PR: https://git.cafe/pingdotgg/t3code/pulls/26070
Before: github/main 32ecd71726 (separate /home/user/main worktree)
After: cf8111f31a04d79a8f33a1acd060e423fc990410 (exact PR head)
Linux Boat VM. Playwright from repo dependencies, /usr/bin/google-chrome.
Each checkout: timeout 600 vp i; background setsid nohup vp run dev.
Main used /home/user/main/.t3; PR explicitly used --home-dir /home/user/t3code/.t3.
Main stopped before PR started; no concurrent dev servers.

Created through web UI on both revisions:
- Project /home/user/webhook-verification, a real initialized git repo.
- Settings > Scheduled tasks > New task > On webhook.
- Workspace: Use the project checkout. Model: Codex GPT-6.1-Sol.
- Prompt: Reply with UTF8_VERIFIED and the last 30 characters of this webhook
  body, exactly as received. Do not use tools or edit files. {{body}}
Webhook requests used HTTP POST against each task's actual generated URL.
Tokens intentionally excluded from this transcript.

MAIN
POST text/plain: 'a'.repeat(65535) + '€' [65538 bytes]
HTTP 202; delivery outcome Ran.
Read Settings > Scheduled tasks > Deliveries > Body (truncated).
DOM body length 65536; tail 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaa�'.
Real completed Codex GPT-6.1-Sol turn replied:
UTF8_VERIFIED aaaaaaaaaaaaaaaaaaaaaaaaaaaa€

PR
POST identical text/plain body [65538 bytes]
HTTP 202; delivery outcome Ran.
DOM body length 65535, exactly 'a'.repeat(65535); no U+FFFD.
Real completed Codex GPT-6.1-Sol turn replied:
UTF8_VERIFIED aaaaaaaaaaaaaaaaaaaaaaaaaaaa€
(The delivery's stored prompt preview has its own 64 KiB cap; the completed
provider response proves the actual agent prompt retained the full body.)

NEARBY BEHAVIOR ON PR
POST 'nearby UTF8: café € 中文 😀' [34 bytes]
HTTP 202, Ran; Body (not truncated) exactly preserved the submitted string.
Real completed Codex turn replied:
UTF8_VERIFIED nearby UTF8: café € 中文 😀

Disabled the task using its Enabled switch in the web UI, saved it.
POST 'a'.repeat(65535) + '😀' [65539 bytes]
HTTP 409 {"error":"hook_disabled"}; UI outcome Task paused.
Logged body exactly 65535 'a' characters; no replacement character.
POST 'a'.repeat(65533) + '€z' [65537 bytes]
HTTP 409 {"error":"hook_disabled"}; UI outcome Task paused.
Logged body exactly 'a'.repeat(65533) + '€', length 65534.
The complete final multibyte character at the limit is preserved.
No extra provider threads were launched for either disabled request.

FOCUSED CHECKS
Blacksmith task-owned testbox, PR head synced, dependencies installed there:
vp i && cd apps/server && vp test run src/scheduledTasks/ScheduledTaskService.webhook.test.ts
PASS: 1 file, 50 tests; duration 5.68s.
Existing GitHub PR check status: 23 passed, 7 skipped, 0 failing, 0 pending.
No code changes, commits, pushes, labels, merges, rebases, or force pushes.

Not exercised: native desktop shell, iOS/Android clients, other providers,
remote/relay/T3 Connect, and external GitHub webhook delivery/signature setup.
HTTP payloads were sent directly to the real local server webhook endpoint.