{
  "baseline": {
    "test": "bootstrap_firewall::windows::tests::a_rule_heavy_prewrite_query_still_reaches_reconcile_write",
    "nextest_seconds": 4.039,
    "query_wall_ms": 3013,
    "outcome": "killed",
    "producer_exit": 100
  },
  "elevated_netsecurity_children": [
    "pre-write verify-query",
    "reconcile-write (ownership queries are statements inside this child)",
    "post-write verify-query"
  ],
  "nominal_child_budget_seconds": 30,
  "maximum_elevated_budget_sum_seconds": 90,
  "all_hung_case": "First pre-write child is killed at its budget; write and post-verification do not run.",
  "unelevated_case": "At most four child budgets across the read-only caller and separately elevated helper (120 s aggregate nominal allowance); not a synchronous parent-CLI wall claim. No cached observation crosses that boundary.",
  "cleanup_case": "One cleanup child contains ownership checks/removal/verification; an initial CLI is-clean observation is a separate child. Cleanup is not an additional normal startup leg.",
  "listener_ordering": [
    "lanhost.rs:700-717 binds before publishing bound port and serves on independent thread",
    "lanhost.rs:727-741 waits for successful bind and records listener before LanUp",
    "servehost.rs:334-342 returns LanUp only after successful start_at",
    "serveverb.rs:238 prints LAN_BOOTSTRAP_UP before report_lan_admission call"
  ],
  "limits": "Source-derived child counts/budgets, not a measured hard end-to-end CLI bound. No live firewall mutation or field acceptance performed.",
  "sha": "49a08a07db7f5da0ca3eb77129d5504ae107f8a9",
  "successor": {
    "same_test_nextest_seconds": 5.357,
    "firewall_suite": "34 passed, 1008 skipped",
    "producer_exit": 0,
    "hung_child_test": "bootstrap_firewall::tests::a_hung_firewall_child_is_killed_at_its_operation_budget",
    "hung_child_nextest_seconds": 1.428
  }
}