Navigation prerelease independent artifact and server review
Codex-9e8r6t /root/behavior_audit, 2026-09-11. PASS within the scopes below. Root owns packaged GUI acceptance and publication. This review neither launches the GUI nor runs Cargo, a compiler, Linux or WSL.
The first independent archive invocation passed at 21:22:42 UTC (exit 0, 23.938 s); the first packaged-server invocation passed at 21:23:19 UTC (exit 0, 5.844 s). The adapted evaluator and frozen input binding remained unchanged throughout both runs. Earlier evaluators and the failed original producer preparation remain untouched.
| Artifact | Identity |
|---|---|
| ZIP | ArcadiaStudio-0.2.0-preview.navigation.20260911-x86_64-pc-windows-gnullvm.zip |
| ZIP SHA256 / bytes | d7228c542f162663933ea002739a78c722bcca41e437df63b7c868ea2af201f1 / 32,971,712 |
| Fresh extracted files | 559; all names, bytes, CRCs and checksums checked |
| GUI SHA256 | b183ef31f16b3986538b3f2aba8435eab45978635c47f99ca01be6e72b168848 |
| Historical server SHA256 | efeeb89c0d2e0f93df4472cb3e9f48b2b722a37ae1043c90a5a56f2e845fe665 |
| Runtime SHA256 | f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4 |
| Accepted GUI source base | 33c6d83e9ba9a5b1310b1b627d7c40affcbcf15c |
| Exact-byte reconstruction | 802855f7e6f2f00a107a12196b458b267f586b8d |
artifact-result.json records 6,002 individual checks, including safe relative file-only ZIP entries, no duplicate/case-colliding or Windows special names, fixed timestamps, exact portable payload membership, packaged document/example bytes, and every checksum. The complete extraction independently matches the frozen producer readback. Its 266 dependency packages match the previously recorded desktop/server graph, including 263 registry packages; exact notice inventories, embedded-font notices and compiler/runtime records were checked. All 484 referenced notice files exist with their declared bytes. The notice collector describes current GUI inputs; historical server provenance remains separate.
All 500 captured GUI gate inputs (9,482,855 bytes) match original source ZIP 213fdb39…6887b7, reconstruction Git blobs and both producer checkouts. The fifteen measured newline restorations include mixed-newline creation.rs and guide.rs; no semantic source change is hidden by normalization. The original capture identifies eeeaa126 plus the repair delta, subsequently committed at 33c6d83. Five original gate results, their streams, the actual Cargo GUI artifact and all 23 preserved external evidence records were read back. The 755 passed / 0 failed / 1 ignored desktop result is existing producer evidence, not a test rerun by this evaluator.
The unchanged EFEE server retains its own September 7 tar and 120 recorded source files. Current GUI core differs in language.rs and adds language_outline_tests.rs; this review does not attribute EFEE to the newer source. Original shared resources and lock dependency identities were checked separately. The new workspace adds only the existing local CLI lock entry. Reconstruction is not the original build commit, and no reproducible or release-profile build is claimed.
server-result.json records 1,801 checks. The shipped server ran with PATH limited to this package and Windows directories, standard Windows path variables, private profile/temp/data locations, and proxy-free 127.0.0.1 requests. Help/version, health, readiness and the complete served OpenAPI bytes passed. One Unicode-named project was created; its complete summary, model, SourceBundle, resource/model IDs, revision 1, ETag, Location and durable JSON exactly matched the prewritten literal contract. Restart on the same store preserved the entire GET response, revision, ETag and every durable JSON byte. Both owned processes (2440 and 5504) were explicitly terminated after acknowledged persistence and returned Windows exit 1; this is not a graceful-shutdown test. Fresh process readback found neither PID present.
The complete package map and ZIP remained unchanged after both server processes stopped. The extraction was then handed to root for a separate native GUI trial; this report's package-unchanged claim ends at that handoff. It does not claim broader server editing coverage, GUI usability, final OA/SA parity or final-release acceptance.
Raw receipts are artifact-{command,result,stdout,stderr}.*, server-{command,result,stdout,stderr}.*, the seven HTTP response body/metadata pairs and process streams under server-run/, plus process-readback.json. evidence-manifest.json binds the non-package reviewer evidence. review.py was adapted from the prior contextual reviewer by the preserved prepare-reviewer.py; no oracle fields were relaxed. The existing producer helper was not imported or rerun.