PR 28534, exact head 84c69e9c7236163dc52bd03e2d2e44db21ecb485
Linux x64, real source builds via Blacksmith. Local app driven with repository playwright-core and /usr/bin/google-chrome.

Before: github/main 37d7615a91d880c3776d575e1152b9c955104de2
Worker-only stable tag: v99.28.534 (controlled tag, not a published release)
$ cd apps/server && vp pack && node dist/bin.mjs --version
t3 v0.1.6
Source manifest version: 0.1.6

After: exact PR head 84c69e9c7236163dc52bd03e2d2e44db21ecb485
Worker-only stable tag: v99.28.534
$ cd apps/server && vp pack && node dist/bin.mjs --version
t3 v99.28.534
$ git diff --exit-code -- apps/server/package.json
(exit 0; manifest unchanged)
Downloaded this packed server and ran it locally, serving the actual web build.
Settings > Sharing & access showed: 99.28.534 · http://127.0.0.1:5733/

Neighbor: explicit manifest version override on the same tagged commit
$ cd apps/server && vp pack && node dist/bin.mjs --version
t3 v99.28.535-preview.1
Neighbor: restored manifest, removed worker-only stable tag
$ cd apps/server && vp pack && node dist/bin.mjs --version
t3 v0.1.6

Real user path: created a project and Git repository through Add project > New project,
selected Codex gpt-6.1-sol, submitted a message through the web composer.
The provider ran pwd/git status, created verification.txt and read it back.
Actual filesystem contents: tagged-source-provider-ok (no trailing newline).
Client displayed the completed reply and +1 file diff.

Checks: 5 focused tests passed. check:changed against PR base 7195b699547b538e49f758e314dde5c8c5d907cf passed format, lint, both knip passes, GraphQL validation, six package typechecks, and three affected tests.

Scope: a controlled stable tag was used on current source, avoiding edits to published historical tags.
Historical releases without this patch remain unchanged. Web About uses its own manifest and still shows 0.1.6.
Native desktop/mobile, other OS builds, standalone executable packaging, and external remote/relay modes were not exercised.