PR #28301 real-environment verification, 2026-11-01

Main: github/main 955e2bfbb5c092c54ad795c8d379fec99702a6b5
PR: only21mil:fix/audit-m021 91d7cfa6ece359afa228bfda412b5baf7a82f7b3

Setup:
  git worktree add ../main github/main
  timeout 600 vp i (both checkouts)
  setsid nohup timeout 7200 vp run dev --no-seed
  Main ports: server 16733, web 8693
  Stopped main process group using captured launch PID 21063.
  Copied only main's app-created isolated .t3/userdata into PR .t3/userdata.
  setsid nohup timeout 6500 vp run dev --home-dir /home/user/t3code/.t3 --no-seed
  PR ports: server 13773, web 5733

Browser and provider:
  Repository Playwright 1.60.0 with /usr/bin/google-chrome.
  Added local /home/user/t3code project through the app.
  Selected Codex gpt-6.1-sol in the composer, through the local proxy.
  Created real threads and messages with the app. No fixtures, mocks or demo data.

Main, thread 86a2d0b6-a4d6-40b4-8575-2980254cb78c:
  First message -> TITLE_OK. Generated title: Thread Title Generation.
  Thread menu -> Settle thread -> Snooze -> In 1 hour.
  Read-only database inspection confirmed settledOverride=settled,
  settledAt non-null, snoozedUntil non-null and snoozedAt non-null.
  Sent wake message -> WAKE_OK. Thread left Snoozed.
  Ordinary follow-up -> FOLLOWUP_OK.

PR:
  Same baseline thread settled and snoozed again before switching servers.
  Sent wake message -> WAKE_PR_OK. Thread left Snoozed.
  Read-only persisted state: settledOverride=null, settledAt=null,
  snoozedUntil=null, snoozedAt=null; modelSelection=codex/gpt-6.1-sol.
  New thread 271096c2-8bdc-44de-a124-6a89db94f0ec:
  First message -> TITLE_OK. Generated title: Thread Title Generation.
  Ordinary follow-up -> FOLLOWUP_OK.
  Reloaded browser: generated title and both replies still present.

External SQL trace during real UI dispatches:
  NODE_OPTIONS=--require=/tmp/verify28301/sql-trace.cjs
  Patched node:sqlite DatabaseSync.prepare returned statement.all only to log
  the characteristic command-projection query that omits settled leaf nodes.
  The preload also runs in the reader worker. No repository source changes.
  main first-message loads: 2 at 05:04:06.250 / 05:04:06.320 UTC
  main settle+snooze wake loads: 3 at 05:04:44.117 / .130 / .137 UTC
  main ordinary follow-up loads: 1 at 05:04:57.846 UTC
  PR settle+snooze wake loads: 1 at 05:06:16.199 UTC
  PR first-message loads: 1 at 05:06:55.013 UTC
  PR ordinary follow-up loads: 1 at 05:07:09.078 UTC
  These are projection-load counts, not all SQL statements or latency measurements.

Checks:
  Blacksmith worker installed dependencies with vp i.
  Initial check lacked merge-base history in the worker's shallow snapshot.
  Fetched refs/pull/28301/head with depth 2 in that worker, then reran:
  vp run check:changed 15fe2832727893cbdd2214383f9f971474849695
  PASS format, lint, both knip stages, GraphQL, typechecks in 3 packages,
  and 122 tests in 4 files. PR CI: 31 successful, 0 pending, 0 failing.

Limits:
  No native mobile, Electron shell, other providers, relay/tunnel connections,
  all three changed branches together, or large-history latency measurements.
  The recording's checkpoint diff reflects switching the project checkout
  from current main to the older exact PR head. No source edits were made.