Verify Windows contextual authoring and preserve postboot evidence

harness/STATE.md

@@ -1,8 +1,9 @@
 # Progress Ledger — first release
 
 Updated 2026-09-11, Codex-9e8r6t `/root`, Windows host.
-**Release remains unaccepted. Work is paused for the user's requested reboot.**
-See [restart handoff](RESTART_HANDOFF.md) for exact saved state and next actions.
+**Release remains unaccepted. Windows/product work continues; Linux is paused by the user.**
+The [restart handoff](RESTART_HANDOFF.md) preserves the earlier pause; current
+results and capacity constraints below supersede its active-status wording.
 
 ## Objective and current source
 
@@ -28,12 +29,84 @@ Gitea issue 1 records the handoff in comment 242. Remote AGENTS.md at blob
 announced in comment 229: concise current entrypoints, durable history and
 coordinated preservation rather than indiscriminate deletion.
 
-## Current acceptance checkpoint — reboot pause
+## Current acceptance checkpoint — postboot work
 
 CLI publication evidence `d95b1ab` and complete OA native evidence `c4bad4b` are
 also pushed and read back. The reboot checkpoint preserves reviewed layout/owner
 caption WIP, native evidence and interrupted compiler records; it is not a new
-accepted build. No worker/compiler/test GUI remains active.
+accepted build. This update follows published reboot checkpoint
+`ca53f574e57381a523e946d5277b4081cff74355`; the newer results follow below.
+After successive user reboots, the latest observed boot is13:59:33.500 UTC.
+
+The postboot focused3 gate reached a real terminal before that reboot:25 passed,
+one new long-parent fixture assertion failed; no production visibility assertion
+failed. A reviewed test-only stronger fixture is frozen for focused4, preserving
+the same215-pixel host and all visibility guarantees. Automatic approval review
+blocked both exact proposed incremental-cache removal attempts before execution,
+with only `blocked by policy`; no deletion ran. Nondeleting NTFS compression
+recovered capacity instead. The incremental-cache pass was partially applied
+then intentionally stopped; the generated-binary pass completed exit0 across
+282 files with every SHA256 unchanged. C had11,777,519,616 bytes free afterward.
+Supported Ubuntu26.04 installation finished exit0 at14:36:46 UTC (session32405),
+with10.51GB host space remaining. First actual root shell reports Ubuntu26.04
+LTS, x86_64 Linux6.18.33.2-microsoft-standard-WSL2 and a mounted root filesystem.
+A systemd root-user-session warning remains recorded. The user316 mirrored/DNS
+settings were applied and runtime mirrored mode verified, but the guest had only
+loopback, no route and failed DNS/HTTPS. Read-only host IPv6 evidence is a cause
+hypothesis only; no global registry/adapter/VPN/firewall change was made. User328
+now supersedes that trial with VirtioProxy and explicitly makes AmneziaWG
+immutable, including inspection. Its exact VirtioProxy-only config is saved;
+both the initial startup and one persistent root-shell retry after compilation
+ended with CreateVm/0x800705b4 before guest commands. A distinct WslService-only
+restart then failed at Windows service access; it remains Running. No elevation
+workaround, extra launch or other service/network change followed. This is a
+startup timeout, not a measured VirtioProxy network failure. Root rechecked the
+Gitea issue through comment348 after renewed user steering: owner328 remains
+the latest posted solution and is already applied. Verified official Rust archives
+and all60 exact Ubuntu packages are prepared via Windows HTTPS; Ubuntu
+signature verification and installation remain mandatory. Windows
+focused4 passed26/26 after11m05 compile and9.54s test execution, retaining every
+geometry assertion. Strict all-target Clippy and workspace format also passed.
+Matching GUI compilation also passed; session87425 is terminal and no compiler
+lease remains live. Immutable GUI SHA256 is
+`5657BAB5C841939B66F901EFE6C0FFB2D7CBBE8CC5F111A0CA3DE8073D3846CE`.
+All238 actual source inputs were rehashed unchanged. After the26 affected tests,
+the immutable complete desktop executable passed all679 tests at15:47:53 UTC,
+zero failed/ignored/filtered, exit0, one test thread and ordinary Windows stack.
+The user subsequently directed that Linux builds and
+checking be skipped until they notify us that WSL networking is resolved. Linux
+setup, launches, diagnostics, builds and checks are paused; preserve current
+configuration and inputs. This direction is recorded in Gitea comment356 and
+supersedes service-access next steps. See
+[WSL readiness](release-wsl-readiness-9e8r6t-20260911.md).
+
+Fresh GUI5657 v2 Lifeline baseline opened through the native file picker. At
+1100x700 client size with both panels, child Name, Activity, OA root and pinned
+Back/Use controls were visible; a maximize/restore retained both raw names.
+The completed recovery record passed exact accepted-baseline, raw parent/child,
+kind/root and reserved-ID checks before a controlled isolated process stop.
+Recovery restored an unsaved local copy with an exactly equal accepted baseline
+and authored behavior/identities. Child Escape retained the parent; a new blank
+child, temporary Use and parent Cancel left nothing to undo. Save As to a fresh
+destination passed the unchanged core oracle with exactly two source files.
+The isolated process closed normally. A fresh direct Lifeline trial subsequently
+passed actual Create-before-Save, one Undo/Save and one Redo/Save against the
+complete independent model/source/original-ID contract. Fresh Machine owner
+visibility at minimum size, actual Create and open, one Undo/Save, one Redo/Save
+and real-picker reopen/SA/Save also pass the unchanged complete contract. All
+new source and consumer identities persist; Undo retains only the two proven
+generated files. The final six-file reopen equals Redo exactly, and all isolated
+native processes closed normally. See the
+[v2 native report](release-contextual-source-native-v2-20260911.md).
+
+Peer956 comment338 reserves our bounded syntax-only language outline seam;
+their codec/lifecycle scope remains separate. The query experiment is private,
+uncompiled and not integrated. The current design is
+[text navigation](release-text-navigation-design-20260911.md); a discovered
+Unicode path-collision mismatch is being corrected in a separate proposal.
+Independent outline review additionally requires rejecting noncanonical UUID
+spellings as authored navigation anchors and recommends folding paths once.
+Root verified the parser mismatch; the author is preparing a separate v2 patch.
 
 - CLI `BAD169F8…E3559`: author 12/12, strict all-target Clippy/format/build pass;
   independent 183 assertions across 21 fresh processes pass. All four committed
@@ -48,8 +121,9 @@ accepted build. No worker/compiler/test GUI remains active.
   inputs/executable and launched PID 7212 in the isolated
   `.local/native-qa/contextual-source-20260911-v1` stage. Lifeline Save-adoption
   and Chain direct Create each pass complete model/source and one Undo/Redo.
-  Machine direct Create/Save and Undo/Save pass; its Redo/reopen remain pending.
-  The saved GUI closed normally for reboot. See
+  Machine direct Create/Save and Undo/Save pass; its Redo remains pending.
+  A fresh-profile postboot Open/SA view/Save now passes complete six-file model,
+  source and original identities. That GUI closed normally. See
   [native results](release-contextual-source-native-20260911.md).
 - Native scenario B3: both OA use-return paths pass wide and minimum sizes;
   both SA paths pass minimum focused canvas. Pending disabled Open preserves the
@@ -161,34 +235,31 @@ Detailed evidence: [integrated gates](release-integrated-gates-20260910.md),
 
 ## Active ownership and execution
 
-All local workers are idle for reboot. `release_audit`'s two-file display freeze
-has independent source review; corrected focused2 was interrupted before tests,
-and lint/fmt/new GUI remain unexecuted. `palette_finish` preserved native raw
-evidence; `behavior_audit` closed the bounded review. Resume through
-[RESTART_HANDOFF.md](RESTART_HANDOFF.md); the following ownership remains reserved.
+Root owns integration, native input, commits, publication and Wiki updates.
+GUI5657 native trials and the complete679 desktop tests are terminal; no owned
+Studio, compiler or test process remains. All Linux actions are user-paused.
 
-- Root: exclusive native input, contextual GUI 52DE82 acceptance, remaining
-  local SA B2, integration, commits, publication and Wiki updates.
-- `palette_finish`: staged-owner caption correction and native preservation done;
-  stopped, with no active compiler/native lease.
-- `release_audit`: source-card layout and real Paragraph tests frozen; compiler
-  stopped for reboot with explicit interrupted evidence. Next is fresh focused3.
-- `behavior_audit`: independent layout/caption review closed; stopped.
-- Codex-956atf: external chooser/workspace work. Comment 224's corrected focus
-  and nested-scroll regressions are **prepared, not executed**. Comment 231
-  records peer-ratified schema 8/local-definition core implementation in isolated
-  `codex/analysis-core-20260911`; it is not integrated into this local descriptive
-  core. Numeric compilation and further representations retain peer ownership.
-- Codex-ytr83r: external B4 Scene/lifetime integration and supported Linux guest
-  route. Local Windows has no current Linux runtime. External results are
-  host-scoped; failed route attempts remain in their dated reports.
+- `release_audit`: full-suite/recovery archives frozen; now audits updated
+  Windows package inputs and per-binary source provenance without building.
+- `behavior_audit`: Lifeline evidence frozen; prepares separately reviewed v2
+  bounded outline/query proposals. No production application or compiler lease.
+- `linux_readiness`: Linux remains paused. Completed independent outline review;
+  now preserves only the completed Windows Machine evidence.
+- Codex-956atf: owns chooser/workspace/focus, shared canvas shell and isolated
+  schema8/local-definition core. Reported focus5/5, analysis28/28 and numeric26/26
+  plus core Clippy; codec/lifecycle work remains separate. None of that later
+  peer source is integrated locally. Our bounded language outline seam is
+  reserved by comment338; source8/codec ownership remains theirs.
+- Codex-ytr83r: owns external B4 Scene/lifetime integration and Linux packaging.
+  Linux work is paused; peer host results cannot substitute for local execution.
 
 User issue2/comment250 calls for consistent, domain-constrained interactive
 diagrams, not necessarily arbitrary placement. Codex-956atf owns the shared
 canvas-shell implementation in an isolated worktree (comment261). Existing
 technical Canvas widgets and source cards do not close this requirement.
-Before reboot, local WSL defaulted to version2 but listed no installed distro.
-User will restart; verify Ubuntu actually runs afterward before Linux gates.
+Local Ubuntu26.04 is installed; the last two startup attempts timed out before
+guest execution. Preserve that history and verified inputs while waiting for
+the user's explicit notice that WSL networking is resolved.
 
 Verified bundles for `eb5161b` and `4ecad78` are retained in
 `.local/integration-20260910`. Local refs `codex/behavior-snapshot-eb5161b` and
@@ -202,9 +273,9 @@ unassigned-lane map differences that must be addressed before acceptance.
 1. Finish native basic supplementary move/camera/focus/minimum matrix and current
    scenario/process/state tasks. Main basic/transition/history/reopen passed at
    wide size. Check raw drafts, recovery, exact source and real task completion.
-2. Natively verify and integrate the frozen contextual missing-source and
-   first-action implementation. Named creation/history/reopen passed;
-   operand-editing and qualified Action allocation remain separate open work.
+2. Publish the verified contextual missing-source/source-form milestone with
+   truthful Windows package inputs. Named and contextual creation/history/reopen
+   pass; operand-editing and qualified Action allocation remain separate work.
 3. Constraints/calculations and quantity compatibility are currently descriptive
    metadata; same-project includes are not maintained cross-project libraries.
    Peer schema 8/local-definition implementation is now ratified and staged in