# Independent proof audit, pass 2

Final audit at 09:23 UTC; final public index reconciled. Target [#22585](https://git.cafe/pingdotgg/t3code/pulls/22585). After [bfd730292a](https://git.cafe/pingdotgg/t3code/commit/bfd730292addd6225b4d5a63f2d166ad4f190710), baseline [955b4cc801](https://git.cafe/pingdotgg/t3code/commit/955b4cc80166fd0bfd01fe2ec40285bd755f986f). Read-only production inspection in `/home/ubuntu/wt/pr-22585`; no source/ops edits, pushes, PR comments or watches. The sole device operation was the expressly handed-over independent reproduction; the device was returned at 08:57 UTC. No builds submitted, no server/backend started.

## Findings first

1. **Required evidence is incomplete.** All 234 initial v3 states exist on both sides, but an initial screenshot is not proof of offscreen tokens, focused/expanded thread composers, actual wide viewports, lifecycle transitions, selection/copy or destination return. There are now 397 matched v3 pairs and 8 matched v4 pairs; 78 before-only extra/diagnostic pages are not paired proof. Extra pages are audited below; no missing row is waived. Android M1/Z1 is expected unverified and does not block this iOS audit.
2. **Known immutable fixture gaps remain F2, N1, G2 and X1.** F2 provides file sizes 0/2048/123456789 and one long 2048-byte filename, not the requested image-size and long-label-per-size variants. Its “no size” case is a missing record, not a known record without a size. N1 lacks supplied-empty-list and custom high/low/unparseable accents. G2 has no deterministic remote-pending/load gate or observed pending→loaded/revision intermediate; stage/cache labels alone do not prove these. X1 has no controlled initially absent→settled document assets: pinned pending rasterizer atoms never release.
3. **The real thread-composer coverage remains distinct from NewTask.** Initial C1/P1/P2/F1 composer captures are collapsed and expose only the first token. NewTask visible, focused and scroll captures (42 named paired pages acknowledged separately) and the unchanged-draft light→dark→light first-image sequence are useful proof of their own states. They cannot replace C1's expanded/focused thread-composer atlas or its actual collapse/expand interaction. Keyboard-covered diagnostics are not readability proof.
4. **W1 wide is not captured.** Every inspected “landscape” screenshot is still 1170×2532 portrait, even when the controller says it rotated. Neither relabelling nor rotating a PNG establishes the required different available width. W2 does use actual native accessibility-medium, but offscreen long chips and complete composer coverage need visible pages; app fontSize=22 is only supplemental.
5. **P3's helper is scene-state coverage, not incremental streaming proof.** It opens streaming then remounts the settled scene. It does not demonstrate native streaming→settled behavior on the same evolving message.
6. **Readability claims must be scoped.** The current dark iris user-bubble capture has solid background `#4b3d72`; element/preview `#b87501` measures 2.527:1, thread `#009c96` 2.804:1, skill `#b261be` 2.420:1 and review `#8a70dd` 2.463:1. Nearby prose is 9.219:1. These are existing dark-theme colors, not an alleged new regression; they contradict an unqualified all-theme 4.5:1/readability claim. Light-surface source tests are not native visual proof for every theme.

## Provenance and independent reproduction

The local hashes independently match the named immutable archives:

- Base fixture gzip `909f1369d4e742411630dc94b6ac6349d83085b205708274987059244dfdd1da`, fixture source `7d1650ea51f81a4000937f5c76d31221f1c89ac2`.
- V3 supplement `1b163126bbaa361d8448498e87b795a508b7413321c0ae2a4552016ac13faf51`; before build `5a29b46c-38f5-4412-a358-b5713b7b623e`, after `c9bf6efc-151d-4a5d-bbb2-854f76f09057`.
- V4 supplement `cf24e99e7716078dcb49e2e2939cfdfc9bc0e95e97ce849dd222e1ca5445041d`, K2 excerpt/isolation only; before `b2371778-7494-4477-bccc-c4de8e37dfad`, after `d4415978-2a0a-46ca-8509-56b3014632c3`.

The uncompressed base tar `a9640291…` is a different artifact and was not confused with the supplement. Both prepared snapshot manifests name the exact requested production/baseline sources. All 17 changed production files in those snapshots match their respective Git blobs; neither fixture archive overlaps those changed files. EAS `gitCommitHash:null` is honestly disclosed for these no-VCS builds. Installation logs name the exact v3 artifact. The baseline rasterizer no-op adapter is disclosed. Historical `/tmp/22585-captures` native pairs are excluded from current-head proof.

Independent reproduction used the exact installed after-v3 artifact and immutable seed, without a new build. At explicit exclusive handoff, verified session IN_PROGRESS; relaunched `U1-1`, t3-code/light, fontSize16; waited for the resolved native fixture header; captured with the delivered DPR3/scale1/status-bar-normalization flags. Environment: iPhone17e, iOS26.5, 390×844 logical, 1170×2532 native pixels, OS text-size large, portrait, keyboard hidden. No settings changed.

**Product pixels reproduce exactly.** Full RGB: 1,438/2,962,440 pixels differ, 1,408 above8/255, maximum216; all lie in battery/charging bbox `[1046,55,1102,93]`. Below y=160: **0/2,775,240 changed pixels**, max0. This is an OS-glyph delta, not anti-aliasing or a product mismatch.

[Independent native recapture](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/2c88c92117749870/22585-audit-recapture.png), [exact action log](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/5050819795ec0821/22585-audit-recapture.json), [pixel delta](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/21e3c70a99cb6dce/22585-audit-pixel-delta.json).

## Row audit

Counts below are initial matched v3 pages, not sufficiency. T means all six named themes in light/dark; B means t3-code light/dark. Every matrix row is retained. PARTIAL names a remaining requirement; COVERED accepts only the stated capture combinations. Statuses assess delivered pixels/logs and the final index. COVERED is limited to the exact stated combinations and makes no broader readability or imagery-preservation claim.

| Row | Initial pairs | Current status | Required case / precise remaining limit |
|---|---:|---|---|
| U1 | 24 | COVERED | Two visible atlas pages × T; all ten context kinds. |
| A1 | 24 | COVERED | Two assistant pages × T; no-record context, skill and file controls visible. |
| C1 | 36 | PARTIAL | Collapsed first chips/plain control exist × T; expanded/focused thread-composer full atlas remains unreadable/occluded. |
| P1 | 24 | PARTIAL | User five-state atlas × T visible; thread-composer five states not all visible. NewTask PR × B is separate. |
| P2 | 4 | PARTIAL | User PR/review styles visible × B; full composer states not visible. |
| P3 | 6 | PARTIAL | User/assistant/static streaming states × B; real same-message incremental streaming→settled missing. |
| F1 | 12 | PARTIAL | User/assistant file/MIME pages × B exist; composer pages expose first token, not all seven branches. |
| F2 | 4 | PARTIAL | Image-size and long labels per size absent; known absent-size not seeded. Visible composer-size variants incomplete. |
| N1 | 6 | PARTIAL | Unknown/missing/no-record screenshots exist; supplied-empty-list and custom-accent supplement missing; complete composer view missing. |
| M1 | 0 | UNVERIFIED — permitted | Actual Android Material You outside iOS authorization; frozen iOS palette is not Android proof. |
| E1 | 2 | COVERED | Real FileMarkdownPreview × B, including visible top/bottom scroll pages. |
| E2 | 16 | PARTIAL | Screen/grouped/note/clipped/repository/attention/live-description scenes × B exist; actual description/timeline expansion and restoration exist. Narrow-note effective-width equivalence is not fully established. Long note link still fits one line; requested wrap is not demonstrated. Complete production-caller equivalence needs matching constraints/background/size/theme/opacity. |
| E3 | 4 | COVERED | Expanded/collapsed card × B plus actual expand/bottom/restore captures. |
| E4 | 4 | COVERED | Real nonempty/empty review bodies and surrounding prose × B. Final top-page pair is aligned and shows body plus prose before/after; earlier retry shell-title noise is disclosed in the inventory. |
| C2 | 8 | PARTIAL | NewTask atlas/PR visible focused and scrolling × B acknowledged; existing-thread focus/expand/collapse proof remains separate and incomplete. |
| W1 | 6 | PARTIAL | Portrait chat/plain/collapsed composer exist × B. No genuine wide screenshot; expanded long-chip composer/suffix cases incomplete. |
| W2 | extra | PARTIAL | Actual OS accessibility-medium readback and chat/NewTask images exist × B; long-chip pages and full composer outcome incomplete; native editor text retains16pt while surroundings scale in sampled frame. |
| T1 | 2 | COVERED | Loaded project favicon in user context, user raw thread and assistant raw thread paths × B. |
| T2 | 8 | COVERED | Emoji, one/two-glyph monogram and lucide fallback in all three inline paths × B. |
| T3 | 8 | COVERED | Normal/punctuation/digit/recognized-placeholder inline paths × B, using v3 supplemental seed. |
| T4 | 10 | PARTIAL | Missing thread, scratch, blank, pinned pending/failed paths × B exist; separate shell-found/project-missing branch setup is not seeded/proved. |
| T5 | 4 | COVERED | Remote context/raw alias and renamed snapshot × B. Explicit context label intentionally stays fixed. |
| G1 | 2 | COVERED | Initial and bottom pages show all18 colors × B. Source preservation is not same-main imagery pixel equality. |
| G2 | 2 | PARTIAL | Native absent→placeholder→invalid-data→loaded→revision→blank-title sequence and cache readbacks exist. Remote pending is not gated; already-loaded revised image does not expose the fallback/intermediate or rule out stale imagery. |
| G3 | 14 | PARTIAL | Sizes15/18/20/24/48, real screen/sidebar pending/card/slim rows and Settings exist. Screen/sidebar top/middle/bottom pages expose selected/unselected/card/slim states × B. Grouped new-task24 is not the regular20 list; intrinsic24 grid does not prove its wrapper. |
| K1 | 2 | PARTIAL | Queries expose selected project variants, but adjacent generic-symbol rows are threads, not unselected project rows. Required unselected project variants remain unproved. |
| K2 | 2 v3 | PARTIAL | Actual action/detail/empty/query pages exist. V4 eight paired pages prove real user+agent excerpts and leave/subsequent-normal-palette isolation × B. Complete selected/unselected/index8-versus9 sequence still incomplete; dark index-bottom extra is before-only. |
| X1 | extra | PARTIAL | Visible first-image unchanged-draft light→dark→light sequence both sides acknowledged. Controlled initially absent→settled document assets missing. |
| X2 | extra | PARTIAL | Native terminal sheet open/close and context-menu Copy action exist × B. All clipboard readbacks failed; dismissal does not verify copied payload. File/mention/thread destinations+return and inert collapsed composer expansion remain unproved. Route registration alone is insufficient. |
| Z1 | 0 | UNVERIFIED — permitted | Android generic native composer/enriched path not run; does not block this authorized iOS audit. |

## Diffs and change inventory

Diff0 is absolute RGB delta ×32, clamped, no threshold; Diff8 includes pixels whose maximum RGB-channel delta is strictly >8/255, then amplifies ×32. Independently recomputed 12 representative pairs and compared both generated PNGs and changed0/changed8 statistics: no discrepancies. Mechanical reconciliation: all 397 matched v3 pairs and all8 v4 pairs have statistics plus both Diff0 and Diff8 PNGs, with no missing matched-pair outputs. The 78 before-only extras have no accepted paired comparison. The final public index has the same 397 v3 +8 v4 totals, thresholds, exact sources and separate v4 sheets. Its “what else changed” list discloses inherited lower-layer changes, preliminary navigator residue, focus/scroll diagnostics and OS glyph/caret/keyboard differences. This is consistent with inspected examples; not every pixel difference has been manually classified.

Sample A1-2/t3-code/dark has zero product changes; its delta is status-bar-only. U1 light and PR-state light visibly darken labels and tintable symbols. Main-baseline→head also includes inherited inline project images, monogram fallbacks and palette plumbing; this pair is not a contrast-only lower-layer control. No claim of project imagery being pixel-identical follows from source preservation. Status glyphs, navigator-title residue, selection/keyboard state and scroll-offset differences must remain in the final “what else changed” inventory where present. A screenshot of an unavailable offline destination proves that state, not fetched payload content.

[Final evidence index](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/a086cbbdfefc35cc/evidence-index.md) and [capture inventory](https://gh-file-drop-api-prod-mi5fy3sowv63ufte.pinglabs.workers.dev/f/8c861084b89e009d/capture-inventory.json) retain all required rows and explicitly disclose incomplete coverage. All 30 named matrix rows are retained above, including the two permitted Android limits. Parent reports CI green; this audit did not watch CI. Both simulators were stopped by their owner after captures; no ownership remains with this auditor.

The accepted NewTask focused/scroll pages and visible unchanged-draft theme round trip do not close separate ThreadComposer or controlled delayed-assets requirements. V4 closes excerpt/isolation only. Required missing combinations remain in each PARTIAL row; none is waived.

VERDICT: INSUFFICIENT C1 P1 P2 P3 F1 F2 N1 E2 C2 W1 W2 T4 G2 G3 K1 K2 X1 X2