Linux full consumer COMPLETE — GREEN
Candidate HEAD: 7890ead39bb7f14ed44aaae44b0951f098ffe9ac
Parent S2: 527cd8e8d7ef192892d5630fce10e69a6d811893
Host/user: kitsubito / reavus. Executor: todlando.
Authority: initial LTCNATSP; cold VOID FXGOSVTP; one-target reclaim MNRQVISD; full49 warm takeover 2FMKBTT7, routed by Main.

SUCCESSFUL ATTEMPT: full49-warm/
Tree: /home/reavus/projects/spt-core/spt-core/.worktrees/consumer-linux-49a08a07
Target: same tree /target, sequentially taken over only after closed/released classification. Directory name is historical: HEAD was detached at exact7890ead3 and clean throughout. Existing target retained; CARGO_INCREMENTAL=0. No cross-tree artifact sharing.
Driver: 2026-09-14T13:14:28.618869Z to13:34:53.365729Z, native EXIT0.

Fresh full A then full B, once each:
A command: cargo nextest run --workspace --no-fail-fast -E 'not ( HEAVY )'
A native EXIT0; 3417 passed (2 leaky), 1 skipped; nextest41.557s.
A UTC13:14:48.909164 to13:15:33.970603; producer45.062s.
A raw SHA256 c5c11eac7ba8bccf106425f070215e40021fbb83ddcd6f01b16491b8e855b627
B command: cargo nextest run --workspace --no-fail-fast -E 'HEAVY'
B native EXIT0; 224 passed (1 slow), 0 skipped; nextest1145.484s.
B UTC13:15:38.106601 to13:34:48.165474; producer1150.059s.
B raw SHA256 a3c49e8b53ff740552768e571f616531182f7f7f921d0e8ca14b1c6b06686770
All times above are 2026-09-14 UTC. Expanded argv, exact expressions and source-after guards are in receipt.json and full49-warm/phases.json. HEAVY was extracted unchanged from this exact candidate's .github/workflows/golden.yml; full source line/expression retained.

INVENTORIES / SOURCE / PLATFORM
Before either test phase, each expression was inventoried with:
cargo nextest list --workspace --message-format json -E EXPRESSION
Both native EXIT0. JSON inventories and exact named sets retained under full49-warm/phase-{a,b}-inventory*. A selected3417, ignored1; B selected224, ignored0. Missing=[], added=[] against the named Linux full49 baseline. No vanished cell and no stale result carry-forward: 3641 fresh tests passed at7890ead3.
Windows counts3459/239 do not apply to Linux. fix2 adds four tests inside crates/spt-daemon/src/bootstrap_firewall/windows.rs; bootstrap_firewall.rs lines7-8 gate that module with #[cfg(windows)]. Source diff, gate source and platform-reconciliation.json retained. Expected/measured Linux delta0.
Exact candidate SHA and clean guards passed before both inventories, before A/B, and after each inventory/test producer. Ancestry and original source-tree identities are retained in setup receipts.

ENVIRONMENT / DISK
Full inherited/producer environment NAMES, never inherited identity values, are in full49-warm/environment.json and embedded in receipt.json. All OWL_/SPT_ names purged; only SPT_TEST_EPHEMERAL_ADVISORY_PORTS=1 added to producers. jobs2, incremental0, mold, default nextest profile. Setup script established private outside-Git TEMP/TMP/TMPDIR; setup-only SPT_CI_TEST_TMP was removed before producers. Outside-Git probes and boundary retained.
Unchanged32GiB floor:34359738368 bytes, sampled every5s. Warm admission free67308113920. Minimum sampled inventory/A/B free65082322944. No warm crossing. Final free67302711296.

TEARDOWN / HASH MATCH
A reap:8 owned private-TEMP spt processes signalled with pidfd plus birth/executable/command/SPT_HOME checks; remaining0. B reap:0 signals, remaining0. No broad/name-based kills.
Pool release EXIT0, UTC13:34:48.234680 to13:34:53.236233.
Pool-release log SHA2560260adbe57b59b104b7294cdde3f9250c48520f615699ed03ce607f9203acab1.
Final census13:34:53.277063: active producers0, own survivors0. Existing full49 and S2 targets retained.
100 remote proof files were copied locally and SHA256-matched byte-for-byte; all8 successful-attempt raw logs also matched native producer receipt hashes. See final-local-hash-verification.json. Driver raw SHA256a135d1e5671081435cbf86cd57e4c3c2d51b49f44989d8f91a9e2516ed52aeef.

PRESERVED ATTEMPTS / DISCLOSURES
1. Initial SHA-only bundle command refused empty before producers; exact named-ref bundle succeeded. Both attempts retained. Bundle SHA256c9655eb7359a016092328ad27d9baf3de5120a922a882f013beab134d61d511f.
2. Initial fresh-tree cold A inventory crossed32GiB floor and was killed native-9, before any A/B test ran; driverEXIT1. Doyle declared it VOID. Original logs/receipts remain at proof root; cold-void-receipt.json/txt explain them. First bookkeeping release was itself floor-killed native-9; cleanup-only release subsequently EXIT0, own0. This was not a test retry.
3. Only the explicitly approved VOID partial target subtree was deleted: /home/reavus/projects/spt-core/spt-core/.worktrees/consumer-linux-7890ead3/target. Real directory, no outbound links, no inbound links found across /home/reavus, no readable process/open-fd references. System-PID permission limitations are disclosed in closed-target-classification.json. Apparent size33453008024; measured free increase33472147456 bytes; free33836564480→67308711936. Worktree/proofs preserved. No other target deletion.
4. S2 tree was prepared only (detached exact7890ead3, own target preserved/released); no warm S2 inventory/build/test/claim started. Measured target size showed S2 was not a full warm pool, so doyle authorized the completed full49 tree instead. warm-attempt/ retains preparation only.
5. Windows peer briefly created an admission JSON here due shared Eval globals, then moved its own file before build; Linux source/producers unaffected.
6. Baseline hashes computed through read_text were initially mislabeled raw. Corrected raw Aab014ccacc9e078c6f11965d17c57ba7f55a273e7e337cc32cbe4d5ca60fed52 and B40524a67662dd95720c146bf72d82ebc4ac8720a99161acd235e286f593e3161 now coexist with accurately labeled normalized hashes. Original metadata retained as *-pre-fingerprint-correction.json. Named sets/current raw test logs unchanged; no producer disruption.

No Windows producer, field/firewall mutation, formatter, linter, ancillary suite, push or merge performed by this Linux worker. This receipt is fresh Linux full A+B evidence only, not Windows/field acceptance.