@junghanacs/entwurf 0.35.1 → 0.36.1

package/scripts/mutants/herdr-supply.json

@@ -8,7 +8,7 @@
 			"subject": "scripts/check-herdr-sandbox.ts",
 			"find": ["const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";"],
 			"replace": [
-				"const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";\nconst PINNED_FALLBACK = \"0.9.3\";\nvoid PINNED_FALLBACK;"
+				"const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";\nconst PINNED_FALLBACK = \"0.9.4\";\nvoid PINNED_FALLBACK;"
 			],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
@@ -19,8 +19,8 @@
 			"claim": "HSUP-DIGEST-SHAPE",
 			"title": "a pinned digest is truncated, so the check that is supposed to catch a swapped binary can no longer fail",
 			"subject": "scripts/fixtures/herdr-supply.json",
-			"find": ["\"sha256\": \"18a8dc65f1c2fa485884344356dea1cfd911c6f06cf46fa78e193f4087f4dba7\""],
-			"replace": ["\"sha256\": \"18a8dc65f1c2fa485884344356de\""],
+			"find": ["\"sha256\": \"493304fbefb0ed0ea0455f373b47f48d24e8774bc7974f4c916ad2e937675b23\""],
+			"replace": ["\"sha256\": \"493304fbefb0ed0ea0455f373b47\""],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:HSUP-DIGEST-SHAPE]",
@@ -119,14 +119,14 @@
 			"signatureSource": "scripts/check-herdr-supply.ts"
 		},
 		{
-			"claim": "HSUP-X86-UNEXECUTED",
-			"title": "the x86_64 asset is recorded as executed although no cell of this rail has ever run on it",
+			"claim": "HSUP-EXECUTION-RECEIPT-BOUND",
+			"title": "the x86_64 asset is recorded as executed with no receipt bound to this pin's version and its own full digest",
 			"subject": "scripts/fixtures/herdr-supply.json",
 			"find": ["\"executed\": false"],
 			"replace": ["\"executed\": true"],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
-			"signature": "[QK:HSUP-X86-UNEXECUTED]",
+			"signature": "[QK:HSUP-EXECUTION-RECEIPT-BOUND]",
 			"signatureSource": "scripts/check-herdr-supply.ts"
 		}
 	]

package/scripts/mutants/pack-install.json

@@ -6,7 +6,7 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
 			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.2\\.0(_|$)' || true"],
 			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.1' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
@@ -17,8 +17,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
 			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure — @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.2\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.2\\.0(_|$)' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",

package/scripts/mutants/pi-durable.json

@@ -458,7 +458,7 @@
 			"claim": "PI-DURABLE-CARRIER-PIN-MATCHES",
 			"title": "the pin records a digest the committed carrier file does not carry, so a carrier edited after emission would still be the declared one",
 			"subject": "pi/pi-durable/overlay/upstream-pin.json",
-			"find": ["\"sha256\": \"bfd88844fae61e8bd32d57b5b986f48056c64eebb5466d9826318a0783ac9005\""],
+			"find": ["\"sha256\": \"60c2965eadbdbbe78fce1b7eeb89d97eb3104a30b7d58ebca87009d2e9118403\""],
 			"replace": ["\"sha256\": \"0000000000000000000000000000000000000000000000000000000000000000\""],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
@@ -833,19 +833,40 @@
 			}
 		},
 		{
-			"claim": "PI-DURABLE-CARRIER-PATCH-SECTIONS",
-			"title": "a declared patched file with no section of its own passes the patch-shape check, so the emitter would ship that file unpatched",
+			"claim": "PI-DURABLE-CARRIER-EMIT-SOURCE-EQUAL",
+			"title": "the owned source changes and the carrier is not re-emitted, so the shipped app is no longer the emission of the source the repository reviews",
+			"subject": "pi/pi-durable/src/experimental/durable/tui.ts",
+			"find": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*+\", \"*\"];"],
+			"replace": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*\"];"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-SOURCE-EQUAL]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-CARRIER-EMIT-NODE-EXACT",
+			"title": "the emitter stops comparing its own Node with the pinned one, so a carrier emitted under any Node reads as the pinned emission",
 			"subject": "scripts/emit-pi-durable-carrier.ts",
-			"find": ["\tif (undeclared.length > 0 || missing.length > 0) {"],
-			"replace": ["\tif (undeclared.length > 0) {"],
+			"find": ["\tif (pinned !== running) {"],
+			"replace": ["\tif (false) {"],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
-			"signature": "[QK:PI-DURABLE-CARRIER-PATCH-SECTIONS]",
+			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-NODE-EXACT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
-			"build": {
-				"argv": ["bash", "scripts/build-bridge.sh"],
-				"output": "mcp/entwurf-bridge/dist"
-			}
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-SOURCE-FENCE-RESOLVES",
+			"title": "the source fence inherits the root program's exclusion of pi/pi-durable/src, so the owned source sits in no typecheck program at all",
+			"subject": "pi/pi-durable/tsconfig.json",
+			"find": ["\t\"exclude\": []"],
+			"replace": ["\t\"files\": []"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SOURCE-FENCE-RESOLVES]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "PI-DURABLE-FOOTER-GRAPH-LIFETIME",
@@ -898,12 +919,8 @@
 			"claim": "PI-DURABLE-FOOTER-BADGE-PROTECTED",
 			"title": "the badge sits last in the dock, so the renderer's bottom clip drops it first on a short terminal",
 			"subject": "pi/pi-durable/carrier/tui.js",
-			"find": [
-				"\t\t{ component: new VStack([{ component: badge, shrink: 0 }, ...dock]), basis: \"auto\", grow: 0, shrink: 1, minSize: 1 },"
-			],
-			"replace": [
-				"\t\t{ component: new VStack([...dock, { component: badge, shrink: 0 }]), basis: \"auto\", grow: 0, shrink: 1, minSize: 1 },"
-			],
+			"find": ["\t\t\tcomponent: new VStack([{ component: badge, shrink: 0 }, ...dock]),"],
+			"replace": ["\t\t\tcomponent: new VStack([...dock, { component: badge, shrink: 0 }]),"],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-PROTECTED]",
@@ -1002,6 +1019,138 @@
 				"argv": ["bash", "scripts/build-bridge.sh"],
 				"output": "mcp/entwurf-bridge/dist"
 			}
+		},
+		{
+			"claim": "PI-DURABLE-SOURCE-NOT-SHIPPED",
+			"title": "the files allowlist admits pi/pi-durable/src, so the owned TypeScript source rides the tarball beside the carrier an installed consumer runs",
+			"subject": "package.json",
+			"find": ["\t\t\"pi/pi-durable/carrier/\",\n"],
+			"replace": ["\t\t\"pi/pi-durable/carrier/\",\n\t\t\"pi/pi-durable/src/\",\n"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SOURCE-NOT-SHIPPED]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-EMITTER-NODE-CI-BOUND",
+			"title": "the CI check job floats its Node major again, so the floor that proves the carrier emission runs under a Node other than the pinned emitter",
+			"subject": ".github/workflows/ci.yml",
+			"find": ["          node-version: 24.18.1\n"],
+			"replace": ["          node-version: 24\n"],
+			"gate": ["bash", "run.sh", "check-node-floor-coherence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-DURABLE-EMITTER-NODE-CI-BOUND]",
+			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PI-DURABLE-EMITTER-NODE-CI-REQUIRED",
+			"title": "the check:full step's ENTWURF_REQUIRE_EMITTER_NODE line is commented out, so an emitter-identity mismatch on the CI floor becomes a skip while the workflow text still names the variable",
+			"subject": ".github/workflows/ci.yml",
+			"find": ["          ENTWURF_REQUIRE_EMITTER_NODE: \"1\"\n"],
+			"replace": ["          # ENTWURF_REQUIRE_EMITTER_NODE: \"1\"\n"],
+			"gate": ["bash", "run.sh", "check-node-floor-coherence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-DURABLE-EMITTER-NODE-CI-REQUIRED]",
+			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PI-DURABLE-SUBAGENT-OUTPUT-MODEL-VISIBLE",
+			"title": "the emitted subagent answers in `content`, the 1.1 field: on 1.2 the result still type-checks against the all-optional result and the parent model reads nothing of the child's answer",
+			"subject": "pi/pi-durable/carrier/subagent.js",
+			"find": ["\t\t\t\t\toutput: [{ type: \"text\", text }],"],
+			"replace": ["\t\t\t\t\tcontent: [{ type: \"text\", text }],"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SUBAGENT-OUTPUT-MODEL-VISIBLE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-BRIDGE-TOOL-OUTPUT-MODEL-VISIBLE",
+			"title": "the contact's bridge tools answer in `content`, the 1.1 field, past the declared result type: the bridge still builds and the model reads none of the bridge's text",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\t\treturn { output: [{ type: \"text\", text: result.text }] };"],
+			"replace": ["\t\t\treturn { content: [{ type: \"text\", text: result.text }] } as unknown as DurableToolResult;"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-BRIDGE-TOOL-OUTPUT-MODEL-VISIBLE]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-FATAL-SESSION-VIEW",
+			"title": "the close listener stops recording the failure: a Session that failed and closed itself looks open, and the host learns of it only if `closed` ever settles, which a tool ignoring its abort can hold off for good",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": ["\t\t\tupdate({ failure: {} });"],
+			"replace": ["\t\t\t// the failure is not recorded"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FATAL-SESSION-VIEW]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-FATAL-SESSION-SHOWN",
+			"title": "the TUI stops drawing the failed session's line: the view knows, the screen keeps the last live frame and every later keystroke looks accepted",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": ["\tif (view.failure !== undefined) {"],
+			"replace": ["\tif (view.failure === null) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FATAL-SESSION-SHOWN]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-FATAL-SUBMIT-REFUSED",
+			"title": "input to a failed session is handed to the SDK instead of being refused by name: it fails later with the SDK's generic error and the user is not told the session takes no input",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": ["\t\t\t\t\tif (state.failure !== undefined) {"],
+			"replace": ["\t\t\t\t\tif (state.failure === null) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FATAL-SUBMIT-REFUSED]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-RETIRE-ON-FATAL",
+			"title": "the doorbell ignores the session's failure: its marker stays and senders keep waking a host that can admit nothing, until a ring happens to be rejected",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["const problems = retire(\"session-failed\", \"the durable session failed and closed itself\");"],
+			"replace": ["const problems: string[] = [];"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-RETIRE-ON-FATAL]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-SELF-CLOSE-NOT-FAILURE",
+			"title": "close() keeps its close listener subscribed: every normal exit reports a failed session and retires its listeners as if the storage had failed",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": [
+				"\t\t\t\t\t// First: the Session runs its close listeners inside its own close call.\n\t\t\t\t\tunsubscribeClose();"
+			],
+			"replace": ["\t\t\t\t\t// First: the Session runs its close listeners inside its own close call."],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SELF-CLOSE-NOT-FAILURE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-COMPACTION-FAILURE-SHOWN",
+			"title": "the TUI drops the conversation's retained compaction failure: a failed background compaction vanishes from the screen once its status is removed",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": ["\tif (compaction !== undefined) {\n\t\tlines.push"],
+			"replace": ["\tif (compaction === null) {\n\t\tlines.push"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-COMPACTION-FAILURE-SHOWN]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		}
 	]
 }

package/scripts/mutants/pi-floor.json

@@ -7,10 +7,10 @@
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
 			"find": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0'"
 			],
 			"replace": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0'"
 			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
@@ -21,8 +21,8 @@
 			"claim": "PI-SDK-PRODUCTION-SET",
 			"title": "the durable library's production pin falls one release behind the SDK set the pin declares, so the carrier would bind a pi-durable nobody verified it against",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-durable\": \"1.1.0\","],
-			"replace": ["\"@earendil-works/pi-durable\": \"1.0.4\","],
+			"find": ["\"@earendil-works/pi-durable\": \"1.2.0\","],
+			"replace": ["\"@earendil-works/pi-durable\": \"1.1.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-PRODUCTION-SET]",
@@ -33,7 +33,7 @@
 			"title": "an @earendil-works package returns as a dev dependency beside its production pin, one name in two dependency classes",
 			"subject": "package.json",
 			"find": ["\"@biomejs/biome\": \"^2.4.13\","],
-			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.1.0\","],
+			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.2.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-NO-DUAL-DECLARATION]",

package/scripts/pi-durable-contact-host.mjs

@@ -68,7 +68,7 @@ try {
 		const tool = citizen.contact.extension.tools.find((t) => t.name === name);
 		if (tool === undefined) throw new Error(`the contact registers no ${name}`);
 		const result = await tool.execute({}, undefined, {});
-		return result.content.map((block) => block.text).join("\n");
+		return result.output.map((block) => block.text).join("\n");
 	};
 	const view = citizen.durable.view.current();
 	const report = {

package/scripts/smoke-codex-fresh-live.ts

@@ -68,6 +68,7 @@ import {
 } from "../pi-extensions/lib/meta-session.ts";
 import { FRESH_CALL_BACKENDS } from "../pi-extensions/lib/mux-fresh-call.ts";
 import {
+	checkCodexSocketFile,
 	readCodexThread,
 	realCodexProtocolOpener,
 	resolveCodexDefaultSocketPath,
@@ -95,6 +96,12 @@ import {
 	sourceCleanupWindows,
 	validateFinalMailboxBody,
 } from "./lib/codex-fresh-source-receipts.ts";
+import {
+	describeCodexSocketOwnership,
+	judgeCodexSocketOwnership,
+	observeCodexSocketSubtree,
+	parseProcStat,
+} from "./lib/codex-socket-listener.ts";
 import { skipLive } from "./lib/live-skip.ts";
 import { parseTmuxRow, TMUX_COORDINATE_FIELDS, TMUX_COORDINATE_FORMAT } from "./lib/tmux-coordinate-row.ts";
 
@@ -697,7 +704,8 @@ async function run(): Promise<void> {
 	//                            `--cut` still refuses it as BLOCKED (MUST SKIP). Nothing is
 	//                            excused — a cut without this receipt remains impossible.
 	//   PRESENT BUT WRONG     -> FAIL, unchanged: a malformed or dead PID, a process whose
-	//                            argv is not a Codex app-server, a foreign uid, A == S. The
+	//                            argv is not a Codex app-server, a foreign uid, a subtree that
+	//                            does not hold the endpoint's LISTEN socket, A == S. The
 	//                            operator answered, and the answer is a defect.
 	// Nothing is inferred either way, and no default is invented for a value the operator
 	// did not give. The reproducible green is the invocation VERIFY and the release skill's
@@ -747,6 +755,10 @@ async function run(): Promise<void> {
 		fs.existsSync(procDir),
 		`missing ${procDir}`,
 	);
+	// Read BEFORE the uid/argv/environment checks below and handed to the socket-ownership
+	// observer, so the process those checks read and the process that owns the socket are the
+	// same one: a pid reused in between changes this start time and fails closed (#128).
+	const namedStartTime = parseProcStat(fs.readFileSync(path.join(procDir, "stat"), "utf8")).startTime;
 	const procStat = fs.statSync(procDir);
 	if (typeof process.getuid === "function") {
 		ok("the named app-server process belongs to this operator", procStat.uid === process.getuid());
@@ -774,15 +786,27 @@ async function run(): Promise<void> {
 	// cannot be borrowed into a claim about what a Codex MCP child inherits.
 	appServerEnv = { ...procEnv };
 	codexSocketPath = resolveCodexDefaultSocketPath(appServerEnv);
-	const expectedListen = `unix://${codexSocketPath}`;
-	const listensOnDefaultSocket = argv.some(
-		(arg, index) => (arg === "--listen" && argv[index + 1] === expectedListen) || arg === `--listen=${expectedListen}`,
+	// Ownership is read from the kernel, not from argv (#128). The endpoint is the one delivery
+	// itself connects to — the production classifier's verified physical socket — and the claim
+	// is that the named pid's OWN subtree holds its LISTEN inode. The argv `--listen` spelling
+	// is recorded in the receipt below and decides nothing: a wrapper whose child listens and a
+	// listener started with the vendor-default `--listen unix://` are both read as what they are.
+	const socketFile = checkCodexSocketFile(codexSocketPath);
+	ok(
+		"the default control path is a live socket or Codex's exact rendezvous alias — the endpoint delivery connects to",
+		socketFile.ok,
+		socketFile.ok ? "" : `${codexSocketPath}: ${socketFile.reason}`,
+	);
+	const socketOwnership = judgeCodexSocketOwnership(
+		observeCodexSocketSubtree(appServerPid, socketFile.connectPath, namedStartTime),
 	);
 	ok(
-		"the explicit app-server PID owns the same default UDS the fresh Codex runtime will use",
-		listensOnDefaultSocket,
-		`expected --listen ${expectedListen}; argv=${JSON.stringify(argv)}`,
+		"the explicit app-server PID's own process subtree holds the LISTEN socket at that verified endpoint",
+		socketOwnership.verdict === "owned",
+		`${describeCodexSocketOwnership(socketOwnership)}; argv=${JSON.stringify(argv)}`,
 	);
+	receipts["1a-codex-socket-ownership"] =
+		`advertised=${codexSocketPath}\nendpoint=${socketFile.connectPath}\n${describeCodexSocketOwnership(socketOwnership)}`;
 	const appServerCoordinate = inspectTmuxCoordinate("Codex app-server/MCP inherited seat", appServerEnv);
 	const fixtureCoordinate = inspectTmuxCoordinate("fixture/initial-Pi caller seat", process.env);
 	ok(

package/scripts/smoke-pi-durable-fresh-live.ts

@@ -538,9 +538,29 @@ ok(
 	fs.existsSync(liveDb),
 	liveDb,
 );
+const sqlite = await import("node:sqlite");
+// A doorbell input stays `placed` while the run that consumed it is active and turns `done` only when that run
+// ends (pi-durable's SubmissionRecord). Pi's relay can land before pd's final generation commits, so the snapshot
+// waits for THIS message's submission to settle (`done` or `unanswered`); the assertions below judge what settled.
+const msgName = /meta-mailbox → enqueued \(([^)]+)\)/.exec(piToPd.text)?.[1] ?? "";
+const doorbellRequestId = `entwurf-doorbell:${pdGid}:${msgName}`;
+if (msgName !== "") {
+	receipts["6-native-doorbell-settled"] = await until(`pd's doorbell submission to settle`, TURN_WAIT_MS, () => {
+		const live = new sqlite.DatabaseSync(liveDb, { readOnly: true });
+		try {
+			const rows = live.prepare("SELECT status, record FROM submissions").all() as Array<{
+				status: string;
+				record: string;
+			}>;
+			const hit = rows.find((r) => (JSON.parse(r.record) as { requestId?: unknown }).requestId === doorbellRequestId);
+			return hit?.status === "done" || hit?.status === "unanswered" ? hit.status : null;
+		} finally {
+			live.close();
+		}
+	});
+}
 const snapshot = path.join(receiptsDir, "pd-session.snapshot.sqlite");
 fs.mkdirSync(receiptsDir, { recursive: true });
-const sqlite = await import("node:sqlite");
 {
 	const source = new sqlite.DatabaseSync(liveDb, { readOnly: true });
 	try {
@@ -599,8 +619,7 @@ ok(
 	JSON.stringify(pdToPi),
 );
 receipts["6-pd-to-pi-settled"] = JSON.stringify(pdToPi);
-const msgName = /meta-mailbox → enqueued \(([^)]+)\)/.exec(piToPd.text)?.[1] ?? "";
-const doorbell = pdDoorbellSubmission(nativeSubmissions, rootId, `entwurf-doorbell:${pdGid}:${msgName}`);
+const doorbell = pdDoorbellSubmission(nativeSubmissions, rootId, doorbellRequestId);
 receipts["6-native-doorbell-submission"] = JSON.stringify(doorbell);
 ok(
 	"the doorbell admitted THIS message's notice to the root conversation and the submission is done",