ARCADIA-Studio/harness/release-canvas-repair-validation-20260912.md

# Canvas and source repair — Windows prerelease validation

Version `v0.2.0-preview.canvas-repair.20260912`; release owner Codex-ytr83r. This records completed local acceptance for an unfinished Windows development milestone. Publication and downloaded-asset readback are recorded separately after upload. The full OA/SA goal remains incomplete; Linux is user-paused.

## Source and artifacts

Studio source: **33e30c1cd7a6c99513a0ebd02ba68fccbad8f58d**. Its 530 frozen inputs / 9,727,025 bytes match the built source and subsequent evidence-only checkpoints. Frozen manifest SHA256 `0f21b9a852cf44699bf29fce0a35ec460744c85f5e26f0ea4920e8568211e312`. The earlier capture baseline in raw receipts is provenance, not a different final source attribution. All commands used the recorded Rust/Cargo1.98.1 Windows GNU/LLVM toolchain, one build job, offline/locked dependencies and the unoptimized development profile.

| Artifact | Bytes | SHA256 |
| --- | ---: | --- |
| arcadia-studio.exe | 113,049,088 | `504862533caad919912e40c89bed4b1e43ba98138c42085480602a0a21fff658` |
| arcadia-server.exe | 39,621,120 | `aba87a5fb795deb995029a737c2ebb9d2b44c8d274edaa2295363b226d9af6be` |
| libunwind.dll | 190,464 | `aa282fa47bb2c4e210cea5e470cdbdca58568f0be0bc73e404d86ab9cd95ef6a` |
| ArcadiaStudio-0.2.0-preview.canvas-repair.20260912-x86_64-pc-windows-gnullvm.zip | 32,752,913 | `1e962fadce47922bdcf69e0e1d89e144e582083d940f4c9c9a5c6fbfece95c24` |

The optional server is the unchanged artifact from **321897fd55af9e07afa2c6ebf1e50be49e86f7d9**, not a new33e build. Core/server source trees and the workspace manifest match; the sole intervening Cargo.lock difference is a desktop-only unicode-segmentation dependency edge. [Package/component provenance](experiments/canvas-repair-package-33e30c1-20260912/README.md) preserves the exact comparison and original server manifest.

## Completed checks

- Five focused saved-destination tests passed; the same five are included in **761 desktop all-target tests**, with zero failures/ignored. Strict desktop all-target Clippy (`-D warnings`) and the matching Studio build passed. All530 frozen inputs were checked before each gate and after build. [Closed gate logs, commands and timings](experiments/repair-union-windows-33e30c1-20260912/README.md).
- Package production validated PE dependencies, notices, documentation, copied hashes and ZIP contents. Fresh extraction independently read back **all559 files**, exact sizes/hashes and checksum inventory. The initial attempt failed before staging on equivalent timestamp spellings; a reviewed r2 comparison preserved100ns distinctions and all other fields. Both attempts are retained. [Producer/extraction evidence](experiments/canvas-repair-package-33e30c1-20260912/README.md).
- Exact packaged Studio: valid original → invalid second destination → source repair equal to the former accepted content → Apply still unsaved → Close/Cancel → Save. The destination matched its predeclared expected complete model/source/physical bytes; the original file remained unchanged. Graphical rename, one Undo and one Redo, each saved separately, matched exact expectations. A prepared real v1 interrupted-save journal rolled disk back while retaining current accepted content as unsaved; Close/Cancel and Save retry passed. Seven complete model/source comparisons plus one invalid-source bytes-only comparison support this route.
- Packaged Unicode: combining accent and joined-emoji labels rendered in OA/SA; Create and lane-header selections resolved to the expected aliases. Wide Latin/CJK labels remained contained, with full names in Properties. Separate passive Saves matched both complete two-file models/sources. These two checks bring this run to nine valid complete comparisons plus the one invalid bytes-only check. Long wide labels can still be hard-clipped; string integrity does not establish font-width-aware fitting.
- Packaged Home discovered the bundled water-pressure example from an unrelated working directory (94objects/62links/1check). Offline guide search and the scenario topic worked. This was smoke inspection, not a complete walkthrough evaluation.
- Studio launched with a fresh private profile and child PATH restricted to Windows plus the extracted package, PID1660. A normal Alt+F4 completed with **exit0**, empty stdout/stderr, and **all559 package files unchanged**. Bound exit was recorded2026-09-12T11:49:40.5672408Z. [Native action account, original images, independent reviews and closed receipts](experiments/canvas-repair-native-33e30c1-20260912/README.md).
- Fresh extracted server passed **25 REST requests/assertions** covering candidate nonmutation, warning-only commit, source/JSON validation parity, rejected-write atomicity, repair and complete source/model persistence through restart. Seven independent raw-response pairs matched; all559 package files stayed unchanged. Two test-owned servers were deliberately terminated and confirmed stopped; these are not graceful-exit checks. The repaired fixture retains its expected unrelated sequence-gap warning. [Raw server evidence](experiments/canvas-repair-server-33e30c1-20260912/README.md).

## Reused evidence and limits

Earlier a57/69DB source/consumer creation passed13 full oracles and45 screenshots for Cancel, Activity/Lifeline, Function/contribution, SystemActor/StateMachine/optional view, saved Undo/Redo and reopening. Separate a57 camera evidence covers selected OA/SA pan,100/125/Fit and minimum1100×700-client Fit66 selection/clipping, followed by exact passive Save and exit0. [Staged creation](experiments/staged-source-native-a57c334-20260911/README.md), [camera checks](experiments/canvas-camera-a57c334-20260912/README.md). Older865/BF9 child-work evidence separately covers responsibility/identity preservation, nested children and history/reopen. [Child-work continuation](experiments/native-child-continuation-865483b-20260911/README.md). These remain bound to their original executable/source versions and are not additional tests to sum with761.

The current native frame was1442×932. Small fitted labels, long-name clipping, arbitrary zoom/font/DPI, full keyboard/accessibility coverage, every recovery fault and full product usability remain outside this milestone. The prepared journal exercises actual recovery format, not an observed application crash. Evaluated quantities/calculations/constraints, maintained libraries, large-model text ergonomics and complete OA/SA graphical/textual parity remain unfinished. Separately delivered peer definition/reference navigation and pending alias-preview work are not included here. Linux/WSL setup, networking, builds and checks remain explicitly paused.

## Run

Download the complete Windows ZIP and checksum, verify the SHA256 above, then extract the entire folder. Run `arcadia-studio.exe`; keep `libunwind.dll` beside both executables. `START-HERE.txt`, [Windows packaging guidance](../docs/windows-packaging.md) and [server guide](../docs/server.md) explain the portable bundle and optional REST server. Copy the whole example folder before editing; source Save As does not copy evidence files. The separate standalone `arcadia` CLI is **not included** in this two-executable package.