PR 33976 runtime verification, Linux Boat VM, 2026-11-10
main: d91915db9e36b03450aa7d6dbd35ff27cb027ffe
PR: 6ff6fa719bec064b63e09cdc595096ab8da61bb6
Browser: repo Playwright 1.60.0 and /usr/bin/google-chrome
Provider: Codex gpt-6.1-sol, real local proxy

Main: git worktree add ../main github/main; vp i; background vp run dev
PR: exact detached head; vp i; background vp run dev --home-dir /home/user/t3code/.t3
Main stopped by captured process-group PID before PR startup.

Created /home/user/gzip-verification repository; added project through app.
Created source thread and Codex turn through composer; provider read README marker.
GET /api/orchestration/threads/<source>/transcript, protocol header 2 => 200
Exported actual timeline as JSONL using the transcript header and timeline rows.
Source JSONL: 18013 bytes.
Main composer file input: application/x-ndjson, raw signed claim => POST 204.
Main stored SHA-256 matches source.
Main Codex returned copper-otter-33976 and SOURCE-TRANSCRIPT-33976.
PR composer file input: same name, MIME, and bytes => POST 204.
PR signed claim: sizeBytes=18013, gzipSizeBytes=5264.
PR browser request Content-Length=5264.
PR decoded file SHA-256 matches source:
0d3a3af44db35f7db7696dc4a6c893d1b67e8a1b742879c1ab13b0936e1dd0c7
PR Codex returned copper-otter-33976 and SOURCE-TRANSCRIPT-33976.

Neighbor: README.md text/markdown: sizeBytes=124, Content-Length=124, no gzip claim, POST 204.
Both files sent together; Codex returned README marker and transcript identifier.
Real HTTP endpoint using signed browser upload URL:
valid gzip retry, 5264 bytes => 204
invalid gzip, matching signed 5264-byte wire size => 400 Body is not valid gzip.
truncated body, 5256 bytes => 400 Content-Length must match the upload size.
raw body against gzip claim, 18013 bytes => 400 Content-Length must match the upload size.
Stored hash unchanged. No .part files remained.

Blacksmith: 58 focused existing tests passed.
Blacksmith: vp run check:changed verify/main passed after fetching comparison history.
CI reported 32 successful, 0 pending, 0 failing checks on exact head.

Not verified: cross-environment drag gesture, two live paired environments,
old/new version combinations, CompressionStream absence, shaped-link speed claims,
relay/tunnel, desktop shell, native iOS/Android, other providers.
One dev server at a time; transcript attached through real composer file input.
No mocks, fixtures, demo data, source edits, commits, or pushes.