@junghanacs/entwurf 0.20.1 → 0.22.0

package/scripts/mutants/codex-native.json

@@ -0,0 +1,838 @@
+{
+	"schemaVersion": 1,
+	"lane": "codex-native",
+	"mutants": [
+		{
+			"claim": "CODEX-BRIDGE-REQUEST-IDENTITY",
+			"title": "the Codex MCP provenance label drifts from the vendor host label, leaving request metadata present but anonymous",
+			"subject": "pi-extensions/lib/meta-sender-identity.ts",
+			"find": ["export const CODEX_BRIDGE_PROVENANCE_LABEL = \"codex\";"],
+			"replace": ["export const CODEX_BRIDGE_PROVENANCE_LABEL = \"external-mcp/codex\";"],
+			"gate": ["bash", "run.sh", "check-codex-bridge-identity"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-BRIDGE-REQUEST-IDENTITY]",
+			"signatureSource": "scripts/check-codex-bridge-identity.ts"
+		},
+		{
+			"claim": "CODEX-NATIVE-LOADED-PROBE",
+			"title": "the Codex app-server probe ignores a loaded target and reports the live thread dead",
+			"subject": "pi-extensions/lib/native-push/codex-ws-client.ts",
+			"find": [
+				"\t\t\tif (result.data.includes(nativeSessionId)) return { status: \"alive\", route: { backend: \"codex\", socketPath } };"
+			],
+			"replace": [
+				"\t\t\tif (false && result.data.includes(nativeSessionId)) return { status: \"alive\", route: { backend: \"codex\", socketPath } };"
+			],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-NATIVE-LOADED-PROBE]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
+		{
+			"claim": "CODEX-NATIVE-VENDOR-QUEUE",
+			"title": "native delivery invokes a different Codex subcommand instead of the measured one-shot queue surface",
+			"subject": "pi-extensions/lib/native-push/codex-ws-client.ts",
+			"find": [
+				"\t\t[\"codex\", \"queue\", \"--remote\", `unix://${route.socketPath}`, \"--thread\", nativeSessionId, \"--message\", content],"
+			],
+			"replace": [
+				"\t\t[\"codex\", \"exec\", \"--remote\", `unix://${route.socketPath}`, \"--thread\", nativeSessionId, \"--message\", content],"
+			],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-NATIVE-VENDOR-QUEUE]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-ARGV",
+			"title": "Codex fresh launch drops the remote app-server attachment flag and opens an unrelated local session",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\t\t\"--remote\","],
+			"replace": ["\t\t\t\t\"--resume\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-CODEX-ARGV]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "CODEX-BIRTH-MINTS-CODEX",
+			"title": "the Codex SessionStart hook writes a record into another backend domain",
+			"subject": "pi-extensions/meta-bridge-hook-codex.ts",
+			"find": ["\t\t\tbackend: \"codex\","],
+			"replace": ["\t\t\tbackend: \"omp\","],
+			"gate": ["bash", "run.sh", "check-codex-birth-hook"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-MINTS-CODEX]",
+			"signatureSource": "scripts/check-codex-birth-hook.ts"
+		},
+		{
+			"claim": "CODEX-NATIVE-PRODUCTION-WIRING",
+			"title": "the native-push backend set drops Codex, so production routes a live app-server citizen to no delivery rail",
+			"subject": "pi-extensions/lib/entwurf-v2-contract.ts",
+			"find": ["export const NATIVE_PUSH_BACKENDS = [\"antigravity\", \"codex\"] as const;"],
+			"replace": ["export const NATIVE_PUSH_BACKENDS = [\"antigravity\"] as const;"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-production"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-NATIVE-PRODUCTION-WIRING]",
+			"signatureSource": "scripts/check-entwurf-v2-production.ts"
+		},
+		{
+			"claim": "CODEX-NATIVE-NO-RETRY",
+			"title": "Codex queue delivery is marked retriable, so an accepted message may be replayed after its receipt is lost",
+			"subject": "pi-extensions/lib/native-push/codex-ws-client.ts",
+			"find": ["\t\tretriable: false,"],
+			"replace": ["\t\tretriable: true,"],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-NATIVE-NO-RETRY]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
+		{
+			"claim": "CODEX-BIRTH-REQUIRES-MODEL",
+			"title": "the Codex birth reader silently maps a missing measured model field to null",
+			"subject": "pi-extensions/meta-bridge-hook-codex.ts",
+			"find": ["\tif (!(\"model\" in env)) {"],
+			"replace": ["\tif (false && !(\"model\" in env)) {"],
+			"gate": ["bash", "run.sh", "check-codex-birth-hook"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-REQUIRES-MODEL]",
+			"signatureSource": "scripts/check-codex-birth-hook.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-MCP-EXACT",
+			"title": "fresh preflight accepts extra keys in the managed Codex MCP table",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\tif (Object.keys(server).sort().join(\",\") !== \"command,env,env_vars\") return true;"],
+			"replace": ["\tif (false) return true;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CODEX-MCP-EXACT]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "CODEX-MCP-UNINSTALL-REFUSES-DRIFT",
+			"title": "the Codex MCP inverse restores its preimage over operator-modified managed-table bytes",
+			"subject": "scripts/codex-mcp-config.py",
+			"find": ["        if entry != expected:"],
+			"replace": ["        if False and entry != expected:"],
+			"gate": ["bash", "run.sh", "smoke-codex-config-state"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-MCP-UNINSTALL-REFUSES-DRIFT]",
+			"signatureSource": "scripts/smoke-codex-config-state.sh"
+		},
+		{
+			"claim": "CODEX-SETUP-ZERO-STATE",
+			"title": "setup ignores the explicit absent-Codex seam and enters the detected harness branch, so a harness-free package consumer is no longer zero-write",
+			"subject": "run.sh",
+			"find": ["  if ! command -v \"${CODEX_BIN:-codex}\" >/dev/null 2>&1; then"],
+			"replace": ["  if false; then"],
+			"gate": ["bash", "scripts/check-setup-qualification.sh"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-SETUP-ZERO-STATE]",
+			"signatureSource": "scripts/check-setup-qualification.sh"
+		},
+		{
+			"claim": "CODEX-NATIVE-WS-TERMINAL",
+			"title": "both redundant oversize-frame guards on the 127-length WebSocket path are disabled, so a frame declaring an unbounded length is treated as merely incomplete and the parser waits forever for bytes that will never arrive instead of terminating the connection",
+			"subject": "pi-extensions/lib/native-push/codex-ws-client.ts",
+			"find": [
+				"\t\t\tif (wide > BigInt(MAX_MESSAGE_BYTES)) return this.protocolFailure(\"WebSocket frame exceeds 1 MiB\");",
+				"\t\t\tlength = Number(wide);",
+				"\t\t\toffset = 10;",
+				"\t\t}",
+				"\t\tif (length > MAX_MESSAGE_BYTES) return this.protocolFailure(\"WebSocket frame exceeds 1 MiB\");"
+			],
+			"replace": [
+				"\t\t\tif (false) return this.protocolFailure(\"WebSocket frame exceeds 1 MiB\");",
+				"\t\t\tlength = Number(wide);",
+				"\t\t\toffset = 10;",
+				"\t\t}",
+				"\t\tif (false) return this.protocolFailure(\"WebSocket frame exceeds 1 MiB\");"
+			],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-NATIVE-WS-TERMINAL]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-MCP-ENV-ORDER",
+			"title": "fresh preflight accepts the managed Codex MCP env_vars in any order, as long as the set matches — a reordered vendor-visible env manifest passes as exact",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\t\tenvVars.some((name, index) => name !== CODEX_MCP_ENV_VARS[index])"],
+			"replace": [
+				"\t\tenvVars.some((name) => !CODEX_MCP_ENV_VARS.includes(name as (typeof CODEX_MCP_ENV_VARS)[number]))"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CODEX-MCP-ENV-ORDER]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-HOOKS-SAFE",
+			"title": "fresh preflight stops checking the operator-owned hooks.json for unsafe ownership/permissions/symlinks, so a world-writable or symlinked hooks.json is treated as a safe published birth unit",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\tif (!isSafeOwnedFile(paths.hooksFile, expectedUid)) return true;"],
+			"replace": ["\tif (false) return true;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CODEX-HOOKS-SAFE]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "CODEX-SETUP-BIRTH-COSMETIC-PASS",
+			"title": "setup swallows the birth doctor's verdict, so an untrusted unit reads as a cosmetic PASS",
+			"subject": "run.sh",
+			"find": ["      codex_rc=0; (cd \"$REPO_DIR\" && bash scripts/codex-birth-doctor.sh) >/dev/null || codex_rc=$?"],
+			"replace": ["      codex_rc=0; (cd \"$REPO_DIR\" && bash scripts/codex-birth-doctor.sh) >/dev/null || true"],
+			"gate": ["bash", "run.sh", "smoke-setup-verdict"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CODEX-SETUP-BIRTH-COSMETIC-PASS]",
+			"signatureSource": "scripts/smoke-setup-verdict.sh"
+		},
+		{
+			"claim": "CODEX-SETUP-BIRTH-INDEPENDENT",
+			"title": "an untrusted birth unit aborts the whole Codex composition, so the two config atoms never get their independent outcome",
+			"subject": "run.sh",
+			"find": [
+				"      else\n        setup_result codex-birth FAIL \"the birth unit is published, but the vendor has recorded no trust receipt for it yet, so the hook is declared and never runs. Open a visible plain Codex, answer its prompt with 'Trust all and continue', send one first turn, then re-run setup (or './run.sh doctor-codex-birth')\"\n      fi"
+			],
+			"replace": [
+				"      else\n        setup_result codex-birth FAIL \"the birth unit is published, but the vendor has recorded no trust receipt for it yet\"\n        return 1\n      fi"
+			],
+			"gate": ["bash", "run.sh", "smoke-setup-verdict"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CODEX-SETUP-BIRTH-INDEPENDENT]",
+			"signatureSource": "scripts/smoke-setup-verdict.sh"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-APP-SERVER-LIVE",
+			"title": "fresh preflight reports the app-server ready on the inode check alone, so a stale socket file no live process answers passes and the visible launch dies afterwards",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\treturn live ? null : \"codex-app-server-unavailable\";"],
+			"replace": ["\treturn null;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CODEX-APP-SERVER-LIVE]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-HOOK-KEYS",
+			"title": "fresh preflight stops requiring the exact birth handler key set, so an async or extra-key hook — one the installer would never publish and one that lets the turn proceed before the record exists — reads as an installed birth unit",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\t\tif (Object.keys(hook).sort().join(\",\") !== \"command,timeout,type\") return true;"],
+			"replace": ["\t\tif (false) return true;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CODEX-HOOK-KEYS]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "CODEX-TOML-STATE-BEFORE-CONFIG",
+			"title": "the MCP atom writes its config before its durable state receipt, so a state-write fault can no longer stop an already-mutated operator config",
+			"subject": "scripts/codex-mcp-config.py",
+			"find": [
+				"    atomic_write_state(state_path, state)",
+				"    # Strongest idempotence is an untouched file: same bytes, same mtime.",
+				"    if candidate != (text if text is not None else \"\"):",
+				"        atomic_write(config_path, candidate, prefix=\".codex-mcp-\")"
+			],
+			"replace": [
+				"    # mutant: config write reordered before state write",
+				"    if candidate != (text if text is not None else \"\"):",
+				"        atomic_write(config_path, candidate, prefix=\".codex-mcp-\")",
+				"    atomic_write_state(state_path, state)"
+			],
+			"gate": ["bash", "run.sh", "smoke-codex-config-state"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-TOML-STATE-BEFORE-CONFIG]",
+			"signatureSource": "scripts/smoke-codex-config-state.sh"
+		},
+		{
+			"claim": "CODEX-TOML-CONFIG-REPLACE-ROLLBACK",
+			"title": "the MCP atom's config write drops its fault-injection prefix, so an injected replace fault silently stops firing and a broken write reports success",
+			"subject": "scripts/codex-mcp-config.py",
+			"find": [
+				"    if candidate != (text if text is not None else \"\"):",
+				"        atomic_write(config_path, candidate, prefix=\".codex-mcp-\")"
+			],
+			"replace": [
+				"    if candidate != (text if text is not None else \"\"):",
+				"        atomic_write(config_path, candidate)"
+			],
+			"gate": ["bash", "run.sh", "smoke-codex-config-state"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-TOML-CONFIG-REPLACE-ROLLBACK]",
+			"signatureSource": "scripts/smoke-codex-config-state.sh"
+		},
+		{
+			"claim": "CODEX-TOML-FAMILY-EXCLUDES-SEPARATOR",
+			"title": "the managed table family swallows the blank separator before the next neighbour, so an idempotent reinstall deletes a byte the vendor wrote outside our atom",
+			"subject": "scripts/codex_toml_io.py",
+			"find": ["    while end > start + 1 and lines[end - 1].strip() == \"\":"],
+			"replace": ["    while False:  # mutant: keep the trailing blank separator inside the family"],
+			"gate": ["bash", "run.sh", "smoke-codex-config-state"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-TOML-FAMILY-EXCLUDES-SEPARATOR]",
+			"signatureSource": "scripts/smoke-codex-config-state.sh"
+		},
+		{
+			"claim": "CODEX-MCP-RESHAPED-REFUSES-KEEPS-STATE",
+			"title": "the MCP inverse's reshaped-entry refusal is disabled, so a present-but-unlocatable owned entry is silently treated as genuinely gone",
+			"subject": "scripts/codex-mcp-config.py",
+			"find": ["    elif entry is not None:"],
+			"replace": ["    elif False:  # mutant: reshaped-owned refusal disabled"],
+			"gate": ["bash", "run.sh", "smoke-codex-config-state"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-MCP-RESHAPED-REFUSES-KEEPS-STATE]",
+			"signatureSource": "scripts/smoke-codex-config-state.sh"
+		},
+		{
+			"claim": "CODEX-SL-GENUINELY-ABSENT-CLEARS-STATE",
+			"title": "the statusline inverse always treats a missing key as reshaped, so a genuinely absent thread-title membership refuses instead of clearing state",
+			"subject": "scripts/codex-statusline-config.py",
+			"find": ["        if shape == \"has-key\" and REQUIRED_ITEM in value:"],
+			"replace": ["        if True:  # mutant: genuinely-absent path always refuses"],
+			"gate": ["bash", "run.sh", "smoke-codex-config-state"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-SL-GENUINELY-ABSENT-CLEARS-STATE]",
+			"signatureSource": "scripts/smoke-codex-config-state.sh"
+		},
+		{
+			"claim": "CODEX-SL-DOCTOR-REQUIRES-VISIBLE-IDENTITY",
+			"title": "the statusline doctor lets ownership rescue a missing required axis, so a host with no thread-title reports green as long as no receipt binds it",
+			"subject": "scripts/codex-statusline-config.py",
+			"find": ["    if effective != \"thread-title-present\":"],
+			"replace": [
+				"    if owned and effective != \"thread-title-present\":  # mutant: unowned rescues the required axis"
+			],
+			"gate": ["bash", "run.sh", "smoke-codex-config-state"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-SL-DOCTOR-REQUIRES-VISIBLE-IDENTITY]",
+			"signatureSource": "scripts/smoke-codex-config-state.sh"
+		},
+		{
+			"claim": "CODEX-BIRTH-FOREIGN-HOOKS-REFUSED",
+			"title": "the user-layer birth unit stops refusing a hooks.json no ownership state vouches for, so a declaration somebody else wrote is treated as one of ours",
+			"subject": "scripts/codex-birth-install.sh",
+			"find": ["  if [ \"$STATE_PRESENT\" = \"0\" ]; then"],
+			"replace": ["  if false; then  # mutant: treat a foreign hooks.json as ours"],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-BIRTH-FOREIGN-HOOKS-REFUSED]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "CODEX-BIRTH-REINSTALL-REFUSES-CLOSURE-DRIFT",
+			"title": "reinstall stops licensing the live closure by digest, so publishing a new generation copies over an operator's edited helper member and destroys the only copy of it",
+			"subject": "scripts/codex-birth-install.sh",
+			"find": ["    if [ \"$MEMBER_LIVE\" != \"$want\" ]; then"],
+			"replace": ["    if false; then  # mutant: republish over a drifted closure member"],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-BIRTH-REINSTALL-REFUSES-CLOSURE-DRIFT]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "CODEX-THREAD-READ-DIALECT",
+			"title": "the visible-title read-back sends the thread id under a name the vendor app-server does not accept, so first-admission LIVE is the first place the dialect is tried",
+			"subject": "pi-extensions/lib/native-push/codex-ws-client.ts",
+			"find": ["\t\tconst result = (await protocol.request(\"thread/read\", { threadId, includeTurns })) as {"],
+			"replace": [
+				"\t\tconst result = (await protocol.request(\"thread/read\", { thread_id: threadId, includeTurns })) as {"
+			],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-THREAD-READ-DIALECT]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
+		{
+			"claim": "CODEX-THREAD-READ-REFUSES-MALFORMED",
+			"title": "a thread/read reply carrying no thread object is read as a thread with no title, so a broken read becomes an empty visible title instead of a refusal",
+			"subject": "pi-extensions/lib/native-push/codex-ws-client.ts",
+			"find": ["\t\tif (thread == null || typeof thread !== \"object\" || Array.isArray(thread)) {"],
+			"replace": ["\t\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-THREAD-READ-REFUSES-MALFORMED]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
+		{
+			"claim": "CODEX-ORPHAN-WINDOW-RECOVERY",
+			"title": "the orphan-window parser reinstates an arbitrary length bound, so a receipt carrying a real project cwd and a seat recovers nothing",
+			"subject": "scripts/lib/launch-receipt-windows.ts",
+			"find": ["\tfor (const line of text.split(LINE)) {"],
+			"replace": ["\tfor (const line of text.slice(0, 300).split(LINE)) {"],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-ORPHAN-WINDOW-RECOVERY]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-APP-SERVER-NO-LEAK",
+			"title": "an app-server connection that opens after the preflight bound expired is left open, leaking a live socket into the host for the rest of the process",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\t\t\t\t\tlate.close();"],
+			"replace": ["\t\t\t\t\tvoid late;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CODEX-APP-SERVER-NO-LEAK]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-PREMUTATION-MCP",
+			"title": "the MCP surface stops asking the Codex TARGET capability question before placement, so a host with no birth unit, no vendor trust receipt, no MCP hand or no app-server reaches tmux first — a window opens, and the operator is told about the missing capability only after something visible already exists",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\tconst targetMissing = backend === \"codex\" ? await codexFreshPreflight(process.env) : null;"],
+			"replace": ["\t\t\tconst targetMissing = null;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-CODEX-PREMUTATION-MCP]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-PREMUTATION-PI",
+			"title": "the native pi public surface stops running the Codex capability preflight, so the same window opens from the other public door",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\t\t\t\t\tparams.backend === \"codex\""],
+			"replace": ["\t\t\t\t\tfalse"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-CODEX-PREMUTATION-PI]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "CODEX-BIRTH-DOCTOR-REQUIRES-TRUST",
+			"title": "the doctor treats the vendor trust receipt as optional, so a declared hook the vendor will never run reports green",
+			"subject": "scripts/codex-birth-doctor.sh",
+			"find": [
+				"if [ \"$UNIT_ONLY\" = \"1\" ]; then\n  info \"--unit-only: the vendor receipt was NOT read. This is a skipped axis, not a green one.\""
+			],
+			"replace": [
+				"if [ \"$UNIT_ONLY\" = \"1\" ] || true; then  # mutant: never read the vendor receipt\n  info \"--unit-only: the vendor receipt was NOT read. This is a skipped axis, not a green one.\""
+			],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-BIRTH-DOCTOR-REQUIRES-TRUST]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "CODEX-SETUP-NEVER-PRESEEDS-TRUST",
+			"title": "setup answers the vendor's trust prompt on the operator's behalf by writing the receipt itself",
+			"subject": "run.sh",
+			"find": ["    section \"codex units (native harness detected: OpenAI Codex CLI)\""],
+			"replace": [
+				"    section \"codex units (native harness detected: OpenAI Codex CLI)\"\n    printf '\\n[hooks.state.\"%s/hooks.json:session_start:0:0\"]\\ntrusted_hash = \"sha256:%064d\"\\n' \"$(_codex_home)\" 0 >> \"$(_codex_config)\"  # mutant: forge the operator approval"
+			],
+			"gate": ["bash", "run.sh", "smoke-setup-verdict"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CODEX-SETUP-NEVER-PRESEEDS-TRUST]",
+			"signatureSource": "scripts/smoke-setup-verdict.sh"
+		},
+		{
+			"claim": "CODEX-SETUP-TRUSTED-RERUN-GREEN",
+			"title": "setup can never report the Codex birth unit green, so an operator who has answered the vendor prompt still never gets a composed host",
+			"subject": "run.sh",
+			"find": [
+				"        setup_harness_result codex-birth \"SessionStart birth unit published and trusted by the vendor\" \"./run.sh doctor-codex-birth\""
+			],
+			"replace": ["        setup_result codex-birth FAIL \"mutant: the trusted unit is never reported green\""],
+			"gate": ["bash", "run.sh", "smoke-setup-verdict"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CODEX-SETUP-TRUSTED-RERUN-GREEN]",
+			"signatureSource": "scripts/smoke-setup-verdict.sh"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-TRUST-RECEIPT",
+			"title": "fresh preflight opens a Codex sibling whose birth hook the vendor never agreed to run",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": [
+				"\tif (config === null || trustReceiptMissing(config, paths.hooksFile)) return \"codex-birth-trust-missing\";"
+			],
+			"replace": ["\tif (config === null) return \"codex-birth-trust-missing\";"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-CODEX-TRUST-RECEIPT]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-STATE-DIGEST",
+			"title": "fresh preflight accepts a birth closure whose bytes no longer match the digests its own ownership state recorded",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\treturn closureDriftedFromState(paths, expectedUid);"],
+			"replace": ["\treturn false;  // mutant: existence is enough"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-CODEX-STATE-DIGEST]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "CODEX-BIRTH-DOCTOR-ABSENT-IS-RED",
+			"title": "the doctor calls a completely absent unit an informational note, so a host carrying a stale vendor receipt reports green with nothing installed",
+			"subject": "scripts/codex-birth-doctor.sh",
+			"find": [
+				"    bad \"no Codex birth unit is installed here (no ownership state at $STATE_FILE, no declaration, no closure), so no Codex thread on this host can become a citizen."
+			],
+			"replace": [
+				"    info \"no Codex birth unit is installed here (no ownership state at $STATE_FILE, no declaration, no closure), so no Codex thread on this host can become a citizen."
+			],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-DOCTOR-ABSENT-IS-RED]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "CODEX-BIRTH-INSTALL-SAFE-UMASK",
+			"title": "the installer lets an inherited umask decide the mode of the directories it creates, publishing a closure anyone on the host can rewrite between the digest and the exec",
+			"subject": "scripts/codex-birth-install.sh",
+			"find": ["umask 022"],
+			"replace": ["umask 000  # mutant: let the caller decide"],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-INSTALL-SAFE-UMASK]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "CODEX-BIRTH-EXACT-CLOSURE-INVENTORY",
+			"title": "the installer accepts an ownership state naming fewer closure members than it publishes, leaving files nothing compares and nothing can reclaim",
+			"subject": "scripts/codex-birth-install.sh",
+			"find": ["    if (missing.length || extra.length || duplicate.length) {"],
+			"replace": ["    if (false) {  // mutant: any inventory will do"],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-EXACT-CLOSURE-INVENTORY]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "CODEX-BIRTH-REFUSES-RELATIVE-ROOT",
+			"title": "the installer accepts a relative CODEX_HOME, so the launcher path the vendor keys its trust receipt to depends on the caller's cwd",
+			"subject": "scripts/codex-birth-install.sh",
+			"find": ["case \"$CODEX_HOME\" in /*) : ;; *) die \"CODEX_HOME resolves to a relative path"],
+			"replace": ["case \"$CODEX_HOME\" in *) : ;; /*) die \"CODEX_HOME resolves to a relative path"],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-REFUSES-RELATIVE-ROOT]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-EXACT-INVENTORY",
+			"title": "fresh preflight compares only the digests a state happens to name, so a short inventory hides an unchecked closure member",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": [
+				"\tif (named.length !== expected.length) return true;\n\tif (expected.some((name) => !named.includes(name))) return true;\n\tif (named.some((name, index) => named.indexOf(name) !== index)) return true;"
+			],
+			"replace": ["\t// mutant: judge only the members a state happens to name"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-CODEX-EXACT-INVENTORY]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "CODEX-BIRTH-INSTALL-REFUSES-UNKNOWN-STATUS",
+			"title": "the installer adopts an ownership state in a status it never writes, so a receipt this unit did not produce can license its next publish",
+			"subject": "scripts/codex-birth-install.sh",
+			"find": [
+				"    if (s.status !== \"installed\" && s.status !== \"publishing\") throw new Error(\"unknown state status \" + JSON.stringify(s.status));"
+			],
+			"replace": ["    // mutant: any status will do"],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-INSTALL-REFUSES-UNKNOWN-STATUS]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "CODEX-BIRTH-STATE-PARENT-AUTHORITY",
+			"title": "the installer judges the ownership state without judging the directory that holds it, so a receipt anyone can replace still licenses the publish",
+			"subject": "scripts/codex-birth-install.sh",
+			"find": ["[ -e \"$UNIT_ROOT\" ] && safe_own_dir \"$UNIT_ROOT\" \"the unit root (it holds the ownership state)\""],
+			"replace": ["true  # mutant: do not judge the directory holding the receipt"],
+			"gate": ["bash", "run.sh", "smoke-codex-birth"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-BIRTH-STATE-PARENT-AUTHORITY]",
+			"signatureSource": "scripts/smoke-codex-birth.sh"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-STATE-PARENT-AUTHORITY",
+			"title": "fresh preflight trusts a digest inventory sitting in a directory anyone on the host can rewrite",
+			"subject": "pi-extensions/lib/codex-fresh-preflight.ts",
+			"find": ["\tif (!isSafeOwnedDir(path.dirname(paths.stateFile), expectedUid)) return true;"],
+			"replace": ["\t// mutant: the directory holding the receipt is nobody's business"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-CODEX-STATE-PARENT-AUTHORITY]",
+			"signatureSource": "test/codex-fresh-preflight.test.ts"
+		},
+		{
+			"claim": "TMUX-COORDINATE-FORMAT-PID",
+			"title": "the coordinate format asks tmux for a server-pid key that answers empty, so a metered LIVE fails at a field the format never filled",
+			"subject": "scripts/lib/tmux-coordinate-row.ts",
+			"find": ["export const TMUX_COORDINATE_FORMAT = \"#{pid}\\t#{session_id}\\t#{window_id}\\t#{pane_id}\";"],
+			"replace": [
+				"export const TMUX_COORDINATE_FORMAT = \"#{server_pid}\\t#{session_id}\\t#{window_id}\\t#{pane_id}\";"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:TMUX-COORDINATE-FORMAT-PID]",
+			"signatureSource": "test/tmux-coordinate-row.test.ts"
+		},
+		{
+			"claim": "TMUX-COORDINATE-ROW-NO-SHIFT",
+			"title": "the positional row is trimmed instead of having exactly one terminal newline removed, so an empty leading field shifts every later coordinate one place left",
+			"subject": "scripts/lib/tmux-coordinate-row.ts",
+			"find": [
+				"\tlet line = raw;\n\tif (line.endsWith(\"\\r\\n\")) line = line.slice(0, -2);\n\telse if (line.endsWith(\"\\n\")) line = line.slice(0, -1);"
+			],
+			"replace": ["\tconst line = raw.trim();  // mutant: reshape the row instead of removing one newline"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:TMUX-COORDINATE-ROW-NO-SHIFT]",
+			"signatureSource": "test/tmux-coordinate-row.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-CODEX-TASK-WAITS-INNER-TOKEN",
+			"title": "the fresh Codex task waits for the initial Pi trigger instead of the token that begins its own later addressed payload, so the public chain stalls after callback",
+			"subject": "scripts/lib/codex-fresh-live-protocol.ts",
+			"find": ["containing ${input.codexWaitToken}. ` +"],
+			"replace": ["containing ${input.initialPiWaitToken}. ` +"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-CODEX-TASK-WAITS-INNER-TOKEN]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-CLEANUP-FAILSAFE",
+			"title": "a thrown recovery aborts the teardown pipeline, so owned windows and fixture artifacts after it are never cleaned",
+			"subject": "scripts/lib/codex-fresh-live-protocol.ts",
+			"find": [
+				"\t\t\tfailures.push(`${stage.label}: threw: ${error instanceof Error ? error.message : String(error)}`);"
+			],
+			"replace": ["\t\t\tthrow error;  // mutant: an earlier cleanup failure aborts every later stage"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-CLEANUP-FAILSAFE]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-PHASE-SEPARATION",
+			"title": "the initial Pi is again asked to model-report a launch coordinate instead of leaving the forwarded Codex payload as its final source-observed action",
+			"subject": "scripts/lib/codex-fresh-live-protocol.ts",
+			"find": ["\t\t\"nobody else.\\n\" +"],
+			"replace": ["\t\t\"nobody else; then report PI-REPORTS-CODEX-LAUNCH to the fixture.\\n\" +"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-PHASE-SEPARATION]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-REPORT-SENDER-FILTER",
+			"title": "the final mailbox body is selected by token alone, so a body from the wrong sender can satisfy the fixture-read claim",
+			"subject": "scripts/lib/codex-fresh-live-protocol.ts",
+			"find": ["\t\tif (reportSender(body) !== expectedSender) continue;"],
+			"replace": ["\t\t// mutant: take the first exact-token body, whoever sent it"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-REPORT-SENDER-FILTER]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-REPORT-TOKEN-EXACT",
+			"title": "the final mailbox selector accepts a token missing its last character, recreating the 600-second model-truncation false wait",
+			"subject": "scripts/lib/codex-fresh-live-protocol.ts",
+			"find": ["\t\tif (!body.includes(token)) continue;"],
+			"replace": ["\t\tif (!body.includes(token.slice(0, -1))) continue;  // mutant: fuzzy truncated token"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-REPORT-TOKEN-EXACT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-SOURCE-JOIN",
+			"title": "a Pi tool result can be joined to a call whose tool name differs, turning an unrelated result body into launch authority",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\tif (result.toolName !== call.toolName)"],
+			"replace": ["\t\tif (false && result.toolName !== call.toolName)"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-SOURCE-JOIN]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-SOURCE-JOIN-UNIQUE",
+			"title": "two source tool calls in the same backend or target scope are accepted instead of failing closed as ambiguous",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": [
+				"\tif (matchingScope.length > 1) throw new Error(`${label}: duplicate source tool calls (${matchingScope.length})`);"
+			],
+			"replace": [
+				"\tif (false && matchingScope.length > 1) throw new Error(`${label}: duplicate source tool calls (${matchingScope.length})`);"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-SOURCE-JOIN-UNIQUE]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-SOURCE-ERROR-REJECT",
+			"title": "a Pi toolResult without explicit boolean isError=false is normalized into successful receipt authority",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\t\tif (typeof message.isError !== \"boolean\")"],
+			"replace": ["\t\t\tif (false && typeof message.isError !== \"boolean\")"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-SOURCE-ERROR-REJECT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-SOURCE-UNMATCHED-REJECT",
+			"title": "an unmatched Pi toolResult is silently accepted as a complete transcript",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\tif (!calls.has(id)) throw new Error(`unmatched Pi toolResult id ${id}`);"],
+			"replace": ["\t\tif (false && !calls.has(id)) throw new Error(`unmatched Pi toolResult id ${id}`);"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-SOURCE-UNMATCHED-REJECT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-RAW-CALLBACK-REQUIRED",
+			"title": "a Pi callback with arbitrary bytes after its sender envelope is accepted as exact",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\tif (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;"],
+			"replace": [
+				"\tif (!text.startsWith(prefix)) return null;\n\tconst suffixAt = text.indexOf(suffix, prefix.length);\n\tif (suffixAt < 0) return null;\n\ttext = text.slice(0, suffixAt + suffix.length);  // mutant: discard callback suffix"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-RAW-CALLBACK-REQUIRED]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-OUTER-FRAME-EXACT",
+			"title": "mailbox parsing trims payload bytes and can approve a whitespace-different callback or final body",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\treturn { sender: match[1] as string, payload: text.slice(match[0].length, -1) };"],
+			"replace": ["\treturn { sender: match[1] as string, payload: text.slice(match[0].length, -1).trim() };"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-OUTER-FRAME-EXACT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-JSONL-COMPLETE-ERROR",
+			"title": "a corrupt complete Pi JSONL row is misclassified as a partial final append and hidden until timeout",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\t\tif (isIncompleteLastAppend) return entries;"],
+			"replace": ["\t\t\tif (true) return entries;  // mutant: hide every parse error as a partial append"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-JSONL-COMPLETE-ERROR]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-CODEX-PENDING",
+			"title": "Codex inProgress MCP state is treated as terminal instead of remaining pending until thread_history completes it",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\t\tif (item.status === \"inProgress\") {"],
+			"replace": ["\t\t\tif (false && item.status === \"inProgress\") {"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-CODEX-PENDING]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-CODEX-SOURCE",
+			"title": "a non-Entwurf Codex MCP item is admitted as source tool authority",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\t\tif (item.type !== \"mcpToolCall\" || item.server !== \"entwurf-bridge\") continue;"],
+			"replace": ["\t\t\tif (item.type !== \"mcpToolCall\") continue;  // mutant: any MCP server"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-CODEX-SOURCE]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-SOURCE-ROLE-AUDIT",
+			"title": "the final exact-once source audit is bypassed, allowing late duplicate or wrong-axis calls to disappear after an earlier selection",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\tif (receipts.length !== expected.length)"],
+			"replace": [
+				"\tif (true) return;  // mutant: bypass the final source-role audit\n\tif (receipts.length !== expected.length)"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-SOURCE-ROLE-AUDIT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-TURN-TERMINAL-EXACT",
+			"title": "a missing or future Codex turn status is accepted as terminal completion",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\tif (status !== \"completed\") throw new Error(`unknown Codex turn status ${String(status)}`);"],
+			"replace": [
+				"\t\tif (false && status !== \"completed\") throw new Error(`unknown Codex turn status ${String(status)}`);"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-TURN-TERMINAL-EXACT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-FINAL-DIAGNOSTIC-VERDICT",
+			"title": "token and sender selection is logged as exact acceptance even when the mailbox payload differs from the source-call argument",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\tif (parsed.payload !== expectedPayload)"],
+			"replace": ["\tif (false && parsed.payload !== expectedPayload)"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-FINAL-DIAGNOSTIC-VERDICT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-SOURCE-PATH-RE-RESOLVED",
+			"title": "an empty source-path cache never re-reads its record, so a transcriptPath written after callback correlation is frozen out and every later source observation stays permanently empty",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"find": ["\treturn readRecordPath() ?? \"\";"],
+			"replace": ["\treturn cached;  // mutant: an empty cache is answered without re-reading the record"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-LIVE-SOURCE-PATH-RE-RESOLVED]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-EVIDENCE-RECORD-PATH",
+			"title": "the evidence manifest points at gardenId.json instead of the record owner's gardenId.meta.json filename",
+			"subject": "scripts/smoke-codex-fresh-live.ts",
+			"find": ["\t\tinitialPiRecordPath: path.join(defaultMetaSessionsDir(), metaRecordFilename(initialPiIdentity)),"],
+			"replace": ["\t\tinitialPiRecordPath: path.join(defaultMetaSessionsDir(), `${initialPiGid}.json`),"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-EVIDENCE-RECORD-PATH]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-EVIDENCE-RECOVERY-FAILSAFE",
+			"title": "optional source identity recovery runs outside its evidence guard, so corruption prevents raw snapshot copies",
+			"subject": "scripts/smoke-codex-fresh-live.ts",
+			"find": ["\ttry {\n\t\trecoverCodexThreadAuthority();\n\t} catch (recoveryError) {"],
+			"replace": [
+				"\trecoverCodexThreadAuthority();  // mutant: throws before raw source copies\n\ttry {\n\t\t// optional recovery guard bypassed\n\t} catch (recoveryError) {"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-EVIDENCE-RECOVERY-FAILSAFE]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-RECOVERY-SOURCE-ONLY",
+			"title": "smoke cleanup reconnects untrusted mailbox prose directly to the window allowlist",
+			"subject": "scripts/smoke-codex-fresh-live.ts",
+			"find": ["\tconst found = [...recoverCodexWindows(), ...(await recoverOutboundPiWindows())];"],
+			"replace": [
+				"\tconst found = [...seenInbox.flatMap(() => ['@999']), ...recoverCodexWindows(), ...(await recoverOutboundPiWindows())];"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-RECOVERY-SOURCE-ONLY]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		}
+	]
+}