LAUNCH_UTC=2026-09-12T20:26:00Z
driver_sha=d3891b096422e0407b890106ef072238361bd4e41e38edb505a3b8a4e1370e50
CARGO_BUILD_JOBS=2 (doyle: jobs=2)
ELEVATION self=False (expect False)
INSTRUMENTS hashed into INSTRUMENTS.sha256 (5 files; portfields.ps1 is the renamed preserve5470 dependency, parameterised by port)
INSTRUMENT_EXERCISE_SCOPE: d1_render live-executed with controls; portfields/runner-census exercised by live READ-ONLY host probes; all post-correction changes UNEXERCISED (no live probes authorized)
CAPACITY ok before 'preflight': free=120.52 GiB (GiB = /1073741824, not decimal GB) floor=96 hard_stop=32
CI_AXIS ok at 'preflight': no non-terminal runs on BigscreenVR/spt-bs-core
BOX_GATE ok at 'preflight': cargo_build=0 runner_descended=0 shim_unresolved=0; analyzer=6 RECORDED AND NOT GATED (see the note above this function)
SUBJECT sha=53d625cd0bd88a04815efdf6c8209a3096bf53e8 clean blob=c28874ef6823a7bb522168514ac81c16ddd427d5
GUARD_BASELINE taken for port 5470
CAPACITY ok before 'pool-claim': free=120.52 GiB (GiB = /1073741824, not decimal GB) floor=96 hard_stop=32
STATE_MARKED pool_acquired — pool-claim is about to be dispatched for C:/Users/decid/Documents/projects/spt-core/.worktrees/304-w2-repr/target label=fp-53d625cd; it may be claimed from this moment whether or not the verb succeeds
POOL claimed (claim is last-writer-wins by construction; enforcement speaks at the next build)
CAPACITY ok before 'keygen': free=120.50 GiB (GiB = /1073741824, not decimal GB) floor=96 hard_stop=32
SEED bound to this keygen invocation: shape=64hex (value never recorded), pinned public=129c06bdeb429e5f76a7c3a6ac5df3f2c72d6fac0fb0170d6699593856ba173e
  CEILING, stated: the seed/public relationship is established BY CONSTRUCTION (one invocation, both values parsed from it, two occurrences agreeing) and CONFIRMED LATER BY REFUSAL — a set signed by a key other than the pinned one fails verification at apply/serve time by name. There is no verb at this sha that re-derives a public key from a seed for an independent check.
CAPACITY ok before 'pin': free=120.34 GiB (GiB = /1073741824, not decimal GB) floor=96 hard_stop=32
CAPACITY ok before 'rollout-build': free=120.52 GiB (GiB = /1073741824, not decimal GB) floor=96 hard_stop=32
CAPACITY ok before 'mark-applied': free=120.49 GiB (GiB = /1073741824, not decimal GB) floor=96 hard_stop=32
PROVENANCE exe=edd3d8e0566690493182a0e1807b1a6b43c52cff45511b9e81490e256dd10e21 staged=edd3d8e0566690493182a0e1807b1a6b43c52cff45511b9e81490e256dd10e21 signed_metadata=edd3d8e0566690493182a0e1807b1a6b43c52cff45511b9e81490e256dd10e21
PROVENANCE_THREE_WAY_OK — executable == staged artifact == signed metadata artifact_sha256
CI_AXIS ok at 'post-build': no non-terminal runs on BigscreenVR/spt-bs-core
BOX_GATE ok at 'post-build': cargo_build=0 runner_descended=0 shim_unresolved=0; analyzer=6 RECORDED AND NOT GATED (see the note above this function)
GUARD_UNCHANGED post-build — 5470 rule fields and listener identity identical
ARM_A precondition measured: owned pair ABSENT
STATE_MARKED listener_may_exist — about to dispatch serve lan --bootstrap for trial a-1 on port 29470
STATE_MARKED daemon_may_run — serve dispatches through the daemon (ensure_running, serveverb.rs:191)
BINDER_CHECK a-1 VERDICT SAME got=[C:\Users\decid\Documents\projects\spt-core\.worktrees\304-w2-repr\target\release\spt.exe] want=[C:/Users/decid/Documents/projects/spt-core/.worktrees/304-w2-repr/target/release/spt.exe]
GUARD_UNCHANGED a-1-post — 5470 rule fields and listener identity identical
TRIAL a-1 serve_rc=0 stop_rc=0 wall_ms=2491 outcome=completed row=[bootstrap-firewall leg=verify-query program=powershell.exe wall_ms=2491 outcome=completed]
  NOTE on rc: a zero is NECESSARY BUT NOT SUFFICIENT. serveverb.rs:233-249 returns 0 unconditionally on LanUp, so a zero says nothing about admission; a NONZERO is a real control error and disqualifies the trial.
STATE_MARKED listener_may_exist — about to dispatch serve lan --bootstrap for trial a-2 on port 29470
STATE_MARKED daemon_may_run — serve dispatches through the daemon (ensure_running, serveverb.rs:191)
BINDER_CHECK a-2 VERDICT SAME got=[C:\Users\decid\Documents\projects\spt-core\.worktrees\304-w2-repr\target\release\spt.exe] want=[C:/Users/decid/Documents/projects/spt-core/.worktrees/304-w2-repr/target/release/spt.exe]
GUARD_UNCHANGED a-2-post — 5470 rule fields and listener identity identical
TRIAL a-2 serve_rc=0 stop_rc=0 wall_ms=1890 outcome=completed row=[bootstrap-firewall leg=verify-query program=powershell.exe wall_ms=1890 outcome=completed]
  NOTE on rc: a zero is NECESSARY BUT NOT SUFFICIENT. serveverb.rs:233-249 returns 0 unconditionally on LanUp, so a zero says nothing about admission; a NONZERO is a real control error and disqualifies the trial.
STATE_MARKED listener_may_exist — about to dispatch serve lan --bootstrap for trial a-3 on port 29470
STATE_MARKED daemon_may_run — serve dispatches through the daemon (ensure_running, serveverb.rs:191)
BINDER_CHECK a-3 VERDICT SAME got=[C:\Users\decid\Documents\projects\spt-core\.worktrees\304-w2-repr\target\release\spt.exe] want=[C:/Users/decid/Documents/projects/spt-core/.worktrees/304-w2-repr/target/release/spt.exe]
GUARD_UNCHANGED a-3-post — 5470 rule fields and listener identity identical
TRIAL a-3 serve_rc=0 stop_rc=0 wall_ms=1863 outcome=completed row=[bootstrap-firewall leg=verify-query program=powershell.exe wall_ms=1863 outcome=completed]
  NOTE on rc: a zero is NECESSARY BUT NOT SUFFICIENT. serveverb.rs:233-249 returns 0 unconditionally on LanUp, so a zero says nothing about admission; a NONZERO is a real control error and disqualifies the trial.
GUARD_UNCHANGED pre-setup — 5470 rule fields and listener identity identical
STATE_MARKED fw_mutation_may_have_occurred — an elevated reconcile is about to be REQUESTED; rules may exist from this moment even if the setup is refused
HANDOFF_REQUESTED setup seq=001 nonce=20260912T202600Z-001-1984 req=C:/Users/decid/AppData/Local/Temp/claude/C--Users-decid-Documents-projects-spt-core/59484d41-21f9-4915-ac5f-ad7839ece511/scratchpad/bundle-r4/fp-run/20260912T202600Z/handoff/001-setup-request.txt
HANDOFF_RECEIPT_PRESENT C:/Users/decid/AppData/Local/Temp/claude/C--Users-decid-Documents-projects-spt-core/59484d41-21f9-4915-ac5f-ad7839ece511/scratchpad/bundle-r4/fp-run/20260912T202600Z/handoff/001-setup-receipt.txt (exactly one exact nonce line) — a CLAIM; the census below is the verification
GUARD_UNCHANGED post-setup — 5470 rule fields and listener identity identical
ARM_B_SETUP rc=0 face=SETUP FACE_COUNTS reconciled=0 unverified=1 mismatch_written=0 unverified_after_write=1 source_store=0 no_lan_scope=0 enforcement=1 mutation_disabled=0 clean=0 cleanup_unverified=0 already_up=0 repair_requested=0 elevation_unavailable=0
SETUP FACE=unverified-after-write
unverified-after-write pair_written=yes row=[CENSUS tag=b-setup-post utc=2026-09-12T20:42:50Z rules=1003 ctl_5470=1 ctl_sptexe=7 subj_group=2 subj_29470=2 valid=YES]
ARM_B_SETUP_NOT_ACCEPTED rc=0 face=SETUP FACE_COUNTS reconciled=0 unverified=1 mismatch_written=0 unverified_after_write=1 source_store=0 no_lan_scope=0 enforcement=1 mutation_disabled=0 clean=0 cleanup_unverified=0 already_up=0 repair_requested=0 elevation_unavailable=0
SETUP FACE=unverified-after-write
unverified-after-write pair_written=yes
  D1 runs NOW, before any teardown, so the host state at the refusal is captured.
D1(setup-rejection) captured to d1-setup-rejection-snapshot.json — a SEPARATE DIAGNOSTIC INVOCATION.
  CEILING: it is NOT the product's failure-time snapshot and cannot say what any timed call saw
  (snapshot() windows.rs:675-680 and run_bounded :136-188 keep nothing). It bounds the host
  spellings present AROUND the call. It also cannot discriminate this candidate from the
  registration sha: the QUERY const is byte-identical at 53d625cd and 921aa68f (measured).
  POPULATED TRIALS HELD. No Arm B without a separately reviewed amendment.
CLEANUP_BEGIN states=[daemon_may_run fw_mutation_may_have_occurred listener_may_exist pool_acquired ]
GUARD_UNCHANGED cleanup-pre-teardown — 5470 rule fields and listener identity identical
HANDOFF_REQUESTED teardown seq=002 nonce=20260912T202600Z-002-1984 req=C:/Users/decid/AppData/Local/Temp/claude/C--Users-decid-Documents-projects-spt-core/59484d41-21f9-4915-ac5f-ad7839ece511/scratchpad/bundle-r4/fp-run/20260912T202600Z/handoff/002-teardown-request.txt
HANDOFF_RECEIPT_PRESENT C:/Users/decid/AppData/Local/Temp/claude/C--Users-decid-Documents-projects-spt-core/59484d41-21f9-4915-ac5f-ad7839ece511/scratchpad/bundle-r4/fp-run/20260912T202600Z/handoff/002-teardown-receipt.txt (exactly one exact nonce line) — a CLAIM; the census below is the verification
TEARDOWN_CHECK receipt_exit=0 census_exit=0 clean_verdict=1 named_rules_absent=1 census_valid=1
TEARDOWN_VERIFIED — zero teardown exit AND a successful census AND the product's own LAN_FIREWALL_CLEAN verdict AND the owned named rules measured ABSENT
GUARD_UNCHANGED final-post-cleanup — 5470 rule fields and listener identity identical
CLEANUP_END steps_failed=1 original_rc=3 original_why=[Arm B setup not accepted (rc=0 face=SETUP FACE_COUNTS reconciled=0 unverified=1 mismatch_written=0 unverified_after_write=1 source_store=0 no_lan_scope=0 enforcement=1 mutation_disabled=0 clean=0 cleanup_unverified=0 already_up=0 repair_requested=0 elevation_unavailable=0
SETUP FACE=unverified-after-write
unverified-after-write pair_written=yes)]
CLEANUP_HAD_FAILURES=1 — every step still RAN; see cleanup-failures.txt.
  These are REPORTED SEPARATELY and do NOT replace the original finding, and they do not
  change the exit code: the first failure owns that (original_rc=3).

[exited with code 3]