Packaged repaired navigation trial — preparation only
Root owns GUI input and acceptance. No launcher, oracle, process/module check or package action has been executed during this preparation. This helper uses the future independently reviewed package extraction directly, never the mutable target executable or producer stage. It does not repeat invalid-source repair/recovery tests already covered by the B183 v4 trial.
The candidate is B183EF31…B168848 from source 33c6d83, retained historical EFEE server and F456 DLL. Version is 0.2.0-preview.navigation.20260911. The server remains separately sourced. Native acceptance must distinguish this new package trial from the prior source-native v3/v4 trials.
Binding and future execution
The unbound draft and its original hashes are preserved byte-exact under unbound-draft/. binding.pending.json remains historical. Final binding.json SHA256 is 82606e6b3a5fb5dada3e55adcd5cd76792c9f938e6907313539dae7fc5125657, pinned in helper.py. It identifies the actual ZIP d7228c542f162663933ea002739a78c722bcca41e437df63b7c868ea2af201f1 (32,971,712 bytes), producer readback DB0053CE…20F498, and independent artifact PASS 03D3E990…FF06F2. All 559 extraction hashes were read back against both maps before binding. Extraction is the reviewer's .local/navigation-package-review-20260911/extracted/ArcadiaStudio-0.2.0-preview.navigation.20260911-x86_64-pc-windows-gnullvm. Root reviews the final helper and binding before explicit execution; no helper action has run. Arbitrary package paths cannot be supplied on the command line.
Admission verifies the binding, actual ZIP bytes, producer and reviewer PASS/hash/size/full file maps, every extracted file, ZIP entry contents and all three binary hashes. A fresh exclusive trial/ contains private profile/Desktop/APPDATA/LOCALAPPDATA/TEMP, screenshots and work. Standard nonsecret Windows paths are inherited explicitly; PATH contains only Windows directories. The package working directory remains the extraction, allowing full-map checks to detect incidental added files. Package contents are never modified by the helper. Initial work is an exact private copy of the pinned valid navigation fixture: four Arcadia files, Unicode path, two activities and one interaction. No baseline oracle is run merely to copy this already pinned fixture.
Future authorized commands from repository cwd, using C:/Users/User/.cache/codex-runtimes/codex-primary-runtime/dependencies/python/python.exe:
python .local/navigation-repair-package-native-20260911/helper.py launch
pwsh -NoProfile -File .local/navigation-repair-package-native-20260911/loaded-modules.ps1
python .local/navigation-repair-package-native-20260911/helper.py saved --label navigation-final-saved --after-visible-save
python .local/navigation-repair-package-native-20260911/helper.py closed --observed-absent
These commands have not been executed. Replace python with the absolute bundled executable. Root first opens trial/work/project.arcadia through the real file dialog, exercises F12, References and Back, edits then restores using Undo/Apply as intended, explicitly saves the baseline, and observes success. Only then is saved allowed. It preserves an exact source checkpoint and requires all four raw files equal the pinned baseline before running the complete same oracle967. The oracle gets only the package directory plus Windows PATH for F456 resolution. Raw stdout/stderr/exit and before/after package guards are retained. Any unexpected package addition/removal/change writes the exact delta before refusal. This is saved model/source evidence, not a synthetic assertion that GUI actions happened.
Root closes normally, observes the window absent, then invokes closed. The helper checks the original PID plus creation identity is absent (a reused PID is distinguished), and checks the entire ZIP/package map again. It does not close/kill any process or fabricate a numeric exit code. The optional loaded-modules.ps1 is a separate read-only query of the exact PID/path/creation identity; it records paths/hashes and flags modules outside Windows or the reviewed package. It does not operate the GUI or launch a server.
All operations refuse existing receipts/trials. Do not delete or overwrite a failed trial; retain evidence and prepare a separately reviewed trial if needed. No compilation, source edits, publishing, tags or WSL operations are included. Old contextual and navigation trials/helpers remain untouched.