmed uppercase beyond-cutoff search, Enter produces no clone request, final rapid-edit query only; clear/no-match. search-enter-debounce-zero.mp4, final-runtime.json. |
| D | Passed, real clone | Cross-query 205/204 picks retained and submitted while filtered. search-copy-three.mp4, clone-three.json. |
| E | Partial | Shown-only All/None preserves hidden205; positive/zero/no-selection summaries verified. Partially selected multi-row group and None specifically at cap were not exercised. selection-cap-copy.mp4, search-enter-debounce-zero.mp4. |
| F | Passed, real clone | Global200 cap, disabled eligible row, All cannot exceed, uncheck199/reselect200, filtered destination exact200. selection-cap-copy.mp4, clone-cap.json, ui-runtime.json. |
| G | Passed | No-match retains hidden picks, clear restores; small and empty fixtures hide search correctly. search-enter-debounce-zero.mp4, head-small.png, head-empty.png. |
| H | Synthetic UI coverage | Writable query-result atom override: initial/search pending, search error/recovery, initial error/no defaults. NOT a real controlled transport/service failure. synthetic-query-states.mp4 and synthetic-initial-error.mp4, secondary-runtime.json. |
| I | Synthetic capability coverage, partial | SOURCE capability override only; modern target unchanged. Listing/no-search and no-listing branches, All/None and real ordinary clones passed. Actual old binary and old-listing exact200 cap unverified. synthetic-older-listing.mp4, synthetic-no-listing.mp4, clone-compatibility.json. |
| J | Passed with boundary limit | WorkspaceEntries19 tests passed; authenticated runtime omitted/empty/casefold/broad/no-match; contract omitted/empty/256 accepted,257 rejected; whole ignored directory excluded; exact1MiB row enabled and >1MiB disabled. Exact1MiB destination copy not performed. verification.txt, contract-results.json, final-runtime.json. |

## Explicit missing proof

No real RPC transport/service error injection (H is synthetic UI state). No actual older source binary; I uses in-memory source capability overrides. E partially selected multi-row group and None-at-cap missing; I older-listing exact200 cap missing. No native desktop shell or hosted/remote-origin/relay/tunnel smoke. 390px captures are responsive web, not native mobile; matrix found no native mobile caller. Exact1MiB copy not performed. No exhaustive enumeration beyond the preexisting git stdout ceiling was attempted.

## Captures and inspection

Base/head use the same large-cap fixture and defaults. CSS1440×900 screenshots were transferred at1280×800; CSS390×844 screenshots are DPR2 rasters780×1688. Search and cap narrow captures exist in both themes. All static captures were inspected in a contact sheet; key narrow and wide frames were opened separately. Recordings were sampled into four-frame sheets and inspected. No horizontal overflow or inaccessible footer observed. Raw Diff0 and threshold20 masks plus metrics are comparison aids; changing sidebar times and dialog geometry contribute pixels. They do not assert zero visual difference.

Recordings preserve interactions. search-copy-three.mp4 includes initial selector troubleshooting before the successful clone. synthetic-query-states.mp4 includes an initial failed attempt to set an unmounted initial-error atom; the separate synthetic-initial-error.mp4 and runtime transcript show the correct mounted initial-error state. These are not hidden failures.

## Environment and cleanup

Machine fs-15, Linux x64, Node26. Worktree /home/ubuntu/wt/issue-24504. Source Vite7797/backend15837, target15838; independent /tmp/issue24504-proof-source and target homes. No live userdata used. Source and target share this machine, with separate app state. Bare remotes contained synthetic files only. Pairing occurred through actual Settings > Connections; no fake pairing.

Owned source/target/git-daemon stopped; ports7797,15837,15838,19454 verified closed. Owned browser tabs closed. Own /tmp fixtures, homes and clone destinations removed after transcripts. Temporary base checkout restored to fix/issue-24504 at requested head; git status clean. An accidental ordinary clone at /home/ubuntu/large was verified synthetic and removed. Browser-only overrides restored. No committed scratch. Raw evidence remains in /home/ubuntu/issue-24504-evidence.

## FRICTION category|happened|avoidance

- infrastructure|Raw target loopback fetch failed credentialed CORS: `Failed to fetch remote environment endpoint http://localhost:15838/.well-known/t3/environment (HttpClientError: Transport error (GET http://localhost:15838/.well-known/t3/environment)).` 127.0.0.1 also failed.|Start target with --dev-url matching source Vite origin, then pair normally; no invented pairing.
- fixture identity|Filesystem-path origin does not expose clone target.|Serve local bare remote over reachable git:// and restart source after identity change.
- browser selectors|Invalid input selector and early directory-picker action caused timeouts; Enter once caused an ordinary default clone, excluded from proof and cleaned.|Use settled snapshot role locators and wait for directory response/trailing slash before Add.
- synthetic state|Unmounted query atom reset the first initial-error fixture.|Set error after dialog mount; retain failed attempt and separate successful proof.

## Reproduction and public safety

seed.py, drivers.md, contract-driver.mjs and synthetic-query-driver.js describe fixture and runtime drivers. H/I are in-memory synthetic overrides, never implementation edits. Every text file was inspected/scanned for credentials; image/video frames inspected; no pairing screens or auth tokens captured. The harmless .env appears only as synthetic fixture text, never a credential file upload. See secret-inspection.json. Prior parent captures/runtime and matrix are retained distinctly, not claimed as this run's head proof.

## Public artifacts

- [base-initial-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0f71a91493dc81a2/base-initial-1440-dark.png)
- [base-initial-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/16aaeb27d1f648ac/base-initial-1440-light.png)
- [base-initial-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b86484c6d07f2e3a/base-initial-390-dark.png)
- [base-initial-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1f48149208310781/base-initial-390-light.png)
- [caller-layout-reset.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d2d3c5388d141e0c/caller-layout-reset.mp4)
- [capture-inspection-sheet.jpg](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/abe0ab90e3cfbb1d/capture-inspection-sheet.jpg)
- [cleanup.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2ac38e12f7c33b19/cleanup.json)
- [clone-cap.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/54f97454d03ece3c/clone-cap.json)
- [clone-compatibility.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/af50a69e421f3001/clone-compatibility.json)
- [clone-three.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3f5882cf84b9d715/clone-three.json)
- [contract-driver.mjs](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/08d6e5fcd35a23c2/contract-driver.mjs)
- [contract-results.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/80ce1ebfb20b5dca/contract-results.json)
- [diff0-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/87109ffd5b1a8c47/diff0-1440-dark.png)
- [diff0-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5894e7cead39fcb6/diff0-1440-light.png)
- [diff0-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e415697d111ef0ce/diff0-390-dark.png)
- [diff0-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3a09f5a9ba3b76d0/diff0-390-light.png)
- [drivers.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/02907ce12f4bdf63/drivers.md)
- [final-runtime.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3b6411a08b0d198c/final-runtime.json)
- [head-cap-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a22c6197c69ad766/head-cap-390-dark.png)
- [head-cap-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6e8dba088be7079b/head-cap-390-light.png)
- [head-empty.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/aa6e8572a47bdbaa/head-empty.png)
- [head-initial-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7f742e9eb7d97886/head-initial-1440-dark.png)
- [head-initial-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d9fef7bd3681387a/head-initial-1440-light.png)
- [head-initial-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/be3ba7507080801c/head-initial-390-dark.png)
- [head-initial-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1fd7321d2de3c69a/head-initial-390-light.png)
- [head-search-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d8cd71bb351a8460/head-search-390-dark.png)
- [head-search-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/21cf56487500ea33/head-search-390-light.png)
- [head-small.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/37703b6dd3cf0841/head-small.png)
- [main-all-200.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d1ecc22840141731/main-all-200.png)
- [main-cutoff.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2b6212fc5fae6150/main-cutoff.png)
- [opening.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/513be8ee87d85d35/opening.mp4)
- [pixel-diff-metrics.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dd427e1cf8c8121d/pixel-diff-metrics.json)
- [proof-matrix-pass1.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b4a69eb5b61fe11d/proof-matrix-pass1.md)
- [recording-inspection-sheet.jpg](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7281565e72b89fbe/recording-inspection-sheet.jpg)
- [recording-metadata.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b468373b8437ef3f/recording-metadata.json)
- [runtime.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6e305e920da32509/runtime.json)
- [search-copy-three.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/af58b526db032374/search-copy-three.mp4)
- [search-enter-debounce-zero.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/774806f8ba05a8fe/search-enter-debounce-zero.mp4)
- [secondary-runtime.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d86d97934ea5bfbd/secondary-runtime.json)
- [secret-inspection.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1dfbf747d1ff9bed/secret-inspection.json)
- [seed.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8f6c009861990ae7/seed.py)
- [selection-cap-copy.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/595a89e7064d772e/selection-cap-copy.mp4)
- [synthetic-initial-error.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e243eeee9341fe2e/synthetic-initial-error.mp4)
- [synthetic-no-listing.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/08e05377b20fa89b/synthetic-no-listing.mp4)
- [synthetic-older-listing.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/79c8f32bedf94a6f/synthetic-older-listing.mp4)
- [synthetic-query-driver.js](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/031a4a39d7e45d89/synthetic-query-driver.js)
- [synthetic-query-states.mp4](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5921320e8a474b12/synthetic-query-states.mp4)
- [threshold20-1440-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f7a9fa3bd8836591/threshold20-1440-dark.png)
- [threshold20-1440-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5f50df884f570e9c/threshold20-1440-light.png)
- [threshold20-390-dark.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/486f038f0c14f16b/threshold20-390-dark.png)
- [threshold20-390-light.png](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2e52b5835e21bb11/threshold20-390-light.png)
- [ui-runtime.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0e1419abb1e895ec/ui-runtime.json)
- [verification.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/61dbb0e0f69f5898/verification.txt)
