Remote RCA owned by emphasys; current evidence collected 2026-09-11T06:11–06:15Z via operator-authorized SSH decid@enlyzeam. No core source read; no RC attempt, bind, restart, recovery, configuration change, or controller action.
Installed spt images both SHA256 689503ad9fc6cfde637cbcacf21c42faf130ba465a0df6c356cf290e2adafb85. Remote Windows PowerShell with/without profile resolves installed spt.exe. Remote daemon22172/coordinator30796 same installation; node status version0.69.0 and stale=false. Not a proof of historical caller environment or loaded-byte hashes.
Remote current merged listing resolves doyle and emphasys to HFENDULEAM in all three common subnets, both ONLINE+CONTROLLED. Local-only endpoint-info returns NO_ENDPOINT for both on remote; do not misinterpret this as routing failure.
Existing remote SPT_OBS_BYTE_TAP=1 was observed, not set. Existing logs/obs/rc-establish.log records doyle take to HFENDULEAM at04:37:39.304Z, before host current doyle resumed spawn04:37:55.055Z. Establishment log is NOT proof of successful host attachment. Remote stream8467 retired when opener exited; no host doyle attach matched that earlier attempt in current host log. Remote emphasys establishment05:49:31.106Z. No refused06:00 entry. Raw captures copied to C:/Users/decid/AppData/Local/Temp/omp-spt-rc-enlyzeam; rc-establish artifact102; remote status artifact82; remote shell/hash artifact88.
Current host log doyle spawn row inserted session8 and local controller accepted04:37:55, deduplicated concurrent wake. Current host obs local establishment04:37:55.085Z. Earlier demotion predates this. No causal handoff failure established.
Remote daemon-effects log inspected format: sequence/PENDING/DONE net-send, no endpoint/request/time correlation. No raw terminal byte-tap contents examined.
Read-only digest tests: bare doyle/emphasys return NO_DIGEST; qualified doyle@HFENDULEAM --last0 succeeds (JSON version,turns only); emphasys@HFENDULEAM returns10s broker QUIC bound. This is a separate read-path result, not proof of RC routing or cause.
Current exclusions: installed binary mismatch and current duplicate/wrong roster destination unsupported. Remaining: stale RC-specific selection vs host authority/classification divergence vs adapter lifecycle interaction. No core defect established.
Next smallest discriminating experiment: bounded viewer-only RC from remote and host, capture result without exposing terminal contents, then compare existing establishment/controller observations. Requires approval because even viewer attach alters observer presence; no --take or lifecycle changes. Disposable endpoint reproduction is alternative if live observer changes forbidden.