@deeeed/metamask-harness 0.84.0 → 0.86.0

package/library/manifests/core.action-manifest.json

@@ -1321,7 +1321,7 @@
       ]
     },
     "metamask.perps.close_positions": {
-      "description": "core Close selected live Perps positions on HyperLiquid testnet by driving the headless perps controller closePosition() through the full signing/provider path. Testnet only. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "core Close selected live Perps positions by driving the headless perps controller closePosition() through the full signing/provider path. Testnet by default; mainnet needs network: mainnet and CORE_PERPS_ALLOW_MAINNET_WRITES=1. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -1591,7 +1591,7 @@
       "execution_capabilities": []
     },
     "metamask.perps.ensure_positions": {
-      "description": "core Higher-level wrapper that reads selected positions, places or closes via the headless controller as needed, then asserts the final position state. Testnet only. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "core Higher-level wrapper that reads selected positions, places or closes via the headless controller as needed, then asserts the final position state. Testnet by default; mainnet needs network: mainnet and CORE_PERPS_ALLOW_MAINNET_WRITES=1, and placing follows the shared Perps order rule. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -1744,7 +1744,7 @@
       ]
     },
     "metamask.perps.close_orders": {
-      "description": "Core Perps cancellation selects current orders by market/side or mode=all, then dispatches and verifies those exact order IDs. Missing or duplicate selected IDs fail before dispatch. Requires authorized signing and task-owned selection; defaults to testnet. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "Core Perps cancellation selects current orders by market/side or mode=all, then dispatches and verifies those exact order IDs. Missing or duplicate selected IDs fail before dispatch. Requires authorized signing and task-owned selection. Testnet by default; mainnet needs network: mainnet and CORE_PERPS_ALLOW_MAINNET_WRITES=1. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -2078,7 +2078,7 @@
       "execution_capabilities": []
     },
     "metamask.perps.ensure_orders": {
-      "description": "core Default to testnet for Perps mutations; mainnet is read-only unless explicitly requested.Higher-level wrapper that reads selected orders, cancels when needed, then asserts final order state. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "core Higher-level wrapper that reads selected orders, cancels when needed, then asserts final order state. Testnet by default; mainnet needs network: mainnet and CORE_PERPS_ALLOW_MAINNET_WRITES=1. An open state is a resting limit order, which the shared Perps order rule refuses on mainnet. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -2233,7 +2233,7 @@
       ]
     },
     "metamask.perps.start_state": {
-      "description": "core Default to testnet for Perps mutations; mainnet is read-only unless explicitly requested.Recommended configurable Perps start state that composes reusable domain operations before the proof window. Headless: converges POSITION and ORDER baselines on testnet via the controller; no navigation/page/HUD.",
+      "description": "core Recommended configurable Perps start state that composes reusable domain operations before the proof window. Headless: converges POSITION and ORDER baselines via the controller; no navigation/page/HUD. Testnet by default; mainnet needs network: mainnet and CORE_PERPS_ALLOW_MAINNET_WRITES=1, and orders follow the shared Perps order rule.",
       "schema": {
         "type": "object",
         "properties": {
@@ -2554,7 +2554,7 @@
       ]
     },
     "metamask.perps.teardown_state": {
-      "description": "core Recommended configurable Perps teardown state that restores the selected environment after proof. Headless: converges POSITION and ORDER baselines on testnet via the controller; no navigation/page/HUD.",
+      "description": "core Recommended configurable Perps teardown state that restores the selected environment after proof. Headless: converges POSITION and ORDER baselines via the controller; no navigation/page/HUD. Testnet by default; mainnet needs network: mainnet and CORE_PERPS_ALLOW_MAINNET_WRITES=1.",
       "schema": {
         "type": "object",
         "properties": {

package/library/manifests/extension.action-manifest.json

@@ -1237,6 +1237,42 @@
       },
       "execution_capabilities": []
     },
+    "metamask.app.assert_no_console_errors": {
+      "description": "Fail when MetaMask (service worker or UI pages) logged an error or uncaught exception that no console allowlist (the bundled library's, then each recipe library's diagnostics/console-allowlist.json) marks as known noise, judging the events since the launch began, by their own timestamps. Reads extension-console.log from the offset mm-harness launch records when it starts, and leaves out records the collector stamps with an event time before the launch (a replaced collector's replay of a browser the launch kept); with no recorded launch it fails unless since is start-of-log. The same classification feeds run diagnostics. Fails as unavailable unless this runtime's console collector runs on the run's CDP port and a control line logged in MetaMask's service worker or page reaches extension-console.log. Allowlist entries are exact signatures (schemaVersion 3).",
+      "execution_capabilities": ["host-read-export"],
+      "schema": {
+        "type": "object",
+        "properties": {
+          "levels": {
+            "type": "array",
+            "items": { "type": "string", "enum": ["error", "exception", "warning"] },
+            "description": "Default [\"error\",\"exception\"]."
+          },
+          "since": {
+            "type": "string",
+            "enum": ["launch", "start-of-log"],
+            "default": "launch"
+          },
+          "allowlist_root": {
+            "type": "string",
+            "description": "An extra directory holding diagnostics/console-allowlist.json."
+          },
+          "timeout_ms": {
+            "type": "number",
+            "minimum": 1,
+            "description": "Maximum time in milliseconds to wait for the capture control line (default 8000)."
+          }
+        },
+        "additionalProperties": false
+      },
+      "examples": [
+        {
+          "action": "metamask.app.assert_no_console_errors",
+          "intent": "Prove MetaMask logged no unexpected error since launch",
+          "next": "done"
+        }
+      ]
+    },
     "app.network_assert": {
       "description": "Assert a previously indexed app.network_capture summary without hiding its diagnostics on failure.",
       "examples": [
@@ -4095,7 +4131,7 @@
       "execution_capabilities": []
     },
     "metamask.perps.close_orders": {
-      "description": "extension Default to testnet for Perps mutations; mainnet is read-only unless explicitly requested. Cancel selected live Perps open orders. Use selector/mode params to cancel matching symbols or all orders. Extension ensure_* only assert existing state; converge an owned testnet account through an explicitly funded leaf action. Mainnet is never mutated.",
+      "description": "extension Cancel selected live Perps open orders. Use selector/mode params to cancel matching symbols or all orders. On mainnet, cancel is refused in the fixture-policy lane and needs the funded release lane. Extension ensure_* only assert existing state; converge an owned testnet account through an explicitly funded leaf action.",
       "schema": {
         "type": "object",
         "properties": {

package/library/manifests/mobile.action-manifest.json

@@ -1260,6 +1260,42 @@
       },
       "execution_capabilities": []
     },
+    "metamask.app.assert_no_console_errors": {
+      "description": "Fail when the app logged an error or uncaught exception that no console allowlist (the bundled library's, then each recipe library's diagnostics/console-allowlist.json) marks as known noise, judging the events since the launch began, by their own timestamps. Reads app-console.log from the adapter-rn console forwarder, which stamps each line with the event's own time: mm-harness launch records when it starts, and lines a reused app runtime replays from before then are left out; with no recorded launch it fails unless since is start-of-log. Only the device the bridge selects for the run (the one the control line comes back from) is judged; when that line names no device, every device is, reported as devices: \"all\". The same classification feeds run diagnostics. Fails as unavailable unless this checkout's forwarder is running and a control line logged inside the app through the debug bridge reaches app-console.log; the opaque release runtime has no bridge and always fails as unavailable. Allowlist entries are exact signatures (schemaVersion 3).",
+      "execution_capabilities": ["host-read-export"],
+      "schema": {
+        "type": "object",
+        "properties": {
+          "levels": {
+            "type": "array",
+            "items": { "type": "string", "enum": ["error", "exception", "warning"] },
+            "description": "Default [\"error\",\"exception\"]."
+          },
+          "since": {
+            "type": "string",
+            "enum": ["launch", "start-of-log"],
+            "default": "launch"
+          },
+          "allowlist_root": {
+            "type": "string",
+            "description": "An extra directory holding diagnostics/console-allowlist.json."
+          },
+          "timeout_ms": {
+            "type": "number",
+            "minimum": 1,
+            "description": "Maximum time in milliseconds to wait for the capture control line (default 8000)."
+          }
+        },
+        "additionalProperties": false
+      },
+      "examples": [
+        {
+          "action": "metamask.app.assert_no_console_errors",
+          "intent": "Prove the app logged no unexpected error since launch",
+          "next": "done"
+        }
+      ]
+    },
     "app.network_assert": {
       "description": "Assert a previously indexed app.network_capture summary without hiding its diagnostics on failure.",
       "examples": [
@@ -2486,7 +2522,7 @@
       "execution_capabilities": []
     },
     "metamask.perps.close_positions": {
-      "description": "mobile Default to testnet for Perps mutations; mainnet is read-only unless explicitly requested. Close selected live Perps positions. Use selector/mode params to close matching symbols or all positions. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "mobile Close selected live Perps positions on the app's current Perps network, with no mainnet opt-in. Use selector/mode params to close matching symbols or all positions. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -2577,7 +2613,7 @@
       "execution_capabilities": ["app-mutation", "external-mutation"]
     },
     "metamask.perps.close_orders": {
-      "description": "mobile Default to testnet for Perps mutations; mainnet is read-only unless explicitly requested. Cancel selected live Perps open orders. Use selector/mode params to cancel matching symbols or all orders. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "mobile Cancel selected live Perps open orders on the app's current Perps network, with no mainnet opt-in. Use selector/mode params to cancel matching symbols or all orders. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -2989,7 +3025,7 @@
       "execution_capabilities": []
     },
     "metamask.perps.ensure_positions": {
-      "description": "mobile Default to testnet for Perps mutations; mainnet is read-only unless explicitly requested. Higher-level wrapper that reads selected positions, closes or places when needed, then asserts final position state. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "mobile Higher-level wrapper that reads selected positions, closes or places when needed, then asserts final position state. Acts on the app's current Perps network: closing has no mainnet opt-in, and placing follows the shared Perps order rule, so it cannot leave a position open on mainnet. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {
@@ -3105,7 +3141,7 @@
       "execution_capabilities": ["app-mutation", "external-mutation"]
     },
     "metamask.perps.ensure_orders": {
-      "description": "mobile Converge selected testnet orders to open or absent, then independently assert the final state. Creating an open state uses a resting limit order. Pre-existing testnet state on an account the task owns is converged, not refused; mainnet is never mutated.",
+      "description": "mobile Converge selected testnet orders to open or absent, then independently assert the final state. Creating an open state uses a resting limit order, which the shared Perps order rule refuses on mainnet; cancelling acts on the app's current Perps network with no mainnet opt-in. Pre-existing testnet state on an account the task owns is converged, not refused.",
       "schema": {
         "type": "object",
         "properties": {

package/library/manifests/web-dapp.action-manifest.json

@@ -17,7 +17,7 @@
       }
     },
     "app.hud": {
-      "description": "Display recipe progress in an overlay on the app tab: recipe, step N/M, the current node intent and the last pass/fail. Never drawn in MetaMask's own pages; ignored by clicks and page text. --hud auto shows it only when the browser is headful.",
+      "description": "Display recipe progress in an overlay on the app tab: recipe, step N/M, the current node intent and the last pass/fail. Drawn on a MetaMask wallet page only for the length of a surface=wallet ui.screenshot; ignored by clicks and page text; kept in every ui.screenshot. Drawn in a headless or headful browser unless --hud hide, which also clears the HUD an earlier run left.",
       "examples": [
         {
           "action": "app.hud",

package/library/recipes/core/health/check.recipe.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://farmslot.io/schemas/recipe-v1.schema.json",
+  "title": "MetaMask Core health check",
+  "description": "Read-only check to run before ticket work: the headless Perps controller imports and answers one bounded HyperLiquid testnet account read. A failed precondition stops at the node named after its error; that node's intent gives the recovery. Places no orders.",
+  "paramsSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "timeout_ms": { "type": "integer", "minimum": 1000, "default": 60000 }
+    }
+  },
+  "workflow": {
+    "entry": "status",
+    "nodes": {
+      "status": {
+        "action": "app.status",
+        "next": "CONTROLLER_UNAVAILABLE",
+        "intent": "Record the resolved Core checkout"
+      },
+      "CONTROLLER_UNAVAILABLE": {
+        "action": "metamask.perps.read_account",
+        "network": "testnet",
+        "timeout_ms": "{{params.timeout_ms}}",
+        "next": "ACCOUNT_READ_FAILED",
+        "intent": "CONTROLLER_UNAVAILABLE unless the Perps controller imports and reads the testnet account in time. Recovery: mm-harness doctor --fix"
+      },
+      "ACCOUNT_READ_FAILED": {
+        "action": "assert_output",
+        "source": "CONTROLLER_UNAVAILABLE",
+        "assert": { "path": "$.accountState.totalBalance", "operator": "matches", "value": "^-?[0-9]+(\\.[0-9]+)?$" },
+        "next": "done",
+        "intent": "ACCOUNT_READ_FAILED unless the read returned a numeric balance; the controller reports an unreachable venue as a placeholder. Recovery: check network access to HyperLiquid testnet, then rerun"
+      },
+      "done": {
+        "action": "end",
+        "status": "pass"
+      }
+    }
+  }
+}

package/library/recipes/extension/health/check.recipe.json

@@ -0,0 +1,71 @@
+{
+  "$schema": "https://farmslot.io/schemas/recipe-v1.schema.json",
+  "title": "MetaMask Extension health check",
+  "description": "Read-only check to run before ticket work: the extension answers over CDP, onboarding is done, and the wallet is unlocked on a selected account at wallet home. A failed precondition stops at the node named after its error; that node's intent gives the recovery. Changes no app state.",
+  "paramsSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "capture_path": { "type": "string", "default": "screenshots/health-check.png" }
+    }
+  },
+  "workflow": {
+    "entry": "APP_NOT_RUNNING",
+    "nodes": {
+      "APP_NOT_RUNNING": {
+        "action": "cdp.target",
+        "require_reachable": true,
+        "next": "state",
+        "intent": "APP_NOT_RUNNING unless the extension answers over CDP. Recovery: mm-harness launch --verify"
+      },
+      "state": {
+        "action": "metamask.wallet.read_state",
+        "next": "ONBOARDING",
+        "intent": "Read the selected account, lock state and page without changing them"
+      },
+      "ONBOARDING": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.state.completedOnboarding", "operator": "eq", "value": true },
+        "next": "WALLET_LOCKED",
+        "intent": "ONBOARDING if onboarding is not complete. Recovery: mm-harness run wallet.import"
+      },
+      "WALLET_LOCKED": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.state.passwordInput", "operator": "falsy" },
+        "next": "NO_SELECTED_ACCOUNT",
+        "intent": "WALLET_LOCKED if the unlock page is showing. Recovery: mm-harness run wallet.smoke"
+      },
+      "NO_SELECTED_ACCOUNT": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.state.selectedAccount.address", "operator": "not_null" },
+        "next": "NOT_ON_HOME",
+        "intent": "NO_SELECTED_ACCOUNT if the wallet reports no selected account. Recovery: mm-harness run wallet.import"
+      },
+      "NOT_ON_HOME": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.state.href", "operator": "matches", "value": "/(home|sidepanel)\\.html#/?$" },
+        "next": "CONSOLE_ERRORS",
+        "intent": "NOT_ON_HOME unless wallet home is showing. Recovery: a ui.navigate node with page home, then rerun"
+      },
+      "CONSOLE_ERRORS": {
+        "action": "metamask.app.assert_no_console_errors",
+        "next": "screenshot",
+        "intent": "CONSOLE_ERRORS if the app logged an error outside the console allowlist since launch. Recovery: fix the error, or allowlist known noise with a reason in a library's diagnostics/console-allowlist.json"
+      },
+      "screenshot": {
+        "action": "ui.screenshot",
+        "path": "{{params.capture_path}}",
+        "next": "done",
+        "intent": "Record the ready wallet home as evidence"
+      },
+      "done": {
+        "action": "end",
+        "status": "pass"
+      }
+    }
+  }
+}

package/library/recipes/mobile/health/check.recipe.json

@@ -0,0 +1,71 @@
+{
+  "$schema": "https://farmslot.io/schemas/recipe-v1.schema.json",
+  "title": "MetaMask Mobile health check",
+  "description": "Read-only check to run before ticket work: the app answers, onboarding is done, and the wallet is unlocked on a selected account at wallet home. A failed precondition stops at the node named after its error; that node's intent gives the recovery. Changes no app state.",
+  "paramsSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "capture_path": { "type": "string", "default": "screenshots/health-check.png" }
+    }
+  },
+  "workflow": {
+    "entry": "APP_NOT_RUNNING",
+    "nodes": {
+      "APP_NOT_RUNNING": {
+        "action": "cdp.target",
+        "require_reachable": true,
+        "next": "state",
+        "intent": "APP_NOT_RUNNING unless the app's debug bridge answers. Recovery: mm-harness launch ios|android --verify"
+      },
+      "state": {
+        "action": "metamask.wallet.read_state",
+        "next": "ONBOARDING",
+        "intent": "Read the selected account and route without changing them"
+      },
+      "ONBOARDING": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.route.name", "operator": "matches", "value": "^(?!Onboarding|OptinMetrics)" },
+        "next": "WALLET_LOCKED",
+        "intent": "ONBOARDING if the app is still in onboarding. Recovery: mm-harness run wallet.import"
+      },
+      "WALLET_LOCKED": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.route.name", "operator": "ne", "value": "Login" },
+        "next": "NO_SELECTED_ACCOUNT",
+        "intent": "WALLET_LOCKED if the unlock screen is showing. Recovery: mm-harness run wallet.smoke"
+      },
+      "NO_SELECTED_ACCOUNT": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.account.address", "operator": "not_null" },
+        "next": "NOT_ON_HOME",
+        "intent": "NO_SELECTED_ACCOUNT if the wallet reports no selected account. Recovery: mm-harness run wallet.import"
+      },
+      "NOT_ON_HOME": {
+        "action": "assert_output",
+        "source": "state",
+        "assert": { "path": "$.route.name", "operator": "eq", "value": "WalletView" },
+        "next": "CONSOLE_ERRORS",
+        "intent": "NOT_ON_HOME unless wallet home is showing. Recovery: a ui.navigate node with page home, then rerun"
+      },
+      "CONSOLE_ERRORS": {
+        "action": "metamask.app.assert_no_console_errors",
+        "next": "screenshot",
+        "intent": "CONSOLE_ERRORS if the app logged an error outside the console allowlist since launch. Recovery: fix the error, or allowlist known noise with a reason in a library's diagnostics/console-allowlist.json"
+      },
+      "screenshot": {
+        "action": "ui.screenshot",
+        "path": "{{params.capture_path}}",
+        "next": "done",
+        "intent": "Record the ready wallet home as evidence"
+      },
+      "done": {
+        "action": "end",
+        "status": "pass"
+      }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeeed/metamask-harness",
-  "version": "0.84.0",
+  "version": "0.86.0",
   "type": "module",
   "bin": {
     "mm-harness": "bin/mm-harness"
@@ -21,15 +21,15 @@
     "check:syntax": "find . -name '*.mjs' -print0 | xargs -0 -n1 node --check"
   },
   "dependencies": {
-    "@farmslot/adapter-node": "0.1.4",
-    "@farmslot/adapter-rn": "0.19.1",
-    "@farmslot/adapter-sdk": "0.7.1",
-    "@farmslot/adapter-web": "0.6.2",
-    "@farmslot/agent-runtime": "0.17.0",
+    "@farmslot/adapter-node": "0.1.7",
+    "@farmslot/adapter-rn": "0.19.4",
+    "@farmslot/adapter-sdk": "0.8.1",
+    "@farmslot/adapter-web": "0.6.5",
+    "@farmslot/agent-runtime": "0.17.1",
     "@farmslot/handoff": "^0.3.1",
-    "@farmslot/protocol": "0.34.0",
-    "@farmslot/recipe-cli": "0.10.0",
-    "@farmslot/recipe-runner": "0.27.0",
+    "@farmslot/protocol": "0.35.0",
+    "@farmslot/recipe-cli": "0.11.1",
+    "@farmslot/recipe-runner": "0.28.1",
     "agent-device": "0.19.3",
     "commander": "^12.0.0",
     "esbuild": "0.28.1",

package/scripts/completions.sh

@@ -45,8 +45,8 @@ _mmh_flags_for() {
     execution-template) printf '%s' "--dir --domain-dir --project-worker --project-name --package-templates --package-id --flow --run-mode --platform --domain --id --provenance --include-shadowed --no-include-shadowed --title --force --json" ;;
     recipe-quality) printf '%s' "--input --output --recipe --task --evidence --params --adapter --library --advisor --advisor-model --advisor-stages --json" ;;
     actions)  printf '%s' "--adapter --action --kind --raw --action-manifest --target --json" ;;
-    call)     printf '%s' "--list --domain --source --sort --adapter --target --artifacts-dir --action-manifest --heal --json" ;;
-    run)      printf '%s' "--list --domain --source --sort --describe --plan --adapter --artifacts-dir --target --library --cdp-port --heal --record-video --json" ;;
+    call)     printf '%s' "--list --domain --source --sort --adapter --target --artifacts-dir --action-manifest --heal --hud --json" ;;
+    run)      printf '%s' "--list --domain --source --sort --describe --plan --adapter --artifacts-dir --target --library --cdp-port --heal --record-video --hud --json" ;;
     doctor)   printf '%s' "--adapter --target --fix --json" ;;
     install|verify|cleanup) printf '%s' "--adapter --target --json" ;;
     *)        printf '%s' "" ;;

package/site/assets/help-recipes.json

@@ -30,7 +30,8 @@
       ],
       "commands": [
         "mm-harness doctor --fix",
-        "mm-harness status --json"
+        "mm-harness status --json",
+        "mm-harness run health.check"
       ]
     },
     {
@@ -200,7 +201,7 @@
         "Analytics: verify the collection destination and existing consent before capture. Changing participation or marketing consent requires operator approval and restoration of the prior settings; a recipe's hardcoded opt-in is not permission. Missing collection prerequisites are not missing product events.",
         "Flake risk: wait on observable state instead of sleeping, keep device and runtime identity explicit, and never overwrite a prior run's artifacts.",
         "Mutation: require an independent state assertion and identity-bound receipt. Bind activity to that operation's accepted ID; an old row or nonzero count is insufficient. Opening and closing orders have different IDs. Schedule authorized cleanup in teardown, verify its result, and report any residue. Testnet cleanup closes what the task opened and never silently undoes another task's live proof on a reserved account or market.",
-        "Testnet account state: on a testnet account or market the task owns for its run (the slot's fixture account, or one reserved with exclusive_testnet_market=true), converging is an explicit, ownership-scoped setup choice, not a violation. Use the team library's perps.ensure-market-state or perps.clean-market-testnet, or on Mobile and Core metamask.perps.ensure_positions / metamask.perps.ensure_orders (mode=all for strays), record what was closed in the trace, then prove. A pre-existing position or order on an account the task owns is never a reason to block, skip, or refuse, and a fixture that demands an empty account must converge rather than refuse. Extension ensure_* and teardown_state only assert; converge there through an explicitly funded leaf action. Never broaden cleanup onto an account or market the task does not own; obtain an owned one instead of blocking. Mainnet is read-only.",
+        "Testnet account state: on a testnet account or market the task owns for its run (the slot's fixture account, or one reserved with exclusive_testnet_market=true), converging is an explicit, ownership-scoped setup choice, not a violation. Use the team library's perps.ensure-market-state or perps.clean-market-testnet, or on Mobile and Core metamask.perps.ensure_positions / metamask.perps.ensure_orders (mode=all for strays), record what was closed in the trace, then prove. A pre-existing position or order on an account the task owns is never a reason to block, skip, or refuse, and a fixture that demands an empty account must converge rather than refuse. Extension ensure_* and teardown_state only assert; converge there through an explicitly funded leaf action. Never broaden cleanup onto an account or market the task does not own; obtain an owned one instead of blocking. On mainnet, orders follow the shared Perps order rule (PERPS_MAINNET_ORDER_REFUSED), Core needs CORE_PERPS_ALLOW_MAINNET_WRITES=1 for any write, Mobile cleanup acts on whatever network the app is on, and Extension refuses mainnet writes other than orders and `close_visible_position` in the fixture-policy lane.",
         {
           "text": "An accepted order can fill before the UI updates. Preserve its receipt even when the expected resting-order assertion fails; one empty read does not prove cleanup. Check the read API's cache and freshness options before adding polling. Reconcile returned margin against the pre-placement balance. A successful close does not turn the original failed proof into a pass.",
           "adapters": [