PR #25436 runtime verification, 2026-10-30, Linux Boat VM
main: 5ef56853ef1854da50bc1909c6c0a32700f2cb13
PR:   c1c35399004e8a3b927c1e775f8b074e2748c71b

Used vp i on both checkouts. One background dev server at a time.
Main: /home/user/main, web 8693, server 16733.
PR: /home/user/t3code, web 5733, server 13773,
    vp run dev --home-dir /home/user/t3code/.t3
Browser: repo playwright-core + /usr/bin/google-chrome.
Project and thread created through web UI. Real Codex gpt-6.1-sol turns.
The provider created a Blob download in a real server browser tab.
No mocked browser, service, provider, or generated database fixtures.

MAIN REPRODUCTION
A graceful stop deleted the active tab download; no leak on this path.
Repeated the download, left its tab open, SIGKILLed the captured dev process
session, then restarted main against the same isolated state.
$ diff main-crash-before.txt main-crash-after.txt
(no output, exit 0: identical filename and SHA256 remained after startup)
126c8d6bdcc519c0f5cbc8c7e5d12a554cb6972fc8997bb14c25f656157ce782  /home/user/main/.t3/userdata/server-browser/downloads/1b340da2b03822aa925d8487cf33fda6deeebff685164f19ac4ed2ccf40e2b9a/9ce9711d-cd46-4645-96cc-e6987c1a21d8

PR STARTUP AND CRASH RESTART
Copied the app-created main state into isolated PR .t3 with main stopped.
PR startup removed server-browser/downloads, including the orphan above.
Real Codex turn opened a new default-profile browser tab and read:
  localStorage takeover25436 = profile-preserved
A fresh download appeared in preview_status and existed on disk.
Clicked the visible download link through the web browser panel, clicked
Save in the Downloaded report-25436.txt toast, and captured the client download.
$ sha256sum client-0.txt
126c8d6bdcc519c0f5cbc8c7e5d12a554cb6972fc8997bb14c25f656157ce782
The 23-byte file matches main exactly (preview-download-25436 + newline).

SIGKILLed the captured PR dev process session with downloads and tab open.
Restarted the exact same PR head and isolated state.
$ test ! -e .t3/userdata/server-browser/downloads
(exit 0 after startup)
Codex preview_status: no reachable old tab/downloads.
New default-profile tab still read localStorage value profile-preserved.
New download: listed in status, 23 bytes, SHA256 identical to main above.
Codex closed this tab with t3_preview_close; saved file and parent directory
were absent afterward. Independently inspected downloads: no files remained.

FOCUSED CHECKS (Blacksmith testbox)
vp i && vp test run apps/server/src/preview/ServerBrowser.test.ts
Test Files: 1 passed. Tests: 30 passed.
GitCafe reports 28 successful checks, 0 pending, 0 failing on exact PR head.
No source changes, commits, pushes, label changes, or merges.

NOT VERIFIED
Native mobile/Electron shells, Windows/macOS, relay/tunnel sessions,
permission-denied startup cleanup warning, and disk-full failure paths.
Browser-profile preservation checked through real persisted localStorage;
no claim about all profile file bytes remaining identical.