# Linux launcher dispatcher evidence — takeover [#8668](https://git.cafe/pingdotgg/t3code/pulls/8668)

Source: baseline [3cc31ed](https://github.com/pingdotgg/t3code/commit/3cc31ed27c8956b36cee35a50509fb7c6869592b), replacement [f42e44a](https://github.com/pingdotgg/t3code/commit/f42e44a1e5b3508add3ab8818e0b8e3956e39a57). [#8668](https://git.cafe/pingdotgg/t3code/pulls/8668), mirrored [#8668](https://github.com/pingdotgg/t3code/pull/8668).

Environment: Ubuntu 24.04.5 LTS, Linux 6.1.102 x86_64, real Electron 44.9.3 / Chromium 152.0.7977.167, Xvfb 1440×1000×24, D-Bus, GNOME/GIO xdg-open dispatch. All HOME/XDG/T3 state starts empty under /tmp/ev-8668; development uses T3CODE_DEV_SEED=0 and --no-seed. No live ~/.t3/userdata access.

Timestamped transcripts are the interaction recordings. They contain full generated entry bytes, hashes, Exec, desktop-file validation, both scheme-default queries, real pre-ready and normal-writer breakpoints, packaged/development state, original PID, xdg-open status, wrapper argv, and exact original-PID second-instance observations. No screenshots are used as launcher proof.

## Selection matrix

PASS below means real packaged production runs on both pinned desktop bundles, complete early/final equality, automatic default query, valid entry, and exact URI received by the original running PID. L is a forwarding launcher with an internal space; A is a simulated APPIMAGE-path forwarding fixture; E is the real executable. This does not claim a mounted AppImage test.

| Row | Before → after target | Status | Before recording | After recording |
|---|---|---|---|---|
| S1 | E → L | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5e9653489ed72cdb/before-S1-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/89d0c83061313bd5/after-S1-packaged-final-transcript.txt) |
| S2 | A → L | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f334ed0a13359996/before-S2-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/ebb27f49805ae8e5/after-S2-packaged-final-transcript.txt) |
| S3 | E → L | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5e54c77337bd8532/before-S3-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8032cef8a80ba0e7/after-S3-packaged-final-transcript.txt) |
| S4 | A → A | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6a2b9a56d893f470/before-S4-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b212c56eaab7f0d7/after-S4-packaged-final-transcript.txt) |
| S5 | E → E | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f7ce87de7eeec0f3/before-S5-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fffc4d0b4db195f1/after-S5-packaged-final-transcript.txt) |
| S6 | E → E | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/dc943019504e16ef/before-S6-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0823d2b03629711a/after-S6-packaged-final-transcript.txt) |
| S7 | A → A | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3a0f20e525eece2f/before-S7-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4a6d26b0f890a91c/after-S7-packaged-final-transcript.txt) |
| S8 | E → E | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fbfc95d807e93e4c/before-S8-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d49a8c8504ae9058/after-S8-packaged-final-transcript.txt) |
| S9 | E → E | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9e117437a2e8a001/before-S9-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fca12c17fc1d7f55/after-S9-packaged-final-transcript.txt) |
| S10 | A → A | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4f05a8277047e604/before-S10-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a45252f9b51bd8bc/after-S10-packaged-final-transcript.txt) |
| S11 | E → E | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b42b6d49f538e4e0/before-S11-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0f1e79d69b96f81c/after-S11-packaged-final-transcript.txt) |
| S12 | E → E | PASS | [before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3e6f0ee7e2d391a4/before-S12-packaged-final-transcript.txt) | [after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/48c820805b952239/after-S12-packaged-final-transcript.txt) |

Empty-APPIMAGE aliases were executed explicitly on both bundles: [before S3](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8ce6928079303220/before-S3-packaged-final-emptyA-transcript.txt), [after S3](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a087d66b918182b9/after-S3-packaged-final-emptyA-transcript.txt), [before S6](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b78179af7affc379/before-S6-packaged-final-emptyA-transcript.txt), [after S6](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/227ba1454db5524e/after-S6-packaged-final-emptyA-transcript.txt), [before S9](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7ec800101bf8ab45/before-S9-packaged-final-emptyA-transcript.txt), [after S9](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/9848260141c3444c/after-S9-packaged-final-emptyA-transcript.txt), [before S12](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f3f0a38742554fa7/before-S12-packaged-final-emptyA-transcript.txt), [after S12](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c8314ed06ca2aa9c/after-S12-packaged-final-emptyA-transcript.txt).

## Lifecycle and scope matrix

| Row | Status and evidence |
|---|---|
| P1 | PASS: all packaged production S1–S12 above naturally report isPackaged=true, production t3code scheme, Icon present, automatic default registration, and exact original-PID delivery. |
| P2 | PASS expected behavior: naturally unpackaged production has no Icon. The prior statement that its post-start queries start empty was false: they return the production desktop filename. Fresh correction below records genuinely empty pre-app queries, the normal writer return, and separate OAuth registration; manual default follows those observations. [S1 before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fb89e13fc2ae35be/before-S1-unpackaged-context-proof-transcript.txt) reproduces the shared-Electron missing-app failure and an empty event array during eight seconds; [S1 after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4afe4b615214a00d/after-S1-unpackaged-lifecycle-retake-transcript.txt) delivers the exact URI through L. [S5 before](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/33a91f4da9952b65/before-S5-unpackaged-lifecycle-retake-transcript.txt) and [S5 after](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/df91f424d58be53a/after-S5-unpackaged-lifecycle-retake-transcript.txt) preserve the E fallback and its known no-app-argument dispatch failure. |
| P3 | PASS expected behavior: real Vite/server [HTTP readiness](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/13b308bbcd7ac81e/public-readiness.txt); unpackaged development uses t3code-dev, development filename, no Icon, and no registration by the normal Linux writer. Whole-app no-registration was not established by the older transcripts; fresh correction below observes the separate OAuth registration. [before S1](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6b5033d4f1a1b610/before-S1-development-lifecycle-retake-transcript.txt), [before S5](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c887070b6c91b17e/before-S5-development-lifecycle-retake-transcript.txt), [after S1](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4cc3e668620b0d26/after-S1-development-lifecycle-retake-transcript.txt), [after S5](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e63ede24f8c30910/after-S5-development-lifecycle-retake-transcript.txt). Before/shared fallback fails with missing app as expected; after S1 delivers exactly. |
| P4 | PASS focused unusual configuration: [packaged development S1](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f19c54c0da5cc5fa/after-S1-packaged-development-lifecycle-retake-transcript.txt) naturally reports packaged=true and development=true, includes Icon, automatically registers t3code-dev, and delivers exactly. Baseline P4 was not separately executed. |
| W1 | PASS: ordinary matrix runs pause after the real synchronous early write with app.isReady=false, then before normal read and after normal completion. Full early/final bytes and mtime_ns/inode are preserved; no truncation. |
| W2 | PASS: [seeded stale entry → corrected early/final bytes](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/eadcf97280a90c68/after-S2-packaged-lifecycle-retake-stale-transcript.txt) records old bytes and SHA before launch, then current selection in both writers. |
| W3 | PASS: remove ONLY the private entry at the real normal-read breakpoint; the unmocked normal writer recreates full identical bytes. [override L](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4e41e02a74e56c03/after-S1-packaged-final-recreate-transcript.txt); [APPIMAGE fallback A](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/139e0ee1e93921a0/after-S4-packaged-final-recreate-transcript.txt). |
| W4 | TEST/SOURCE: [19 focused tests passed](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/d26a261b4dab29cc/focused-tests.txt) and [unchanged best-effort branches](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f110c5d828e75b28/source-review.md). No real OS failure-injection claim. |
| W5 | PASS: [first launch with L](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2fef0b9fcc4b89cc/after-S1-packaged-lifecycle-retake-transcript.txt) then [restart same private HOME/XDG/T3 with override removed](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/901963c589c6565d/after-S5-packaged-lifecycle-retake-transcript.txt) select E, with original first PID reaped before restart; no sticky L. |
| X1 | SOURCE REVIEW: Linux guards in both writers; no Windows/macOS runtime execution. [scope review](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f110c5d828e75b28/source-review.md). |
| X2 | N/A: no renderer, contract, provider, transport, other action entry point, or relay/tunnel change. [scope review](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f110c5d828e75b28/source-review.md). |
| X3 | N/A: no visual rendering change; viewport/theme screenshot grids do not prove dispatcher selection. |

## Artifacts and provenance

- [Full primary matrix recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f07e11dbe7205ae7/matrix-transcript.txt)
- [Corrected lifecycle recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/71860840d08d8d21/lifecycle-retake-transcript.txt)
- [Corrected shared-Electron baseline recording](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/7911905177d164a7/shared-context-transcript.txt)
- [Desktop/runtime/shared-assets SHA256 manifest and environment](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/309f61ec7d3b8988/provenance.json)
- [Natural packaged/unpackaged staging](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/87d799249d1ecb21/staging.json)
- [Machine-readable result inventory](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/f3c01693ca1a950d/assessment.json)
- [Lead pinned-build provenance driver](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/88865fb4a9a6e33e/build-pinned.py)
- [Installed xdg-open GNOME/GIO route](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/bbf841fc08686547/dispatch-backend.txt)
- [Downloadable safe evidence bundle](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/08610ee35f57a520/safe-evidence.tar.gz)

All drivers and generated forwarding wrappers were individually uploaded with ghdrop -m; see the driver inventory linked alongside this index. Raw private databases, browser profiles, dev startup logs, credentials, tokens, and full environment dumps are excluded.

## Limitations, changes, and FRICTION

There is no remaining Linux launcher-selection defect found in the exercised matrix. No actual AppImage mount/installer test, Windows/macOS runtime test, or real-OS failure injection is claimed. The unusual packaged-development row is replacement-only. These limits are explicit rather than silently omitted.

Four shared-runtime rows ending unpackaged-final in the primary matrix transcript are SUPERSEDED, because the initial inspector globals lived in Electron’s replaced startup context. Their event absence is not proof; corrected rows above install the observer in the actual main context. Those old rows also compared a symlink spelling against process.execPath’s canonical spelling and emitted selection=false; the corrected driver canonicalizes E. Do not interpret these discarded driver diagnostics as implementation failures.

The first lifecycle development attempt lacked T3CODE_PORT and failed startup; lifecycle-retake supplies private backend 48931 and supersedes that attempt. Other pilot friction: an executable named electron naturally reported unpackaged even with resources/app; copying the byte-identical real executable under t3code-proof made the staged packaged fixture natural. The first keyring-backed pilot opened a prompt; all accepted captures explicitly use --password-store=basic. A Python splitlines off-by-one initially missed the normal-read breakpoint; accepted captures use physical newline counting and record exact paused locations. Failed pilots are not evidence for PASS.

What else changed: no tracked production/test files, commits, pushes, comments, watches, or delegated work. Only ignored dist-electron was temporarily swapped from pinned copies and restored in finally blocks. The external staged executable was added under /tmp/to-8668; private state, drivers, and public evidence live under /tmp/ev-8668. Captured original PIDs/groups were stopped and reaped; the private dev runner was stopped by its captured group. Final cleanup/status evidence accompanies the bundle.

Valid completed runtime fixture count: 47. Every selection in accepted results matches its expected target. Shared-runtime E failure is expected and explicitly recorded; packaged E controls deliver.

Final [cleanup/status audit](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4ab12910b22be71e/cleanup.txt).

## Fresh P2/P3 correction — accepted runtime retakes

The earlier P2 statement that post-start queries “start empty” was false. All eight fresh fixtures start with both scheme queries empty **before app launch**. After the early entry exists, the relevant scheme query returns the generated desktop filename even while private default files are absent: installed xdg-mime infers a handler by scanning MimeType. That nonempty result is preserved, never relabeled empty.

There is a second, independent fact: unchanged Clerk OAuth setup calls Electron app.setAsDefaultProtocolClient before the normal Linux writer. Pausing immediately before that real call finds no private default files; stepping over it creates config/mimeapps.list. The subsequent normal writer reaches its actual unpackaged return with isPackaged=false, steps out to its caller, never enters its setDefaultHandler (resolved nonpausing breakpoint, zero calls), and leaves the OAuth-created file unchanged through readiness and both post-start queries. The transcript’s initial-to-post-start “DEFAULT FILES UNCHANGED BEFORE MANUAL False” is expected and retained: OAuth changed them, while after-OAuth → normal-return → readiness snapshots are identical. All of this precedes the driver's marked manual dispatch prerequisite. Thus **no explicit registration by the normal Linux writer** is proved; **no explicit registration by the whole app** would be false. The Clerk source embedded in both pinned source maps has identical SHA256 834be351cbb6ed3f98d76d58c3c4010d6cc5b6b09297dc2d033bdbbbf7b2be0e. This is an existing behavior, not a launcher regression.

The matrix's literal “query starts empty and stays empty” was a faulty fixture/backend assumption. Correcting it preserves the implementation requirement (the unpackaged normal writer returns before its registration helpers), and does not expand launcher scope or change code. Earlier delivery/selection evidence and accepted rows remain linked above. This correction supersedes only the prior default-proof claims.

| Fresh fixture | Original PID | Entry/normal return/default attribution | Exact URI delivery |
|---|---:|---|---|
| [before-S1-unpackaged-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a5dc3b79bdde81c0/before-S1-unpackaged-default-proof-transcript.txt) | 2548293 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | no, expected shared-Electron missing-app fallback |
| [before-S5-unpackaged-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2283a702dadff0e4/before-S5-unpackaged-default-proof-transcript.txt) | 2549250 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | no, expected shared-Electron missing-app fallback |
| [before-S1-development-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6e3bb2f5700a8762/before-S1-development-default-proof-transcript.txt) | 2550424 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | no, expected shared-Electron missing-app fallback |
| [before-S5-development-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5177bb5d98ab6222/before-S5-development-default-proof-transcript.txt) | 2551215 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | no, expected shared-Electron missing-app fallback |
| [after-S1-unpackaged-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/33b88f6b9feec175/after-S1-unpackaged-default-proof-transcript.txt) | 2552006 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | yes |
| [after-S5-unpackaged-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/0b3422c0736d2e2b/after-S5-unpackaged-default-proof-transcript.txt) | 2552927 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | no, expected shared-Electron missing-app fallback |
| [after-S1-development-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2480b2bf02b3c930/after-S1-development-default-proof-transcript.txt) | 2553890 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | yes |
| [after-S5-development-default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/10a41aa853a8146f/after-S5-development-default-proof-transcript.txt) | 2554713 | PASS; both scheme queries, five default-file snapshots, real OAuth step-over, verified writer return, zero helper calls | no, expected shared-Electron missing-app fallback |

Every early/final desktop entry matches byte-for-byte and passes desktop-file-validate; selection matches each pinned bundle. P2 uses production filename/scheme with no Icon; P3 uses development filename/scheme with no Icon and a real isolated Vite HTTP 200. Only after-S1 delivers via the launcher in each mode; S5 preserves the known shared-runtime fallback failure.

- [default-proof-transcript.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b4fb1445449832a1/default-proof-transcript.txt)
- [default-proof-results.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/780cb7ac3668c85d/default-proof-results.json)
- [xdg-mime-fallback-source.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/82aa6bbee7e4d17b/xdg-mime-fallback-source.txt)
- [oauth-unchanged-source.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/69a3ee1caf6526bf/oauth-unchanged-source.json)
- [public-readiness.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/b70219a99ca6436a/public-readiness.txt)
- [capture-default-proof.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/6c939ced4746f1b6/capture-default-proof.py)
- [default-proof-session.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/c14e830fd9340975/default-proof-session.py)
- [default-dev-server.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/3a3fcb4f38a36898/default-dev-server.py)
- [verify-default-proof.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/fa76eca995f5d7bb/verify-default-proof.py)

### FRICTION and excluded attempts

- The first correction round (`*-default-correction`) truthfully found private mimeapps.list changed before manual setup, disproving its own driver's emitted unchanged-default interpretation. It is diagnostic only and excluded from accepted proof.
- The `*-default-attribution` pilot assumed OAuth followed the normal writer; actual ordering is the reverse. Its positional labels are invalid and the entire pilot is excluded. The accepted `*-default-proof` driver asserts actual breakpoint line locations, handles OAuth by location, and installs the event observer only in the real CJS main context. No failed/superseded transcript is presented as a passing fixture.
- Both attempts remain private and preserved; no prior evidence was deleted. The accepted driver observes real APIs, flags and outputs; no writer, packaged flag, registration output or dispatch result is mocked.
- Fresh empty HOME/XDG/T3 state only, T3CODE_DEV_SEED=0, isolated development runner with --no-seed; no live userdata access. Disk remained above 5 GiB; no fixture pruning needed. No code/test edits, push, comments, watching, delegation, browser or screenshots. The prior independently passing 19 tests are reused, not claimed rerun in this round.
- No mounted AppImage, installer, Windows/macOS runtime or OS-error injection claim. Timestamped transcripts are the nonvisual recordings.

## Corrected documents and cleanup

[matrix.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/4507978f3c097bed/matrix.md)
[source-review.md](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/e5d02a66352c4c29/source-review.md)

[default-proof-cleanup.json](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/14b6ae65952d8ae2/default-proof-cleanup.json)
[default-proof-verification.txt](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/1936c0fbce84f295/default-proof-verification.txt)
[cleanup-default-proof.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/70e6eaa6547927ad/cleanup-default-proof.py)
[write-default-correction-report.py](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/21316e1b4c228298/write-default-correction-report.py)