docs: record Boat restore verification and live cleanup evidence

2026-10-21 16:27:18 +02:00 · 2026-10-11 01:22:53 -05:00
1 parent 818f94594d
commit 3eeca3acfa
@@ -2,20 +2,22 @@

 **Experimental and unmerged. Local journeys and partial staging qualification passed on the sources below; final-source staging acceptance remains incomplete.** A successful build, probe, or earlier-source journey does not establish the remaining product conditions.

-## Current source boundary (2026-10-11 05:52 UTC)
+## Current source boundary (2026-10-11 06:13 UTC)

 | Surface | Source and evidence |
 | --- | --- |
-| Combined implementation | `9f5739046d66c83e6973d6b64e7bb1b98f42be30`, including the current-environment computer selection fix, safe rejection diagnostics, and pending-cleanup disconnect correction. The full recursive typecheck/build pass on `0421a3b8c0` remains historical; the later focused checks are recorded below. Fresh CI and review for this implementation were pending at the 05:48 snapshot. |
-| Core branch | `d0f7f6f57cb5c1fcf9f34eb2a3d79b564f5fa094`. Canonical Boat migration 0333 follows unchanged upstream 0332. At 05:48, exact-head Greptile was 5/5 with no unresolved threads; 44 checks passed, nine server lanes were pending, and four were skipped. This is not a full CI pass. |
-| Verified staging source | Deployment 20 verified `d50dd0f49befcbe53875ad3acad9a39381f4a89b` at 05:29:33.576 UTC through the official workflow. It preserves applied staging migration history and appends only the missing upstream index. Source verification alone does not establish current product acceptance. The native desktop/HMR successes below remain attributed to deployment19. |
-| Staging candidate | Deployment 21 of `388a16905b5d1924ce88a1fe550d0f65ebbaf00e` is pending. It includes the computer selection correction and Rust rejection diagnostics. The later staging branch `83ec986f599ff3bc1846d8198c727a8dd992f5fe` also contains formatting and the UI disconnect correction; those commits are not part of deployment21's pinned source. |
-| Local retry | Local42's corrected BOA19 cold and warm jobs passed, followed by a failed ordinary post-idle continuation at ACPX `session.open`. Local43 uses a compatible controller checkout and the new Rust diagnostic binary with the retained provider pack unchanged. Its retry remains diagnostic work; no new recovery pass is claimed here. The database's applied migration history and failed sessions remain preserved. |
+| Combined implementation | `818f94594db17bb3249cadc33fd7e26535102421`, including the current-environment computer selection, safe rejection diagnostics, pending-cleanup disconnect correction, and bounded Claude executable verification after restore. At 06:11, 54 latest-head checks passed and exact-head Greptile was 5/5 with no unresolved threads. One earlier duplicate workflow was cancelled; its replacement passed. |
+| Core branch | `6c2a0a2bd86ef411bbc0e273b179d5bc4f1a3733`. Canonical Boat migration 0333 follows unchanged upstream 0332. At 06:11, 54 checks passed, four were skipped, and exact-head Greptile was 5/5 with no unresolved threads. |
+| Verified staging source | Deployment21 verified `388a16905b5d1924ce88a1fe550d0f65ebbaf00e` at 05:54:57.175 UTC through the official workflow. It preserves applied staging migration history. An ordinary saved Codex turn succeeded, but its next continuation and automatic retry failed with `native_session_cleanup_quarantined` before provider work. Diagnosis remains open; no quarantine was cleared. |
+| Staging candidate | `991baf77cf891f3ac21aa26af7c060b4751a79df` additionally contains the disconnect correction and Claude verification fix. Deployment22 has not started. |
+| Local retry | Local44 uses compatible controller `441e88c09a4b16fd4f1403e6c4e813d00653edf5` and the qualified immutable provider pack `sha256:d7275d9204e60a0a5dcb8dc536da95e945e6b90b7bdfda964d82084895ec5952`. BOA20 passed cold and warm turns with the fixed pack; post-idle acceptance is pending. BOA19's earlier failed saved-session continuation and the database history remain preserved. |

-Staging19 establishes the main native runtime, desktop, and warm development journeys on its recorded source. The older quarantined local Claude session remains a failure. The corrected fresh Claude session passed cold/warm turns but then failed its ordinary post-idle continuation at provider session opening. Live sibling cancellation isolation remains unverified. The full local suite is not green; latest-head CI and final-source staging acceptance are still pending.
+Staging19 establishes the native runtime, desktop, and warm development journeys on its recorded source. Staging20 subsequently passed legacy Claude and a guided legacy Codex follow-up. Latest-head CI is green, but live final-source acceptance is incomplete and the full local suite remains **34,914 passed, 24 failed, 338 skipped**. Saved-session cleanup, corrected Claude post-idle continuation, and live sibling cancellation isolation remain open. See the dated observations below for source-specific evidence and failures.

 The [consolidated retry receipt](assets/2026-10-10-boat/evidence/retry-qualification-summary.json) preserves earlier sources, timestamps, failures, and receipt hashes. [Staging19 receipts](assets/2026-10-10-boat/evidence/staging19-live-evidence.json) contain the newer successes. A deployment proves serving source, not product acceptance. No provider stop was forced or cancelled, no quarantine was cleared, and no database history was reset or rewritten. Dated observations below retain their original cutoffs.

+Latest automated checks: [exact-head CI and review receipt](assets/2026-10-10-boat/evidence/ci-review-0611.json).
+
 ## Product outcomes

 Historical product observations in this table are UTC on 2026-10-10; the retry table gives its later dates. “Passed” applies only to the named observation; gaps remain explicit.
@@ -240,3 +242,18 @@ Local43 used the compatible controller checkout `f949f04482d7c583c50185706d41b62
 A normal Computer Connect enabled a read-only verifier probe. The first read rejected the retained Claude runtime executable as changed during verification. A bounded follow-up reproduced a ctime-only change while reading an untouched restored copy: device, inode, size, mode, mtime, and the expected full content hash remained unchanged. Repeating the exact retained verifier then passed. No provider command was opened, no file was replaced, and no authority or quarantine was reset. The viewer closed normally at 05:51. A bounded re-verification fix is under test; this diagnosis is not a live fixed-runtime pass.

 Evidence: [staging20 receipt](assets/2026-10-10-boat/evidence/staging20-live-evidence.json), [legacy Claude](assets/2026-10-10-boat/staging-20-legacy-claude-proof.png), [guided legacy Codex](assets/2026-10-10-boat/staging-20-legacy-codex-proof.png), [native desktop](assets/2026-10-10-boat/staging-20-native-computer.png), [preview baseline before interrupted edit](assets/2026-10-10-boat/staging-20-hmr-before.png), [rollout interruption](assets/2026-10-10-boat/evidence/staging20-21-rollout-interruption.json).
+
+
+## Restore verification fix and staging21 boundary (2026-10-11 06:04 UTC)
+
+Core `6c2a0a2bd86ef411bbc0e273b179d5bc4f1a3733` adds one bounded complete reread of the same no-follow executable descriptor after a ctime-only change. The first and second reads must both match the pinned digest. Device, inode, size, mode and mtime must remain unchanged, the second read must have stable metadata, and the later launch identity fence stays strict. Two new regressions failed before the change. The full integrity suite passed 77 cases with six existing platform skips; runtime/surfaces TypeScript and independent review passed. The fix is merged into combined `818f94594d` and compatible staging candidate `991baf77cf`. New immutable pack `sha256:d7275d9204e60a0a5dcb8dc536da95e945e6b90b7bdfda964d82084895ec5952` preserves old packs and is awaiting live qualification. [Read-only diagnosis and test receipt](assets/2026-10-10-boat/evidence/claude-restore-verification.json).
+
+Deployment21 verified `388a16905b5d1924ce88a1fe550d0f65ebbaf00e` at 05:54:57.175. It does not include the restore fix or latest environment Disconnect UI fix. The interrupted heading request persisted and run `d8aa39b4-b792-44c5-91d5-e88f7258e1e5` succeeded at 05:57:08 with a blocked task disposition because the required listener was absent; no source edit occurred. The next ordinary Vite-start request failed at bootstrap: run `47d76138-3533-4904-9285-0b3d873ea3bb` and automatic retry `ddce73cb-d592-4007-8b16-5c011945d681` reported `native_session_cleanup_quarantined`. A settled guest checkpoint and absent processes do not authorize clearing the controller cleanup fence. The cause is under investigation; no retry, session reset, or manual retirement was used. [Observed failure](assets/2026-10-10-boat/staging-21-native-quarantine.png) · [staging21 receipt](assets/2026-10-10-boat/evidence/staging21-live-evidence.json).
+
+## Controller cleanup evidence (2026-10-11 06:18 UTC)
+
+Read-only inspection through the normal authenticated staging console found all six commands for successful run `d8aa39b4` completed, with no pending warm transition. The database finalization was committed without a failure code. Its retained process binding was historical: the owner was retired, and lease cleanup completed at 05:58:36.264. The two subsequent bootstrap failures had no provider work or native session binding; their distinct owners also retired and lease cleanup completed. These records do not identify the initiating quarantine cause or authorize bypassing a checkpoint. The normal controlled deployment path can attempt recovery only through the existing persisted identity, process-retirement, and checkpoint fences. No session, owner, database record, or provider stop was reset. [Scoped diagnostic receipt](assets/2026-10-10-boat/evidence/staging21-controller-cleanup.json).
+
+## Local44 fixed-pack cold and warm results (2026-10-11 06:22 UTC)
+
+The corrected immutable Claude pack passed both turns on BOA20. Cold startup completed in 12m21, including the 1166 MiB first-use upload; the ordinary warm follow-up completed in 1m53. Both retained the same native session, logical runner, provider thread, physical launch identity and original proof hashes. The actual bound runner executable matched the qualified diagnostic binary. The task UI showed Done and the expanded warm command output contained both original hashes at 06:21:01 UTC. No guest reads follow that initial executable verification; the configured warm deadline is 06:26:16.327, and natural archive plus post-idle continuation are still pending. [Receipt](assets/2026-10-10-boat/evidence/local44-claude-cold-warm.json) · [Visible warm completion](assets/2026-10-10-boat/local-44-claude-warm-proof.png).
@@ -0,0 +1,112 @@
+{
+  "checkedAt": "2026-10-11T06:11:28.198894+00:00",
+  "prs": [
+    {
+      "pr": 15813,
+      "head": "6c2a0a2bd86ef411bbc0e273b179d5bc4f1a3733",
+      "reviewHead": "6c2a0a2bd86ef411bbc0e273b179d5bc4f1a3733",
+      "mergeable": "MERGEABLE",
+      "counts": {
+        "SKIPPED": 4,
+        "SUCCESS": 54
+      },
+      "failures": [],
+      "focusChecks": [
+        {
+          "__typename": "CheckRun",
+          "completedAt": "2026-10-11T06:04:40Z",
+          "conclusion": "SUCCESS",
+          "detailsUrl": "https://github.com/paperclipai/paperclip/actions/runs/38116618493/job/114402683080",
+          "name": "ci / e2e shard (8/8)",
+          "startedAt": "2026-10-11T06:00:53Z",
+          "status": "COMPLETED",
+          "workflowName": "PR"
+        },
+        {
+          "__typename": "CheckRun",
+          "completedAt": "2026-10-11T06:08:45Z",
+          "conclusion": "SUCCESS",
+          "detailsUrl": "https://app.greptile.com/paperclip-org-3/github/paperclipai/paperclip/-/pull/15813",
+          "name": "Greptile Review",
+          "startedAt": "2026-10-11T06:00:18Z",
+          "status": "COMPLETED",
+          "workflowName": ""
+        }
+      ],
+      "pending": [],
+      "unresolved": [],
+      "moreThreads": false,
+      "greptileSummary": [
+        {
+          "url": "https://github.com/paperclipai/paperclip/pull/15813#issuecomment-6099291617",
+          "updatedAt": "2026-10-11T06:08:57Z",
+          "reviewedCommits": [
+            "6c2a0a2bd86ef411bbc0e273b179d5bc4f1a3733"
+          ],
+          "score": [
+            "5"
+          ]
+        }
+      ]
+    },
+    {
+      "pr": 15804,
+      "head": "818f94594db17bb3249cadc33fd7e26535102421",
+      "reviewHead": "818f94594db17bb3249cadc33fd7e26535102421",
+      "mergeable": "MERGEABLE",
+      "counts": {
+        "CANCELLED": 1,
+        "SUCCESS": 54
+      },
+      "failures": [
+        {
+          "__typename": "CheckRun",
+          "completedAt": "2026-10-11T06:00:15Z",
+          "conclusion": "CANCELLED",
+          "detailsUrl": "https://github.com/paperclipai/paperclip/actions/runs/38116617979/job/114402654995",
+          "name": "ci / Select trusted runner",
+          "startedAt": "2026-10-11T06:00:14Z",
+          "status": "COMPLETED",
+          "workflowName": "PR"
+        }
+      ],
+      "focusChecks": [
+        {
+          "__typename": "CheckRun",
+          "completedAt": "2026-10-11T06:05:46Z",
+          "conclusion": "SUCCESS",
+          "detailsUrl": "https://github.com/paperclipai/paperclip/actions/runs/38116619352/job/114402831615",
+          "name": "ci / e2e shard (8/8)",
+          "startedAt": "2026-10-11T06:01:38Z",
+          "status": "COMPLETED",
+          "workflowName": "PR"
+        },
+        {
+          "__typename": "CheckRun",
+          "completedAt": "2026-10-11T06:06:55Z",
+          "conclusion": "SUCCESS",
+          "detailsUrl": "https://app.greptile.com/paperclip-org-3/github/paperclipai/paperclip/-/pull/15804",
+          "name": "Greptile Review",
+          "startedAt": "2026-10-11T06:00:19Z",
+          "status": "COMPLETED",
+          "workflowName": ""
+        }
+      ],
+      "pending": [],
+      "unresolved": [],
+      "moreThreads": false,
+      "greptileSummary": [
+        {
+          "url": "https://github.com/paperclipai/paperclip/pull/15804#issuecomment-6098591173",
+          "updatedAt": "2026-10-11T06:07:01Z",
+          "reviewedCommits": [
+            "818f94594db17bb3249cadc33fd7e26535102421"
+          ],
+          "score": [
+            "5"
+          ]
+        }
+      ]
+    }
+  ]
+}
@@ -0,0 +1,175 @@
+{
+  "scope": "Authorized read-only installation verification while normal Computer viewer was connected; no provider/session launch, guest writes, or cache replacement. Viewer closed normally at about 05:51 UTC.",
+  "task": "BOA19",
+  "machine": "bx_ndnggjad",
+  "sourceFix": "6c2a0a2bd86ef411bbc0e273b179d5bc4f1a3733",
+  "conclusion": "First full read of an untouched restored executable changed only ctime; pinned digest matched. Repeating the retained installation verifier after first read succeeded.",
+  "expectedExecutableSha256": "fe503f65c6289d59c23e5b21ae44f03583f997dd33a2cbfc75ab4f96fb8fc73f",
+  "observations": [
+    {
+      "receipt": "retry-local43-installation-readonly.json",
+      "receiptSha256": "060d99f63f16aae438f7cfc951216e6ad119cb7c2c35d9931e34f4afc48d35be",
+      "result": {
+        "sandboxId": "bx_ndnggjad",
+        "exitCode": 0,
+        "timedOut": false,
+        "data": {
+          "checkedAt": "2026-10-11T05:47:57.561Z",
+          "elapsedMs": 2550,
+          "result": "rejected",
+          "category": "runtime_executable_changed",
+          "code": "other",
+          "messageSha256": "64fb89f8936a11d2342383c83a2cc910158e1baa9c42f6d5177f7cfd46d2fc60",
+          "sourceFunctions": [
+            "verifyQualifiedAcpxInstallation",
+            "openVerifiedRuntimeExecutable"
+          ],
+          "openCommandInvoked": false
+        },
+        "error": null
+      }
+    },
+    {
+      "receipt": "retry-local43-installation-stat-readonly-corrected.json",
+      "receiptSha256": "0cd77fe24b65fa90ad066114f6e98b0068b0a8e05a14d83a06d590b90c091eaa",
+      "result": {
+        "sandboxId": "bx_ndnggjad",
+        "exitCode": 0,
+        "timedOut": false,
+        "data": {
+          "checkedAt": "2026-10-11T05:49:44.853Z",
+          "elapsedMs": 212,
+          "lexicalBefore": {
+            "dev": "119",
+            "ino": "12588",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791693636000000000",
+            "ctimeNs": "1791697677000000000"
+          },
+          "before": {
+            "dev": "119",
+            "ino": "12588",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791693636000000000",
+            "ctimeNs": "1791697677000000000"
+          },
+          "after": {
+            "dev": "119",
+            "ino": "12588",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791693636000000000",
+            "ctimeNs": "1791697677000000000"
+          },
+          "lexicalAfter": {
+            "dev": "119",
+            "ino": "12588",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791693636000000000",
+            "ctimeNs": "1791697677000000000"
+          },
+          "position": 241667256,
+          "reads": 231,
+          "lastRead": 494776,
+          "digest": "fe503f65c6289d59c23e5b21ae44f03583f997dd33a2cbfc75ab4f96fb8fc73f"
+        },
+        "error": null
+      }
+    },
+    {
+      "receipt": "retry-local43-installation-oldpack-stat-readonly.json",
+      "receiptSha256": "32aaa257cbfc1f5779ddf406e3d7ab195c223adce20bd9369a81370662690757",
+      "result": {
+        "sandboxId": "bx_ndnggjad",
+        "exitCode": 0,
+        "timedOut": false,
+        "data": {
+          "checkedAt": "2026-10-11T05:50:34.192Z",
+          "elapsedMs": 7382,
+          "lexicalBefore": {
+            "dev": "119",
+            "ino": "13067",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791638362000000000",
+            "ctimeNs": "1791638362000000000"
+          },
+          "before": {
+            "dev": "119",
+            "ino": "13067",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791638362000000000",
+            "ctimeNs": "1791638362000000000"
+          },
+          "after": {
+            "dev": "119",
+            "ino": "13067",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791638362000000000",
+            "ctimeNs": "1791697833000000000"
+          },
+          "lexicalAfter": {
+            "dev": "119",
+            "ino": "13067",
+            "size": "241667256",
+            "mode": "33216",
+            "mtimeNs": "1791638362000000000",
+            "ctimeNs": "1791697833000000000"
+          },
+          "position": 241667256,
+          "reads": 231,
+          "lastRead": 494776,
+          "digest": "fe503f65c6289d59c23e5b21ae44f03583f997dd33a2cbfc75ab4f96fb8fc73f"
+        },
+        "error": null
+      }
+    },
+    {
+      "receipt": "retry-local43-installation-readonly-repeat.json",
+      "receiptSha256": "0b56d9fb5c815c0fbfc2b27d6180aa785a6fbf7c438413c60d1e5ce43480f796",
+      "result": {
+        "sandboxId": "bx_ndnggjad",
+        "exitCode": 0,
+        "timedOut": false,
+        "data": {
+          "checkedAt": "2026-10-11T05:50:39.089Z",
+          "elapsedMs": 580,
+          "result": "verified",
+          "commandDigest": "sha256:9d73d1f0f121fb96cc8badb28c22d5bff02d8582eb2e40360a81c189e1b9422a",
+          "openCommandInvoked": false
+        },
+        "error": null
+      }
+    }
+  ],
+  "identityCorrection": {
+    "runId": "133211e6-142a-4b29-90b0-944e3e8adbbd",
+    "selectedNativeSessionId": "b24e7b47-5135-4a72-8820-0e44e1f2f3bd",
+    "selectedRunnerId": "1bfaa364-347e-4280-af6d-937cb01a3731",
+    "selection": "fresh native session despite ordinary same-task user comment; not proof of original session resume",
+    "originalNativeSessionId": "438f844d-05d6-4ce2-ba3e-edbd97abca66",
+    "originalRunnerId": "13a06b89-735f-45d0-97cb-e41b4ff757cd",
+    "savedProviderPackDigest": "sha256:af875f72dbce8bf9f1bb2cce962e8380d5b23dd72fb98c84d04e949d9665c719"
+  },
+  "diagnosticCorrection": {
+    "admissionStage": "installation",
+    "admissionElapsedMs": 1,
+    "meaning": "Timestamp of entry to installation relative to session.open; not duration of installation"
+  },
+  "verification": {
+    "red": "Two new regression failures on unchanged verifier",
+    "green": {
+      "passed": 77,
+      "existingPlatformSkips": 6
+    },
+    "typescript": "Runtime and surfaces passed",
+    "independentReview": "No actionable findings",
+    "liveFixedPack": "Not yet tested"
+  },
+  "preservation": "Original failed records and immutable af875/a02 packs retained. New pack will be tested with a fresh normal task."
+}
@@ -0,0 +1,83 @@
+{
+  "recordedAt": "2026-10-11T06:22:07.110957+00:00",
+  "taskId": "6047cbba-7f5e-484a-bf02-0f4080bb2abd",
+  "identifier": "BOA-20",
+  "controllerSource": "441e88c09a4b16fd4f1403e6c4e813d00653edf5",
+  "providerPackDigest": "sha256:d7275d9204e60a0a5dcb8dc536da95e945e6b90b7bdfda964d82084895ec5952",
+  "nativeSessionId": "840002e9-636c-4467-8807-4f539b20532e",
+  "coldAndWarmRuns": [
+    {
+      "id": "9c6e6129-7334-4ff3-9806-dfd6f62ebe7a",
+      "status": "succeeded",
+      "created_at": "2026-10-11T06:06:27.373Z",
+      "started_at": "2026-10-11T06:06:27.408Z",
+      "finished_at": "2026-10-11T06:18:48.433Z",
+      "error_code": null,
+      "error": null,
+      "native_session_id": "840002e9-636c-4467-8807-4f539b20532e",
+      "runner_instance_id": "7305da06-73ee-45d6-91ff-e97331c0c8cb",
+      "session_id_before": null,
+      "session_id_after": "27e34901-7792-4d23-9189-e2c2ead86f64",
+      "execution_stage": "preparing"
+    },
+    {
+      "id": "cee9d644-ee75-4fc3-8675-305e7c43ad0d",
+      "status": "succeeded",
+      "created_at": "2026-10-11T06:19:23.179Z",
+      "started_at": "2026-10-11T06:19:23.228Z",
+      "finished_at": "2026-10-11T06:21:16.372Z",
+      "error_code": null,
+      "error": null,
+      "native_session_id": "840002e9-636c-4467-8807-4f539b20532e",
+      "runner_instance_id": "7305da06-73ee-45d6-91ff-e97331c0c8cb",
+      "session_id_before": "27e34901-7792-4d23-9189-e2c2ead86f64",
+      "session_id_after": "27e34901-7792-4d23-9189-e2c2ead86f64",
+      "execution_stage": "preparing"
+    }
+  ],
+  "warmOwner": {
+    "id": "d5e181b2-0f13-477c-a467-f7ba6178efa6",
+    "kind": "runner",
+    "phase": "warm",
+    "runId": "cee9d644-ee75-4fc3-8675-305e7c43ad0d",
+    "deadline": "2026-10-11T06:26:16.327Z",
+    "generation": 2,
+    "process": {
+      "nonce": "b695c043-2e2a-4aaf-87b4-bf4e67b046f4",
+      "bootId": "16f7855c-bb8d-47ad-9c8c-73b4b5859fc2",
+      "unitName": "paperclip-d5e181b2-0f13-477c-a467-f7ba6178efa6.service",
+      "launchGeneration": 1
+    }
+  },
+  "liveExecutableProof": {
+    "sandboxId": "bx_ndnggjad",
+    "exitCode": 0,
+    "timedOut": false,
+    "data": {
+      "checkedAt": "2026-10-11T06:18:56.753083+00:00",
+      "ownerId": "d5e181b2-0f13-477c-a467-f7ba6178efa6",
+      "bootId": "16f7855c-bb8d-47ad-9c8c-73b4b5859fc2",
+      "launchGeneration": 1,
+      "pid": 65892,
+      "startTicks": "85589",
+      "runnerSha256": "8f90f35f94f2266b0a441a0013b73c3a7ba1f736de6a21b541c96da0f8de5f05",
+      "runnerBytes": 37554768,
+      "expectedHashMatches": true,
+      "admissionStages": [],
+      "journalExitCode": 0
+    },
+    "error": null
+  },
+  "postArchiveContinuation": "Pending natural expiry/archive and ordinary UI continuation",
+  "observerPolicy": "No guest reads after initial executable hash; no runtime executable prewarming, owner renewal, or provider wake by diagnostics.",
+  "browserProof": {
+    "warmCommandUtc": "2026-10-11T06:21:01Z",
+    "hostname": "box-node-48caa46a23581168",
+    "proofHashes": {
+      "boat-final-claude.txt": "14fa23911a1a95ede22a93f43fc027934b20a1ba497f8e6120abc8769498e124",
+      "boat-claude-framing-proof.txt": "afaf525f4bf0c38614c5df0cf97140e7d1bf9cad96faa293e2317dc82116af4a"
+    },
+    "observation": "Expanded actual warm command output in the task UI; final task status Done.",
+    "screenshot": "../local-44-claude-warm-proof.png"
+  }
+}
@@ -0,0 +1,439 @@
+{
+  "schema": "boat.staging.controller-diagnostics.evidence.v1",
+  "extractedAt": "2026-10-11T06:18:07.315407+00:00",
+  "method": "Decoded quoted DOM generic values as JSON strings, concatenated terminal wrap fragments, and parsed the unique complete diagnostic JSON object. No source values were inferred.",
+  "sourceCaptureTimes": "Neither source output contains a diagnostic/browser capture timestamp. File modification timestamps are metadata only.",
+  "sources": [
+    {
+      "name": "staging21-controller-console-read.txt",
+      "sha256": "11d7402666ecc2aaf7ccdb2ac0432c80384ef48f79bd34f53010a60f6eddbe42",
+      "bytes": 6085,
+      "captureTimeInContent": null,
+      "sourceFileModifiedAt": "2026-10-11T06:13:12.104224+00:00",
+      "sourceFileModifiedAtMeaning": "Filesystem metadata only; not asserted as browser or diagnostic capture time."
+    },
+    {
+      "name": "staging21-controller-db-read.txt",
+      "sha256": "cf52d75e892051a675e486a16e248e99cdf4e501ce937af45bae4047bed455bd",
+      "bytes": 8431,
+      "captureTimeInContent": null,
+      "sourceFileModifiedAt": "2026-10-11T06:15:45.651326+00:00",
+      "sourceFileModifiedAtMeaning": "Filesystem metadata only; not asserted as browser or diagnostic capture time."
+    },
+    {
+      "name": "staging21-controller-db-read-2.txt",
+      "sha256": "615d51f4695377d3a7532272312c4463cd3c63a2990c197599cc766519ec752e",
+      "bytes": 8790,
+      "captureTimeInContent": null,
+      "sourceFileModifiedAt": "2026-10-11T06:16:56.588468+00:00",
+      "sourceFileModifiedAtMeaning": "Filesystem metadata only; not asserted as browser or diagnostic capture time."
+    }
+  ],
+  "scope": {
+    "normalizedSessionId": "06496696-b312-4268-ac40-66770aaa6f1a",
+    "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+    "followingAttemptRunIds": [
+      "47d76138-3533-4904-9285-0b3d873ea3bb",
+      "ddce73cb-d592-4007-8b16-5c011945d681"
+    ]
+  },
+  "currentControllerObservation": {
+    "baseExists": true,
+    "matchingStateCount": 1,
+    "stateKey": "b4e89cdf379be2fef8dc8a3df1a3e1e9a7965cf26425305506b68ecb9e45a70c",
+    "schema": "paperclip.runner.durable.control-plane-state.v1",
+    "identity": {
+      "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+      "normalizedSessionId": "06496696-b312-4268-ac40-66770aaa6f1a",
+      "runnerInstanceId": "0005a613-101d-475f-9409-8b8e8b87e9ce",
+      "environmentLeaseId": "5957cc86-4533-49e5-a2af-0edbc79a472f"
+    },
+    "controllerEpochFieldPresent": false,
+    "pendingWarmTransitionPresent": false,
+    "commands": [
+      {
+        "controllerSeq": 1,
+        "status": "completed",
+        "type": "run.attach"
+      },
+      {
+        "controllerSeq": 2,
+        "status": "completed",
+        "type": "session.snapshot"
+      },
+      {
+        "controllerSeq": 3,
+        "status": "completed",
+        "type": "session.snapshot"
+      },
+      {
+        "controllerSeq": 4,
+        "status": "completed",
+        "type": "session.goal.get"
+      },
+      {
+        "controllerSeq": 5,
+        "status": "completed",
+        "type": "turn.start"
+      },
+      {
+        "controllerSeq": 6,
+        "status": "completed",
+        "type": "semantic_tool.result"
+      }
+    ],
+    "controllerLocalRunnerState": null,
+    "cleanupActivationPresent": false
+  },
+  "currentDatabaseObservation": {
+    "source": "staging21-controller-db-read-2.txt",
+    "returnedRuns": [
+      {
+        "id": "ddce73cb-d592-4007-8b16-5c011945d681",
+        "status": "failed",
+        "error_code": "adapter_failed",
+        "native_session_id": null,
+        "runner_instance_id": null,
+        "started_at": "2026-10-11T05:58:00.710Z",
+        "finished_at": "2026-10-11T05:58:36.390Z",
+        "issue_id": "7d3472d4-461f-44ce-90ed-139e878df200",
+        "result_keys": [
+          "stopReason",
+          "timeoutFired",
+          "timeoutSource",
+          "executionRecovery",
+          "timeoutConfigured",
+          "effectiveTimeoutSec"
+        ],
+        "recovery": {
+          "kind": "bootstrap",
+          "providerWorkStarted": false
+        },
+        "knownErrorCodes": [
+          "native_session_cleanup_quarantined"
+        ],
+        "errorCategory": "cleanup_other"
+      },
+      {
+        "id": "47d76138-3533-4904-9285-0b3d873ea3bb",
+        "status": "failed",
+        "error_code": "adapter_failed",
+        "native_session_id": null,
+        "runner_instance_id": null,
+        "started_at": "2026-10-11T05:57:25.465Z",
+        "finished_at": "2026-10-11T05:57:59.611Z",
+        "issue_id": "7d3472d4-461f-44ce-90ed-139e878df200",
+        "result_keys": [
+          "stopReason",
+          "timeoutFired",
+          "timeoutSource",
+          "executionRecovery",
+          "timeoutConfigured",
+          "effectiveTimeoutSec"
+        ],
+        "recovery": {
+          "kind": "bootstrap",
+          "providerWorkStarted": false
+        },
+        "knownErrorCodes": [
+          "native_session_cleanup_quarantined"
+        ],
+        "errorCategory": "cleanup_other"
+      },
+      {
+        "id": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "status": "succeeded",
+        "error_code": null,
+        "native_session_id": "06496696-b312-4268-ac40-66770aaa6f1a",
+        "runner_instance_id": "0005a613-101d-475f-9409-8b8e8b87e9ce",
+        "started_at": "2026-10-11T05:54:37.004Z",
+        "finished_at": "2026-10-11T05:57:08.096Z",
+        "issue_id": "7d3472d4-461f-44ce-90ed-139e878df200",
+        "result_keys": [
+          "summary",
+          "decisionId",
+          "stopReason",
+          "failureCode",
+          "assessmentId",
+          "nativeResult",
+          "timeoutFired",
+          "nextAttemptAt",
+          "timeoutSource",
+          "nativeTerminal",
+          "configFreshness",
+          "instructionSave",
+          "issueStatusAfter",
+          "finalizationPhase",
+          "issueStatusBefore",
+          "timeoutConfigured",
+          "statusVersionAfter",
+          "effectiveTimeoutSec",
+          "originalFailureCode",
+          "prpRunTerminalState",
+          "statusVersionBefore",
+          "verificationCaveats",
+          "planSynchronizations",
+          "presentationDecision",
+          "prpTurnTerminalState",
+          "authoritativeDecision",
+          "finalizationReasonCode",
+          "workspaceFinalizeStatus",
+          "ignoredAttentionRequests",
+          "finalizationPolicyVersion",
+          "prpReportedWorkDisposition",
+          "externalChatReviewPresentation"
+        ],
+        "recovery": {
+          "kind": null,
+          "providerWorkStarted": null
+        },
+        "knownErrorCodes": [],
+        "errorCategory": null
+      }
+    ],
+    "returnedFinalizations": [
+      {
+        "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "phase": "committed",
+        "failureCode": null,
+        "recoveryState": null,
+        "detailKeys": [],
+        "knownCauseCodes": [],
+        "history": []
+      }
+    ],
+    "leases": [
+      {
+        "id": "98118809-b4b5-4424-a415-115139bb4920",
+        "status": "failed",
+        "cleanup_status": "success",
+        "heartbeat_run_id": "ddce73cb-d592-4007-8b16-5c011945d681",
+        "acquired_at": "2026-10-11T05:58:09.958Z",
+        "released_at": "2026-10-11T05:58:39.619Z",
+        "updated_at": "2026-10-11T05:58:39.619Z",
+        "owner": {
+          "ownerId": "e6a15939-7665-4c3d-9ae1-933d8fcd2c01",
+          "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+          "generation": 1
+        }
+      },
+      {
+        "id": "599bd9a8-0257-4089-8c5d-4cb01240fab2",
+        "status": "failed",
+        "cleanup_status": "success",
+        "heartbeat_run_id": "47d76138-3533-4904-9285-0b3d873ea3bb",
+        "acquired_at": "2026-10-11T05:57:33.665Z",
+        "released_at": "2026-10-11T05:58:03.414Z",
+        "updated_at": "2026-10-11T05:58:03.414Z",
+        "owner": {
+          "ownerId": "1605dd13-3314-4df3-80d5-783eb501fc21",
+          "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+          "generation": 1
+        }
+      },
+      {
+        "id": "55b1b69c-3254-4f6c-902e-ed12148c1386",
+        "status": "released",
+        "cleanup_status": "success",
+        "heartbeat_run_id": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "acquired_at": "2026-10-11T05:54:45.660Z",
+        "released_at": "2026-10-11T05:58:36.264Z",
+        "updated_at": "2026-10-11T05:58:36.264Z",
+        "owner": {
+          "ownerId": "7d485ed0-d46e-4b35-a652-e7ac24514549",
+          "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+          "generation": 1
+        }
+      }
+    ],
+    "owners": [
+      {
+        "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+        "id": "7d485ed0-d46e-4b35-a652-e7ac24514549",
+        "generation": 1,
+        "phase": "retired",
+        "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "deadline": null,
+        "retirementDeadline": null,
+        "admittedAt": "2026-10-11T05:54:39.805Z",
+        "processBindingRecorded": true
+      },
+      {
+        "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+        "id": "1605dd13-3314-4df3-80d5-783eb501fc21",
+        "generation": 1,
+        "phase": "retired",
+        "runId": "47d76138-3533-4904-9285-0b3d873ea3bb",
+        "deadline": null,
+        "retirementDeadline": null,
+        "admittedAt": "2026-10-11T05:57:28.028Z",
+        "processBindingRecorded": false
+      },
+      {
+        "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+        "id": "e6a15939-7665-4c3d-9ae1-933d8fcd2c01",
+        "generation": 1,
+        "phase": "retired",
+        "runId": "ddce73cb-d592-4007-8b16-5c011945d681",
+        "deadline": null,
+        "retirementDeadline": null,
+        "admittedAt": "2026-10-11T05:58:04.340Z",
+        "processBindingRecorded": false
+      }
+    ]
+  },
+  "interpretationLimits": [
+    "The controller diagnostic returned one matching identity bound to the preceding successful heading run; all six returned commands are completed and no pending warm transition is recorded.",
+    "No controllerEpoch field was returned. This is not an epoch value of zero or null.",
+    "The controller-local runner-state result is null. This does not establish absence of the remote Boat guest checkpoint.",
+    "All three returned owners are retired with null current deadlines. The preceding owner retains a process binding object; that historical binding is not evidence that its OS process is alive.",
+    "The two following failed leases both report successful cleanup and owners with no process binding. This does not explain the initiating native-session cleanup quarantine.",
+    "No failure code, cause code, recovery state, or recovery history was returned for the successful preceding finalization. No initiating quarantine cause is established.",
+    "The second exact-scope query returns all three runs. The first query returned only the successful heading run; its narrower result must not be used to infer missing failed-run rows.",
+    "Both failed-run rows have error_code adapter_failed, knownErrorCodes containing native_session_cleanup_quarantined, recovery kind bootstrap, providerWorkStarted false, and diagnostic errorCategory cleanup_other. cleanup_other is the diagnostic output category, not a more specific native error code.",
+    "The preceding heading lease reports released_at05:58:36.264Z. This is its recorded final release time, not proof of when its process stopped or the initiating quarantine cause."
+  ],
+  "networkDatabaseBrowserOrGuestActionsPerformedByExtractor": false,
+  "earlierDatabaseObservation": {
+    "returnedRuns": [
+      {
+        "id": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "status": "succeeded",
+        "error_code": null,
+        "native_session_id": "06496696-b312-4268-ac40-66770aaa6f1a",
+        "runner_instance_id": "0005a613-101d-475f-9409-8b8e8b87e9ce",
+        "started_at": "2026-10-11T05:54:37.004Z",
+        "finished_at": "2026-10-11T05:57:08.096Z",
+        "recovery": {
+          "kind": null,
+          "providerWorkStarted": null
+        }
+      }
+    ],
+    "returnedFinalizations": [
+      {
+        "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "phase": "committed",
+        "failureCode": null,
+        "recoveryState": null,
+        "detailKeys": [],
+        "knownCauseCodes": [],
+        "history": []
+      }
+    ],
+    "leases": [
+      {
+        "id": "98118809-b4b5-4424-a415-115139bb4920",
+        "status": "failed",
+        "cleanup_status": "success",
+        "heartbeat_run_id": "ddce73cb-d592-4007-8b16-5c011945d681",
+        "owner": {
+          "ownerId": "e6a15939-7665-4c3d-9ae1-933d8fcd2c01",
+          "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+          "generation": 1
+        }
+      },
+      {
+        "id": "599bd9a8-0257-4089-8c5d-4cb01240fab2",
+        "status": "failed",
+        "cleanup_status": "success",
+        "heartbeat_run_id": "47d76138-3533-4904-9285-0b3d873ea3bb",
+        "owner": {
+          "ownerId": "1605dd13-3314-4df3-80d5-783eb501fc21",
+          "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+          "generation": 1
+        }
+      },
+      {
+        "id": "55b1b69c-3254-4f6c-902e-ed12148c1386",
+        "status": "released",
+        "cleanup_status": "success",
+        "heartbeat_run_id": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "owner": {
+          "ownerId": "7d485ed0-d46e-4b35-a652-e7ac24514549",
+          "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+          "generation": 1
+        }
+      }
+    ],
+    "owners": [
+      {
+        "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+        "id": "7d485ed0-d46e-4b35-a652-e7ac24514549",
+        "generation": 1,
+        "phase": "retired",
+        "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+        "deadline": null,
+        "retirementDeadline": null,
+        "processBindingRecorded": true
+      },
+      {
+        "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+        "id": "1605dd13-3314-4df3-80d5-783eb501fc21",
+        "generation": 1,
+        "phase": "retired",
+        "runId": "47d76138-3533-4904-9285-0b3d873ea3bb",
+        "deadline": null,
+        "retirementDeadline": null,
+        "processBindingRecorded": false
+      },
+      {
+        "computerId": "6d53efb3-5b96-4694-a1c1-9746dc8278f0",
+        "id": "e6a15939-7665-4c3d-9ae1-933d8fcd2c01",
+        "generation": 1,
+        "phase": "retired",
+        "runId": "ddce73cb-d592-4007-8b16-5c011945d681",
+        "deadline": null,
+        "retirementDeadline": null,
+        "processBindingRecorded": false
+      }
+    ]
+  },
+  "recordedTimeline": [
+    {
+      "kind": "run",
+      "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+      "startedAt": "2026-10-11T05:54:37.004Z",
+      "finishedAt": "2026-10-11T05:57:08.096Z",
+      "status": "succeeded"
+    },
+    {
+      "kind": "run",
+      "runId": "47d76138-3533-4904-9285-0b3d873ea3bb",
+      "startedAt": "2026-10-11T05:57:25.465Z",
+      "finishedAt": "2026-10-11T05:57:59.611Z",
+      "status": "failed"
+    },
+    {
+      "kind": "run",
+      "runId": "ddce73cb-d592-4007-8b16-5c011945d681",
+      "startedAt": "2026-10-11T05:58:00.710Z",
+      "finishedAt": "2026-10-11T05:58:36.390Z",
+      "status": "failed"
+    },
+    {
+      "kind": "lease",
+      "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+      "leaseId": "55b1b69c-3254-4f6c-902e-ed12148c1386",
+      "acquiredAt": "2026-10-11T05:54:45.660Z",
+      "releasedAt": "2026-10-11T05:58:36.264Z",
+      "cleanupStatus": "success"
+    },
+    {
+      "kind": "lease",
+      "runId": "47d76138-3533-4904-9285-0b3d873ea3bb",
+      "leaseId": "599bd9a8-0257-4089-8c5d-4cb01240fab2",
+      "acquiredAt": "2026-10-11T05:57:33.665Z",
+      "releasedAt": "2026-10-11T05:58:03.414Z",
+      "cleanupStatus": "success"
+    },
+    {
+      "kind": "lease",
+      "runId": "ddce73cb-d592-4007-8b16-5c011945d681",
+      "leaseId": "98118809-b4b5-4424-a415-115139bb4920",
+      "acquiredAt": "2026-10-11T05:58:09.958Z",
+      "releasedAt": "2026-10-11T05:58:39.619Z",
+      "cleanupStatus": "success"
+    }
+  ]
+}
@@ -0,0 +1,116 @@
+{
+  "schema": "boat.staging.qualification.evidence.v1",
+  "recordedAt": "2026-10-11T06:04:27.886191+00:00",
+  "source": {
+    "deployment": 21,
+    "commit": "388a16905b5d1924ce88a1fe550d0f65ebbaf00e",
+    "verifiedAt": "2026-10-11T05:54:57.175Z"
+  },
+  "status": "native_vite_restart_failed_cleanup_quarantine",
+  "nativeCodex": {
+    "taskId": "7d3472d4-461f-44ce-90ed-139e878df200",
+    "proofSha256": "f9253e57dadaefe9276e99a9cd0cb9fad68d2704dd820b61e026edf6e6527c46",
+    "proofUnchanged": true,
+    "persistedHeadingTurn": {
+      "requestReplayed": false,
+      "parentObservedResultAtApprox": "2026-10-11T05:57:00Z",
+      "reason": "No Vite listener available; no edit performed.",
+      "hmrPassed": false,
+      "runId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+      "startedAt": "2026-10-11T05:54:37Z",
+      "finishedAt": "2026-10-11T05:57:08Z",
+      "runStatus": "succeeded",
+      "taskDisposition": "blocked",
+      "workspaceFinalize": "succeeded",
+      "sourceBoundary": "Run started before official deployment21 serving verification at05:54:57; it spans the rollout boundary."
+    },
+    "transitionalSample": {
+      "observedAt": "2026-10-11T05:56:20.207928Z",
+      "nativeOwnedProcesses": 0,
+      "nativeOwnedListeners": 0,
+      "savedRunnerCheckpointPresent": false,
+      "savedProviderCheckpointPresent": true,
+      "savedProviderThreadId": "01a12881-5d3b-72a0-b4c3-d993f5b089e1",
+      "interpretation": "In-flight preparation observation only; no corruption claim."
+    },
+    "normalViteRestartFollowup": {
+      "parentSubmittedAtApprox": "2026-10-11T05:57:00Z",
+      "timeoutSettingsChanged": false,
+      "firstAttempt": {
+        "runId": "47d76138-3533-4904-9285-0b3d873ea3bb",
+        "startedAt": "2026-10-11T05:57:25Z",
+        "finishedAt": "2026-10-11T05:57:59Z",
+        "status": "failed",
+        "errorCode": "native_session_cleanup_quarantined",
+        "failurePhase": "bootstrap",
+        "providerWorkStarted": false,
+        "timeoutFired": false,
+        "effectiveTimeoutSec": 0,
+        "observedRunEventTypes": [
+          "started",
+          "native_session_cleanup_quarantined"
+        ]
+      },
+      "automaticAttempt": {
+        "runId": "ddce73cb-d592-4007-8b16-5c011945d681",
+        "startedAt": "2026-10-11T05:58:00Z",
+        "finishedAt": "2026-10-11T05:58:36Z",
+        "status": "failed",
+        "errorCode": "native_session_cleanup_quarantined"
+      },
+      "result": "failed_before_provider_work"
+    },
+    "postFailureObservation": {
+      "at": "2026-10-11T06:00:45.856001Z",
+      "bootId": "c6a9890c-b025-4ae1-837f-148704d2d7b5",
+      "nativeOwnedProcesses": 0,
+      "nativeOwnedListeners": 0,
+      "runnerCheckpointPresent": true,
+      "checkpointRunId": "d8aa39b4-b792-44c5-91d5-e88f7258e1e5",
+      "runnerLifecycle": "ready",
+      "providerLifecycle": "session_open",
+      "outboxCount": 0,
+      "pendingTerminalDeliveryIsNull": true,
+      "completedTurnAuthoritative": true,
+      "savedNormalizedSessionId": "06496696-b312-4268-ac40-66770aaa6f1a",
+      "savedProviderThreadId": "01a12881-5d3b-72a0-b4c3-d993f5b089e1",
+      "proofUnchanged": true
+    }
+  },
+  "receipts": [
+    {
+      "name": "staging-deploy-21-result.json",
+      "sha256": "38b8a3a4dbe1554466043dbdbf8d163b8a7d4d64d2eb389bdeaf79966b1a6aec"
+    },
+    {
+      "name": "retry-staging-21-provider-baseline.json",
+      "sha256": "bcf15979a0e4fbccad59ea8583d905f7a8b12607d7ff1639682e2ec191646828"
+    },
+    {
+      "name": "retry-staging-21-nativecodex-persisted-heading.json",
+      "sha256": "8a21fc9d7c5169209d9eada4070c84bf7d2ddbf1c95c5845d96825918fda89ef"
+    },
+    {
+      "name": "retry-staging-21-nativecodex-quarantine.json",
+      "sha256": "95cd02ed158098140478f85bb5fd86e78fb9b0cb1ed155aec3eae9192a4c9fc6"
+    }
+  ],
+  "limits": [
+    "No inference is made about the initiating cleanup/retirement cause.",
+    "The heading turn succeeded at run level but left the task blocked because Vite was unavailable; no HMR edit was performed.",
+    "Both subsequent Vite-restart attempts failed cleanup quarantine; no native preview/HMR pass is claimed.",
+    "Additional fence inspection was stopped by provider guard after normal viewer unmount. No retry, reset, or manual wake occurred."
+  ],
+  "viewerLifecycle": {
+    "parentNavigatedAwayAtApprox": "2026-10-11T06:00:00Z",
+    "viewerUnmount": "normal_navigation",
+    "laterGuestDiagnostic": "blocked_by_provider_state_guard",
+    "guestReadAfterBlockedGuard": false,
+    "manualWakeOrReset": false
+  },
+  "evidenceAttribution": {
+    "runAudit": "Exact run IDs and timestamps from parent UI audit, relayed by quarantine diagnosis worker; audit precision nearest second.",
+    "guestEvidence": "Independent guarded read-only checkpoint/process/proof observations.",
+    "cleanupCause": "Exact initiating cleanup or retirement error remains unavailable. Prior heading stderr exposed no quarantine reason."
+  }
+}