# PASS2 proof audit

No blocking defect found in available proof. This is evidence sufficiency with the explicitly accepted unavailable-surface exceptions, not an assertion that all eight rows ran.

Target base: 70e5e384dab96a1d1e4a253ee5a9415ed5d8ce30. Target head: 1f1e8c635ad8a840bc366b031579473811ff2cad. Implementation: fabd3341d8d27068e86e2b80854031a880e7a727. Origin https://git.cafe/pingdotgg/t3code.git. Implementation-to-target-head adds only the committed fixture. Base-to-target-head changes classifier/tests plus fixture (12 files, 224 insertions, 1 deletion). A concurrent external fixture-only commit advanced the shared worktree to c7a89c4d15aa32f073a6116097bd16e68ee5d13b during audit; the final rebuild used an archive of the requested head, not that later commit.

All 256 local SHA256 hashes and all 256 downloaded public artifact hashes match the manifest. All 62 base/head full-surface pairs have exact recomputed threshold0 amplified8 and threshold16 amplified8 diff images (124 diffs total). Inspected all row-condition contact sheets and recording checkpoints using FFmpeg presentation timestamps, not OpenCV frame-index seeking. Public matrix, evidence report, and manifest bytes also match local originals.

Every available row was checked base/head at CSS 1440x900 and 390x844, light/dark. Desktop snapshots save at 1280x800 by tool downsampling; narrow snapshots save at 780x1688 DPR2. This is a narrow desktop browser, not native mobile. Recordings retain 2880x1800 desktop or 780x1688 narrow. Font default100%, root16px, Chrome154 Linux, frozen Date2026-10-01T12:10Z, seed12:00. Fixed app themes; no baked VITE origins.

| Row | Status | Observations in all four conditions |
|---|---|---|
| S1 assistant | PASS | Spreadsheet-like/unknown-name suffixed tokens become complete plain code; explicit paths, extensions and known names remain chips. Independent other/TODO target remains valid while its collision label loses the now-unnecessary parent suffix. Fences unchanged. |
| S2 expanded user | PASS | Same classification and literal preservation; narrow top/bottom frames cover wrapping. Small light narrow breadcrumb raster noise disclosed. |
| S3 workspace Markdown | PASS | Nested docs/proof.md resolves retained explicit relative/root controls; intended tokens become plain. No unexpected horizontal overflow. |
| S4 attachment/no cwd | PASS | Relative candidates plain in both versions; absolute options control retained. Attachment content stable. Narrow overlay background composer shifts; this is capture state/layout noise, not AA and not attachment content change. Desktop top-right tiny chrome noise remains. |
| R1 pointer interactions | PASS within available scope | Options copy path; spreadsheet hover/right-click; select/copy/paste unsent; explicit ./bin/run opens line12; authored other/TODO opens line12. Full literal copied on head vs chip label on base. External editor/modifier launch and native touch/longpress unavailable, not verified. |
| R2 find | PASS | Full I/W217:220 base2/head7; full foo/TODO base2/head12; partial TODO25; README5 retained. Next/previous/wrap, user/assistant/fence/plan reveal, partial query, clearing and Escape observed in eight recordings. |
| R3 genuine streaming | UNVERIFIED—unavailable | No supported live replay route. Projection seeding cannot demonstrate provider streaming; no fake DOM accepted. |
| R4 Electron | UNVERIFIED—unavailable | Electron surface unavailable on VM; native/editor behavior not inferred from web. |

TODO:12 was plain on both base and head: original matrix candidate was imprecise, not a regression. docs/README remains the positive known-name control. Native mobile classifier helper is inactive per source review, so no native capture was required for it. Visible extra changes are consequent wrapping, block heights, scroll positions, collision label shortening, and composer/translucent background state; no unexplained content loss found.

Eight R1/R2 videos have written timestamp narration. Actions and terminal states match. Narration timestamps are action/report markers, not exact frame boundaries: for example base390dark actual paste is visible 7.8–9.2s and cleared by9.4s although its 'Actual pasted value' marker is9.7s; head390dark text appears8.05s and clears by8.3s marker. This is a subsecond timing imprecision around report/clear, not missing copy evidence. Final video frames confirm find dismissed. The supplied 62 still pairs and all eight video checkpoints were visually reviewed; unavailable interaction branches remain excluded.

## Independent exact-head rebuild

Final capture: exact-rebuild.png, compared with evidence/head-1440-light-S1-top.png. One affected scenario rebuilt: S1 desktop light. No source edits.

Archived all tracked files at requested head into /tmp/issue-22181-pass2-exact; all 28110 blob hashes match that git tree, including symlinks. Reused installed node_modules through dependency links. Before seeding, own ports16733/24773 were clear and own earlier server stopped. Ran committed original seed.py into isolated /home/ubuntu/wt/issue-22181/.t3/evidence, never live userdata. Synthetic workspace files came from committed fixture.

Launch in archive: T3CODE_PORT_OFFSET=11000 ./node_modules/.bin/vp run dev --home-dir /home/ubuntu/wt/issue-22181/.t3/evidence --auto-bootstrap-project-from-cwd=false. Server24773/web16733. Route /bfaec7d1-0d5a-4d74-a55b-121eea835e0d/proof-22181. T3 preview tab, CSS1440x900 DPR2, light fixed, frozen Date, fonts ready, sidebar/details closed, notification dismissed, neutral pointer, assistant y51, scrollTop335.

Result full surface1024000 pixels: threshold0 295 pixels =0.02880859375%; threshold16 zero; maximum channel difference2; mean absolute channel difference0.00019889322916666666. Residuals follow glyph edges, consistent with antialias/raster rounding; no real content/layout delta. See exact-rebuild-diff0.png and exact-rebuild-diff16.png. Earlier aligned capture from the concurrently advanced checkout was excluded as final proof; exact archive capture reproduced the same statistics.

Stopped captured own server session47463 (Ctrl-C exit130); ss confirmed both own ports clear. Earlier own session13702 also stopped. Preserved lead processes; never killed by pattern. No source edits, commits, push, forge comments, PR, or delegation. Worktree status clean at end.

FRICTION category | happened | avoidance
PATH | vp absent from shell PATH | use installed ./node_modules/.bin/vp
VFR decoding | OpenCV timestamp seeks selected wrong frames | use FFmpeg actual presentation timestamps
Concurrent workspace change | external fixture commit advanced HEAD mid-audit | archive requested commit and verify every tracked blob
Archive dependencies | scripts dependency link initially missing | reuse existing installed dependency links including scripts
Timestamp precision | narration marker may follow visible paste by ~0.5s | use observed frame intervals for exact replay

VERDICT: SUFFICIENT
