@pyric/cli 0.1.0-alpha.30.2 → 0.1.0-alpha.31

package/dist/serve/site-ui/docs/database-compat.md

@@ -19,6 +19,7 @@
 <div class="compat-key">
 <span class="compat-key-item"><span class="compat-dot" data-status="ok"></span><strong>Conforming</strong> — observable behavior matches Firebase, locked by a passing probe</span>
 <span class="compat-key-item"><span class="compat-dot" data-status="diverged"></span><strong>Diverged (documented)</strong> — intentional difference with a written reason</span>
+<span class="compat-key-item"><span class="compat-dot" data-status="bug"></span><strong>Bug</strong> — should match Firebase but does not</span>
 </div>
 
 ## Public API
@@ -87,6 +88,10 @@
 <div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/sandbox-target.test.ts#L16" target="_blank" rel="noopener noreferrer"><code>unit:modular/sandbox-target.test.ts</code></a> ("rejects overlapping paths")</div></div>
 </details>
 <details class="compat-row" data-status="ok">
+<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>update()</code> applies when called, as <code>set()</code> does, so a client's writes land in call order: <code>update(r, { x: 2 })</code> then <code>set(child(r, 'x'), 3)</code> stores 3, update then remove leaves the path empty, and a listener sees the update before <code>update()</code> returns (RT-1)</span></span></summary>
+<div class="compat-evidence"><div class="compat-probe">Upstream firebase 12.13.0 run offline (hunt repro SDK-RT-1) and the docs' Event Guarantees: "Writes from a single client will always be written to the server and broadcast out to other users in-order." <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/update-write-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>unit:modular/update-write-order.test.ts</code></a></div></div>
+</details>
+<details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>push(ref)</code> mints a 20-char auto-id key starting with <code>-</code>, lexicographically sortable</span></span></summary>
 <div class="compat-evidence"><div class="compat-probe">Sandbox aligned: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/sandbox-target.test.ts#L347" target="_blank" rel="noopener noreferrer"><code>unit:modular/sandbox-target.test.ts</code></a> ("mints 20-char keys starting with \"-\"" + "sequential push keys are lex-sortable"); matches oracle observation <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-push-autoid-format.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-push-autoid-format.json</code></a></div></div>
 </details>
@@ -207,8 +212,8 @@
 <div class="compat-evidence"><div class="compat-probe">Sandbox aligned: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/transaction.test.ts#L62" target="_blank" rel="noopener noreferrer"><code>unit:modular/transaction.test.ts</code></a> ("returning undefined aborts — committed: false, no write" + "aborted transaction does NOT fan out to listeners"); matches oracle observation <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-abort-undefined.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-abort-undefined.json</code></a> — known divergence: prod's <code>result.snapshot.val()</code> reflects the CLIENT's pre-fetch (often <code>null</code> even when the server has a value because the speculative invocation runs before the server snap arrives); the sandbox returns the actual pre-transaction value at the path (more useful in single-client harness). The agreed-upon contract callers should rely on is <code>committed === false</code> and unchanged server-side data, NOT the snapshot's <code>.val()</code> on the abort path.</div></div>
 </details>
 <details class="compat-row" data-status="diverged">
-<summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-behavior">Cold production clients may invoke the update fn first with speculative <code>null</code> and then with the current seeded value; the always-warm in-process sandbox invokes it once with the current value</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-current-value-arg.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-current-value-arg</code></a> captures two seeded-path production invocations (<code>null</code>, then current); <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-transactions.test.ts#L52" target="_blank" rel="noopener noreferrer"><code>unit:modular/oracle-conformance-transactions.test.ts</code></a> pins the sandbox's single current-value invocation. The separate warm-client observation matches the sandbox but does not erase the cold-client contract. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/transaction.test.ts#L94" target="_blank" rel="noopener noreferrer"><code>transaction.test.ts</code></a>)</div></div>
+<summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-behavior">Cold production clients may invoke the update fn first with speculative <code>null</code> and then with the current seeded value; the always-warm in-process sandbox invokes it once with the current value, so abort-if-missing aborts in production and commits in pyric (RT-16)</span></span></summary>
+<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-current-value-arg.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-current-value-arg</code></a> captures two seeded-path production invocations (<code>null</code>, then current); <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-transactions.test.ts#L52" target="_blank" rel="noopener noreferrer"><code>unit:modular/oracle-conformance-transactions.test.ts</code></a> pins the sandbox's single current-value invocation. The separate warm-client observation matches the sandbox but does not erase the cold-client contract. <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set</code></a> key <code>abortIfMissing</code>: production aborts, pyric commits (RT-16). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/transaction.test.ts#L94" target="_blank" rel="noopener noreferrer"><code>transaction.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-transaction-then-set.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">The update fn arg is a defensive deep clone — mutating it does NOT corrupt the stored tree (matters for code that does <code>current.count++; return undefined</code> and expects abort to preserve state)</span></span></summary>
@@ -315,8 +320,8 @@
 <div class="compat-evidence"><div class="compat-probe">Sandbox aligned: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/normalization.test.ts#L20" target="_blank" rel="noopener noreferrer"><code>unit:modular/normalization.test.ts</code></a> ("array write is addressable by integer-string child key" + "forEach over an array iterates its elements"); upstream <code>core/snap/nodeFromJSON.ts:118-128</code>, <code>core/snap/ChildrenNode.ts:194-230</code></div></div>
 </details>
 <details class="compat-row" data-status="ok">
-<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Read-side array coercion: a dense integer-keyed object renders back as an array on <code>snap.val()</code> (<code>allIntegerKeys &amp;&amp; maxKey &lt; 2 * numKeys</code>) (DB-B2)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Sandbox aligned: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/normalization.test.ts#L19" target="_blank" rel="noopener noreferrer"><code>unit:modular/normalization.test.ts</code></a> ("a dense integer-keyed object reads back as an array"); upstream <code>core/snap/ChildrenNode.ts:196-230</code></div></div>
+<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Read-side array coercion: a dense integer-keyed object renders back as an array on <code>snap.val()</code> (<code>allIntegerKeys &amp;&amp; maxKey &lt; 2 * numKeys</code>), with a hole at each missing index; <code>exportVal()</code> and <code>toJSON()</code> keep it an object (DB-B2, RT-6)</span></span></summary>
+<div class="compat-evidence"><div class="compat-probe">Sandbox aligned: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/normalization.test.ts#L19" target="_blank" rel="noopener noreferrer"><code>unit:modular/normalization.test.ts</code></a> ("a dense integer-keyed object reads back as an array") and <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/snapshot-serialization.test.ts#L14" target="_blank" rel="noopener noreferrer"><code>unit:modular/snapshot-serialization.test.ts</code></a> (holes, export shape, #1371); <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/client/rtdb-sparse-array-holes.test.ts#L50" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/worker/client/rtdb-sparse-array-holes.test.ts</code></a> reads the holes back on the SharedWorker plane and on the Node host under Node, whose JSON transport writes them as <code>null</code>; upstream <code>core/snap/ChildrenNode.ts:196-230</code></div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>null</code> children and empty objects are pruned at the write boundary — <code>set(ref, {})</code> is equivalent to <code>remove(ref)</code>; nested <code>null</code> collapses empty ancestors ("empty nodes don't exist") (DB-B3)</span></span></summary>
@@ -506,7 +511,7 @@ In production each database URL is its own instance, with its own data and its o
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">database tool and pyric database &lt;method&gt; --instance</code><span class="compat-sub"><span class="compat-behavior">Every method of the <code>database</code> service tool, and <code>pyric database &lt;method&gt;</code>, takes an optional <code>instance</code>: a bare instance name, any database URL, or <code>default</code>, parsed with the SDK's URL rules, so a malformed URL is refused with the message <code>getDatabase</code> throws. The project's <code>&lt;projectId&gt;-default-rtdb</code>, and <code>&lt;projectId&gt;</code> with its <code>https://&lt;projectId&gt;.firebaseio.com</code> URL, select the default instance, as <code>getDatabase(app)</code> and that URL reach one instance. A call reads and writes only the instance it names, under the held identity and that instance's own rules, on the in-process sandbox and on the Node host. An instance <code>firebase.json</code> does not declare and the sandbox holds no data for is refused with the instances the project has, rather than opened empty. A summary names the instance when it is not the default.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/methods/database/instance.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/bridge/surface/methods/database/instance.test.ts</code></a> runs all seven methods with each instance form against a project whose <code>firebase.json</code> declares two shards, and asserts the call reaches only the named tree, that <code>default</code> and <code>&lt;projectId&gt;-default-rtdb</code> reach the default instance, the refusal and its list, an undeclared instance the sandbox already holds, the SDK message for a malformed URL, a uid identity held to each instance's own rules, and that the MCP target router hands a hosted call the argument unchanged. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/cli/surface-method-runner.test.ts#L6" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/cli/surface-method-runner.test.ts</code></a> persists a named-instance write to the in-process state and reads it back. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/hosted-sqlite.test.ts#L143" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/hosted-sqlite.test.ts</code></a> runs the Node host's hosted method route: a write a client port reads on that instance and not the default, the URL and default-name forms, an impersonated uid under the shard's rules, and the refusal. App scenario <code>test/apps/rtdb-named-instance-tools</code> drives the installed <code>pyric database get</code> and <code>set --instance</code> against a Vite hosted dev server while Chromium writes to both instances. CDD assertion <code>rtdb-modular#MI5</code> pins the sandbox side: each name and URL form resolves to one instance, <code>default</code> to the default instance, and <code>heldDatabaseInstances</code> names the instances a sandbox holds. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/database-instance-catalog-legacy-default.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/bridge/surface/database-instance-catalog-legacy-default.test.ts</code></a> asserts <code>&lt;projectId&gt;</code> selects the default instance and is not listed as a named one. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/database-instance.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>database-instance.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/database-instance-catalog.test.ts#L3" target="_blank" rel="noopener noreferrer"><code>database-instance-catalog.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/methods/database/instance.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/bridge/surface/methods/database/instance.test.ts</code></a> runs all seven methods with each instance form against a project whose <code>firebase.json</code> declares two shards, and asserts the call reaches only the named tree, that <code>default</code> and <code>&lt;projectId&gt;-default-rtdb</code> reach the default instance, the refusal and its list, an undeclared instance the sandbox already holds, the SDK message for a malformed URL, a uid identity held to each instance's own rules, and that the MCP target router hands a hosted call the argument unchanged. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/cli/surface-method-runner.test.ts#L6" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/cli/surface-method-runner.test.ts</code></a> persists a named-instance write to the in-process state and reads it back. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/hosted-sqlite.test.ts#L143" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/hosted-sqlite.test.ts</code></a> runs the Node host's hosted method route: a write a client port reads on that instance and not the default, the URL and default-name forms, an impersonated uid under the shard's rules, and the refusal. App scenario <code>test/apps/rtdb-named-instance-tools</code> drives the installed <code>pyric database get</code> and <code>set --instance</code> against a Vite hosted dev server while Chromium writes to both instances. CDD assertion <code>rtdb-modular#MI5</code> pins the sandbox side: each name and URL form resolves to one instance, <code>default</code> to the default instance, and <code>heldDatabaseInstances</code> names the instances a sandbox holds. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/database-instance-catalog-legacy-default.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/bridge/surface/database-instance-catalog-legacy-default.test.ts</code></a> asserts <code>&lt;projectId&gt;</code> selects the default instance and is not listed as a named one. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/database-instance.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>database-instance.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/bridge/surface/database-instance-catalog.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>database-instance-catalog.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">pyric verify --rules rtdb:&lt;instance&gt;=&lt;path&gt;</code><span class="compat-sub"><span class="compat-behavior">The verify capture records every instance a session held: the default instance's rules, data and URL, and each named instance's active rules and data under its name, on the SharedWorker, the Node host and the in-page runtime. RTDB events name the instance they hit. <code>pyric verify</code> replays each instance the session used on its own: only that instance's events, into the tree the session left it with, under that instance's candidate rules, so a write to one instance is never checked against another's rules or tree. Candidate rules come from <code>--rules rtdb=&lt;path&gt;</code> for the default instance and <code>--rules rtdb:&lt;instance&gt;=&lt;path&gt;</code> for a named one (a name or a database URL), else from <code>firebase.json</code> as <code>firebase deploy</code> resolves it: an array entry's <code>instance</code>, a <code>target</code> that <code>.firebaserc</code> maps for the project, and <code>database.rules.json</code> when there is no <code>database</code> key. The project's default instance name selects the default instance, and so does <code>&lt;projectId&gt;</code> or its <code>https://&lt;projectId&gt;.firebaseio.com</code> URL. A divergence on a named instance names it. An instance the session used with no candidate rules is an error that names it, with the reason a deploy target did not resolve; rules for an instance the session never used are refused with the instances it did use.</span></span></span></summary>
@@ -556,7 +561,7 @@ In production each database URL is its own instance, with its own data and its o
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>snap.val()</code> returns <code>null</code> for a missing path (NOT a thrown error — RTDB diverges from Firestore here; <code>getDoc</code> returns <code>exists()===false</code> but <code>get</code> on RTDB just returns a <code>null</code>-val snapshot)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-get-missing-path.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-get-missing-path.json</code></a> — observed <code>threw: false, val: null, exists: false</code> on a never-written path against blockingfun. The root of an empty database is the same case: the production SDK computes <code>DataSnapshot.exists()</code> as <code>!node.isEmpty()</code> at every path, the root included. The in-page sandbox, the served worker host and the Node host each read an empty root as <code>val: null, exists: false</code>, before any write and after the last child is removed. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-reference-writes.test.ts#L194" target="_blank" rel="noopener noreferrer"><code>oracle-conformance-reference-writes.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/rtdb-empty-root.test.ts#L44" target="_blank" rel="noopener noreferrer"><code>rtdb-empty-root.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/hosted-sqlite.test.ts#L19" target="_blank" rel="noopener noreferrer"><code>hosted-sqlite.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-get-missing-path.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-get-missing-path.json</code></a> — observed <code>threw: false, val: null, exists: false</code> on a never-written path against blockingfun. The root of an empty database is the same case: the production SDK computes <code>DataSnapshot.exists()</code> as <code>!node.isEmpty()</code> at every path, the root included. The in-page sandbox, the served worker host and the Node host each read an empty root as <code>val: null, exists: false</code>, before any write and after the last child is removed. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-reference-writes.test.ts#L201" target="_blank" rel="noopener noreferrer"><code>oracle-conformance-reference-writes.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/rtdb-empty-root.test.ts#L44" target="_blank" rel="noopener noreferrer"><code>rtdb-empty-root.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/hosted-sqlite.test.ts#L19" target="_blank" rel="noopener noreferrer"><code>hosted-sqlite.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>snap.exists()</code> is <code>false</code> when <code>val() === null</code>, <code>true</code> otherwise</span></span></summary>
@@ -564,7 +569,7 @@ In production each database URL is its own instance, with its own data and its o
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Round-trip: <code>set(ref, payload)</code> then <code>get(ref)</code> returns the payload (lock the basic write→read invariant)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json</code></a> — the payload round-trips structurally on both sides (this row's claim holds). NOTE — adjacent divergence pinned in <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/oracle-conformance.test.ts#L101" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>: prod returns object children in LEXICOGRAPHIC key order (the capture's <code>roundTripEqual: false</code> — a <code>JSON.stringify</code> round-trip against a non-sorted payload fails), while the sandbox preserves insertion order (stringify round-trip succeeds). Key-order-sensitive consumers behave differently.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json</code></a> — the payload round-trips structurally on both sides (this row's claim holds). <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/oracle-conformance.test.ts#L101" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a> also asserts the key order: production returns object children in key order (the capture's <code>roundTripEqual: false</code>: a <code>JSON.stringify</code> round-trip against a non-sorted payload fails), and so does the sandbox since #1371 (RT-7).</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Rules-denied read throws a plain <code>Error</code> (NOT a <code>FirebaseError</code>) with <code>code: 'PERMISSION_DENIED'</code> (uppercase snake-case) — matches the agent-tool rows #15/#20</span></span></summary>
@@ -589,12 +594,16 @@ In production each database URL is its own instance, with its own data and its o
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Primitive round-trip — numbers, strings, booleans, arrays all survive a set→get cycle</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json</code></a> — the payload round-trips structurally on both sides (this row's claim holds). NOTE — adjacent divergence pinned in <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/oracle-conformance.test.ts#L101" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a>: prod returns object children in LEXICOGRAPHIC key order (the capture's <code>roundTripEqual: false</code> — a <code>JSON.stringify</code> round-trip against a non-sorted payload fails), while the sandbox preserves insertion order (stringify round-trip succeeds). Key-order-sensitive consumers behave differently.</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-set-then-get-roundtrip.json</code></a> — the payload round-trips structurally on both sides (this row's claim holds). <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/oracle-conformance.test.ts#L101" target="_blank" rel="noopener noreferrer"><code>oracle-conformance.test.ts</code></a> also asserts the key order: production returns object children in key order (the capture's <code>roundTripEqual: false</code>: a <code>JSON.stringify</code> round-trip against a non-sorted payload fails), and so does the sandbox since #1371 (RT-7).</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Rules-denied write throws plain <code>Error</code> with <code>code: 'PERMISSION_DENIED'</code> (same shape as #110)</span></span></summary>
 <div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-rules-denied-error-code.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-rules-denied-error-code.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L20" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
+<details class="compat-row" data-status="ok">
+<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">On the SharedWorker and Node host planes, a write whose value, priority or update map the SDK refuses (NaN, Infinity, <code>undefined</code>, a function, an invalid key, an update map that is not an object) throws synchronously at the call with the SDK's text, sends nothing, and leaves stored data unchanged: <code>set</code>, <code>update</code>, <code>push</code>, <code>setPriority</code>, <code>setWithPriority</code> and <code>onDisconnect().set</code>, <code>setWithPriority</code> and <code>update</code></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe">Production behavior: firebase 12.13.0 offline throws synchronously for each call (<code>validateFirebaseDataArg</code>, <code>validateFirebaseMergeDataArg</code> and <code>validatePriority</code> in <code>@firebase/database</code>), recorded in the 2026-10-27 SDK hunt (RP-1, RP-6). <code>packages/cli/src/serve/worker/client/rtdb-value-validation.ts</code> runs those checks with their texts before a frame is sent; <code>bridge/frame-output.ts</code> refuses to encode an RTDB value JSON cannot carry, and the host refuses a non-object update map with the SDK's text. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/rtdb-invalid-writes.test.ts#L14" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/worker/rtdb-invalid-writes.test.ts</code></a> asserts each text and the unchanged data on the SharedWorker client. App scenario <code>test/apps/node-rtdb-invalid-writes</code> runs the client SDK under <code>node --import @pyric/cli/register</code> against the Node host and reads each path back with <code>firebase-admin</code>; on main (c706c6415) <code>set(ref, NaN)</code> resolved and deleted the value. CDD assertion <code>rtdb-modular#SW1</code> pins the sandbox side: the in-page sandbox fails the same writes and keeps the data. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/node-rtdb-invalid-writes/scenario.ts#L5" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L20" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+</details>
 </div>
 
 ### `update(ref, values)` — partial / multi-path update
@@ -627,15 +636,15 @@ In production each database URL is its own instance, with its own data and its o
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Removes the value AND all children; subsequent <code>get</code> returns <code>null</code>-val snapshot</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L67" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L82" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Idempotent — <code>remove</code> on a path that's already absent resolves successfully (no-throw)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remove-idempotent.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-remove-idempotent.json</code></a> — <code>remove</code> on a never-written path observed <code>threw: false, afterExists: false</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L67" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remove-idempotent.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-remove-idempotent.json</code></a> — <code>remove</code> on a never-written path observed <code>threw: false, afterExists: false</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L82" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>remove(ref)</code> and <code>set(ref, null)</code> produce the same end state — locks the documented RTDB invariant</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L67" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-remove-vs-set-null.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L82" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 </div>
 
@@ -644,19 +653,19 @@ In production each database URL is its own instance, with its own data and its o
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>push(ref).key</code> is a 20-char string starting with <code>-</code>, available <strong>synchronously</strong> (client-side mint, no server round-trip required)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-push-autoid-format.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-push-autoid-format.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L70" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-push-autoid-format.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-push-autoid-format.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L85" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Sequential <code>push</code> calls produce monotonically-sortable keys (timestamp-prefixed for chronological ordering via <code>orderByKey</code>)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-push-autoid-format.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-push-autoid-format.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L70" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-push-autoid-format.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-push-autoid-format.json</code></a> (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L85" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>push(ref, value)</code> writes the value AND returns the new child ref (both behaviors in one call); <code>push(ref)</code> mints the ref without writing</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json</code></a> — <code>await push(parent, {hello:'world'})</code> returned a ref with a 20-char key; subsequent <code>get(r)</code> returned <code>{hello:'world'}</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L70" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json</code></a> — <code>await push(parent, {hello:'world'})</code> returned a ref with a 20-char key; subsequent <code>get(r)</code> returned <code>{hello:'world'}</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L85" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">The returned ref <code>r = push(parent, value)</code> is usable in follow-up ops: <code>get(r)</code>, <code>set(r, …)</code>, <code>remove(r)</code></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json</code></a> — observed all 4 follow-up ops succeed through the returned ref (<code>refIsUsableForFollowupOps: true</code>). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L70" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-push-with-value.json</code></a> — observed all 4 follow-up ops succeed through the returned ref (<code>refIsUsableForFollowupOps: true</code>). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L85" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 </div>
 
@@ -665,7 +674,7 @@ In production each database URL is its own instance, with its own data and its o
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Subscribing to a path with <strong>existing data</strong> fires the listener once with the current snapshot (the "initial fire")</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-initial-with-data.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-initial-with-data.json</code></a> — observed exactly 1 initial fire within ~46ms of subscribe, snapshot.val() === the seeded payload. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L76" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-initial-with-data.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-initial-with-data.json</code></a> — observed exactly 1 initial fire within ~46ms of subscribe, snapshot.val() === the seeded payload. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L91" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Subscribing to a <strong>nonexistent path</strong> still fires the listener once — with a <code>null</code>-val snapshot AND <code>exists() === false</code>. Matches Firestore's <code>onSnapshot</code>-on-missing-doc semantics: prod RTDB does NOT silently skip the initial fire for empty paths.</span></span></summary>
@@ -673,11 +682,11 @@ In production each database URL is its own instance, with its own data and its o
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Subsequent <code>set(ref, …)</code> fires the listener with the new value</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-onvalue-fires-on-set.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-onvalue-fires-on-set.json</code></a> — observed 1 fire per <code>set()</code> (1+1+1 = 3 total: initial-null, after-first-set, after-second-set). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L76" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-onvalue-fires-on-set.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-onvalue-fires-on-set.json</code></a> — observed 1 fire per <code>set()</code> (1+1+1 = 3 total: initial-null, after-first-set, after-second-set). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L91" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Unsubscribe — the returned unsubscribe function stops further fires; subsequent writes produce 0 additional fires after <code>unsub()</code></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-unsubscribe.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-unsubscribe.json</code></a> — observed <code>preUnsubFires: 2, postUnsubFires: 2</code> (a write performed after <code>unsub()</code> produced 0 additional fires within a 500ms settle window). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L76" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-unsubscribe.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onvalue-unsubscribe.json</code></a> — observed <code>preUnsubFires: 2, postUnsubFires: 2</code> (a write performed after <code>unsub()</code> produced 0 additional fires within a 500ms settle window). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L91" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">The returned value from <code>onValue(ref, cb)</code> is the unsubscribe function (NOT an object); calling it removes the listener</span></span></summary>
@@ -690,19 +699,19 @@ In production each database URL is its own instance, with its own data and its o
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>onChildAdded</code> replays the existing children on subscribe — one fire per existing child key, in the default priority index with key tie-breaking (unlike <code>onValue</code> which fires once with the parent snapshot)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-initial-replay.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-initial-replay.json</code></a> — seeded <code>{k1, k2, k3}</code>, observed 3 initial fires with <code>firedKeys: ['k1', 'k2', 'k3']</code>; the default priority/key order is separately pinned by <code>rtdb-modular-priority-contract</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L107" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-initial-replay.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-initial-replay.json</code></a> — seeded <code>{k1, k2, k3}</code>, observed 3 initial fires with <code>firedKeys: ['k1', 'k2', 'k3']</code>; the default priority/key order is separately pinned by <code>rtdb-modular-priority-contract</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L122" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">After subscribe, adding a child via <code>push</code> or <code>set(child, …)</code> fires <code>onChildAdded</code> exactly once for that key</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-post-subscribe.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-post-subscribe.json</code></a> — seeded <code>{k1,k2}</code>, observed <code>postSubscribeFires: 1, lastFire: {key:'k3', val:{v:3}}</code> after writing the new child. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L107" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-post-subscribe.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildadded-post-subscribe.json</code></a> — seeded <code>{k1,k2}</code>, observed <code>postSubscribeFires: 1, lastFire: {key:'k3', val:{v:3}}</code> after writing the new child. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L122" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>onChildChanged</code> fires when an existing child's value changes; does NOT fire for added or removed children</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildchanged-fires-on-update.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildchanged-fires-on-update.json</code></a> — observed <code>firedOnInitial: 0, firedOnUpdate: 1, lastFire: {key:'k1', val:{v:2}}</code> (the NEW value, not the prior). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L87" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildchanged-fires-on-update.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildchanged-fires-on-update.json</code></a> — observed <code>firedOnInitial: 0, firedOnUpdate: 1, lastFire: {key:'k1', val:{v:2}}</code> (the NEW value, not the prior). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L102" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>onChildRemoved</code> fires when a child is deleted (via <code>remove(child)</code> or <code>set(child, null)</code>); snapshot carries the PRIOR value</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildremoved-fires-on-delete.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildremoved-fires-on-delete.json</code></a> — observed <code>firedOnDelete: 1, removedSnapCarriesPriorValue: true</code> (snapshot.val() was the pre-delete value). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L108" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-onchildremoved-fires-on-delete.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-onchildremoved-fires-on-delete.json</code></a> — observed <code>firedOnDelete: 1, removedSnapCarriesPriorValue: true</code> (snapshot.val() was the pre-delete value). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L123" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>onChildMoved</code> under an explicit ordered query fires when the ordered field changes, co-fires with <code>child_changed</code>, and supplies the captured <code>previousChildName</code>.</span></span></summary>
@@ -715,11 +724,11 @@ In production each database URL is its own instance, with its own data and its o
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>off(ref)</code> removes ALL listeners at that ref (any event type, any callback)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-off-stops-child-fires.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-off-stops-child-fires.json</code></a> — after <code>off(ref)</code> with no eventType, a subsequent write produced <code>postOffFires: 0</code> against an <code>onChildAdded</code> registration. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L109" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-off-stops-child-fires.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-off-stops-child-fires.json</code></a> — after <code>off(ref)</code> with no eventType, a subsequent write produced <code>postOffFires: 0</code> against an <code>onChildAdded</code> registration. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L124" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>off(ref, 'value')</code> removes only <code>value</code> listeners at that ref</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Sandbox aligned (M48); oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-off-eventtype-precision.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-off-eventtype-precision.json</code></a> — registered TWO <code>value</code> listeners + one <code>child_added</code> at the same ref; after <code>off(ref, 'value')</code> (no callback), <code>valueListenersStopped: true</code> (neither value cb fired on subsequent writes) AND <code>childListenerStillFiringAfterOffValue: true</code> (the child listener kept firing). <code>offValueClearsAllValueListeners: true</code> confirms the no-callback variant removes ALL value listeners at the ref. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-off-stops-child-fires.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-off-stops-child-fires</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L109" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">Sandbox aligned (M48); oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-off-eventtype-precision.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-off-eventtype-precision.json</code></a> — registered TWO <code>value</code> listeners + one <code>child_added</code> at the same ref; after <code>off(ref, 'value')</code> (no callback), <code>valueListenersStopped: true</code> (neither value cb fired on subsequent writes) AND <code>childListenerStillFiringAfterOffValue: true</code> (the child listener kept firing). <code>offValueClearsAllValueListeners: true</code> confirms the no-callback variant removes ALL value listeners at the ref. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-off-stops-child-fires.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-off-stops-child-fires</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L124" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>off(ref, 'value', cb)</code> removes only the specific callback</span></span></summary>
@@ -727,11 +736,11 @@ In production each database URL is its own instance, with its own data and its o
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">The returned unsubscribe function from <code>onValue(ref, cb)</code> is equivalent to <code>off(ref, 'value', cb)</code></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Sandbox aligned (M48); oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-onvalue-unsub-equivalence.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-onvalue-unsub-equivalence.json</code></a> — <code>unsubReturnType: 'function'</code>, <code>unsubReturnedFnStopsListener: true</code> (the captured return value halted fires on write), <code>offRefValueCbStopsListener: true</code> (the same effect via <code>off(ref, 'value', cb)</code>), <code>bothFormsEquivalent: true</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L109" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">Sandbox aligned (M48); oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb/rtdb-onvalue-unsub-equivalence.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb/rtdb-onvalue-unsub-equivalence.json</code></a> — <code>unsubReturnType: 'function'</code>, <code>unsubReturnedFnStopsListener: true</code> (the captured return value halted fires on write), <code>offRefValueCbStopsListener: true</code> (the same effect via <code>off(ref, 'value', cb)</code>), <code>bothFormsEquivalent: true</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L124" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">off(ref, eventType, callback)</code><span class="compat-sub"><span class="compat-behavior">When the same callback is registered more than once, each <code>off(ref, eventType, callback)</code> removes one registration without orphaning the others</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-off-duplicate-registration.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-off-duplicate-registration</code></a> proves each matching <code>off</code> removes one registration; sandbox row assertion <code>rtdb-modular#183</code> replays the full sequence. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-reference-writes.test.ts#L175" target="_blank" rel="noopener noreferrer"><code>oracle-conformance-reference-writes.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-off-duplicate-registration.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-off-duplicate-registration</code></a> proves each matching <code>off</code> removes one registration; sandbox row assertion <code>rtdb-modular#183</code> replays the full sequence. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-reference-writes.test.ts#L182" target="_blank" rel="noopener noreferrer"><code>oracle-conformance-reference-writes.test.ts</code></a>)</div></div>
 </details>
 </div>
 
@@ -744,39 +753,39 @@ In production each database URL is its own instance, with its own data and its o
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>orderByKey()</code> orders by the auto-id / numeric key</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json</code></a> — seeded <code>{a,b,c,d,e}</code> in shuffled insertion order, observed <code>matchedKeys: ['b','c','d']</code> for <code>orderByKey() + startAt('b') + endAt('d')</code> (in key order). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L123" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json</code></a> — seeded <code>{a,b,c,d,e}</code> in shuffled insertion order, observed <code>matchedKeys: ['b','c','d']</code> for <code>orderByKey() + startAt('b') + endAt('d')</code> (in key order). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L138" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Under loaded rules, <code>orderByValue()</code> and <code>orderByChild(path)</code> need <code>.indexOn: '.value'</code> or <code>.indexOn: '&lt;path&gt;'</code> at the queried location: <code>get()</code> rejects with <code>Index not defined</code>, limited or unlimited, and a listener downloads the location, filters it locally, and logs the unspecified-index warning only when the query has a limit or a range. <code>orderByKey()</code> needs no index. A rules-bypassing admin handle meets the same requirement: its <code>get()</code> rejects and its listener warns. With no rules loaded, the sandbox requires no index</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-index-enforcement.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-query-index-enforcement</code></a> covers <code>orderByChild</code> and <code>orderByValue</code> with a limit, without a limit, and with <code>startAt</code>, plus <code>orderByKey</code> with a limit, each at an indexed and an unindexed location; <code>unit:cdd/query-index-contracts.ts</code> replays the <code>get()</code> and <code>onValue()</code> cases in the sandbox and matches outcomes and log lines. The served worker path delivers the same rejection and logs the warning in the page (<a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/client/rtdb-listeners.test.ts#L1" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/worker/client/rtdb-listeners.test.ts</code></a>). Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-admin-query-index.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-admin-query-index</code></a> (captured 2026-10-07) records the Admin SDK getting the same <code>Index not defined</code> rejection from <code>get()</code>, limited and unlimited, and a limited <code>once('value')</code> delivering the filtered window with the unspecified-index warning; <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/admin-query-index.test.ts#L3" target="_blank" rel="noopener noreferrer"><code>unit:modular/admin-query-index.test.ts</code></a> replays it on a <code>getAdminDatabase</code> handle. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbyvalue-numeric.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbyvalue-numeric</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L132" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-queries.test.ts#L53" target="_blank" rel="noopener noreferrer"><code>oracle-conformance-queries.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/index-diagnostics.test.ts#L1" target="_blank" rel="noopener noreferrer"><code>index-diagnostics.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-index-enforcement.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-query-index-enforcement</code></a> covers <code>orderByChild</code> and <code>orderByValue</code> with a limit, without a limit, and with <code>startAt</code>, plus <code>orderByKey</code> with a limit, each at an indexed and an unindexed location; <code>unit:cdd/query-index-contracts.ts</code> replays the <code>get()</code> and <code>onValue()</code> cases in the sandbox and matches outcomes and log lines. The served worker path delivers the same rejection and logs the warning in the page (<a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/client/rtdb-listeners.test.ts#L1" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/worker/client/rtdb-listeners.test.ts</code></a>). Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-admin-query-index.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-admin-query-index</code></a> (captured 2026-10-07) records the Admin SDK getting the same <code>Index not defined</code> rejection from <code>get()</code>, limited and unlimited, and a limited <code>once('value')</code> delivering the filtered window with the unspecified-index warning; <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/admin-query-index.test.ts#L3" target="_blank" rel="noopener noreferrer"><code>unit:modular/admin-query-index.test.ts</code></a> replays it on a <code>getAdminDatabase</code> handle. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbyvalue-numeric.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbyvalue-numeric</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L147" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-queries.test.ts#L53" target="_blank" rel="noopener noreferrer"><code>oracle-conformance-queries.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/index-diagnostics.test.ts#L1" target="_blank" rel="noopener noreferrer"><code>index-diagnostics.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>equalTo(v)</code> filters children whose ordered field === v (returns 0, 1, or multiple matches — RTDB does NOT enforce uniqueness)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-equalto.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-query-equalto.json</code></a> — seeded <code>{red, blue, blue, green}</code>, observed <code>matchedKeys: ['k2', 'k3']</code> for <code>equalTo('blue')</code> (both blue children, none of the others). Additional probe: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-equalTo-filter.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-equalTo-filter.json</code></a> (a..b..c groups) confirms <code>equalTo('b')</code> returns the two <code>b</code> children. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L125" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-equalto.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-query-equalto.json</code></a> — seeded <code>{red, blue, blue, green}</code>, observed <code>matchedKeys: ['k2', 'k3']</code> for <code>equalTo('blue')</code> (both blue children, none of the others). Additional probe: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-equalTo-filter.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-equalTo-filter.json</code></a> (a..b..c groups) confirms <code>equalTo('b')</code> returns the two <code>b</code> children. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L140" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>startAt(v)</code> is <strong>inclusive</strong> (the child whose ordered value === v is included)</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-startat-inclusive.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-query-startat-inclusive.json</code></a> — seeded positions <code>[1,2,3,4]</code>, observed <code>matched: [2,3,4]</code> for <code>startAt(2)</code> (cursor doc included). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbychild-window.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbychild-window</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbykey-window</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L126" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-startat-inclusive.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-query-startat-inclusive.json</code></a> — seeded positions <code>[1,2,3,4]</code>, observed <code>matched: [2,3,4]</code> for <code>startAt(2)</code> (cursor doc included). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbychild-window.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbychild-window</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbykey-window</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L141" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>endAt(v)</code> is <strong>inclusive</strong></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbychild-window.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-orderbychild-window.json</code></a> — <code>startAt(2) + endAt(4)</code> matched positions <code>[2,3,4]</code> (endAt(4) included its boundary value). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbykey-window</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L127" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbychild-window.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-orderbychild-window.json</code></a> — <code>startAt(2) + endAt(4)</code> matched positions <code>[2,3,4]</code> (endAt(4) included its boundary value). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbykey-window.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbykey-window</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L142" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>startAfter(v)</code> is <strong>exclusive</strong></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json</code></a> — <code>startAfter(2) + endBefore(5)</code> matched positions <code>[3,4]</code> (cursor <code>2</code> dropped). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L128" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json</code></a> — <code>startAfter(2) + endBefore(5)</code> matched positions <code>[3,4]</code> (cursor <code>2</code> dropped). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L143" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>endBefore(v)</code> is <strong>exclusive</strong></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json</code></a> — same probe; cursor <code>5</code> dropped. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L129" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-startafter-endbefore-exclusive.json</code></a> — same probe; cursor <code>5</code> dropped. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L144" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>limitToFirst(N)</code> caps the result count from the start of the ordered range</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-orderbychild-limit.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-query-orderbychild-limit.json</code></a> plus <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json</code></a> (firstPositions <code>[1,2]</code>). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbyvalue-numeric.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbyvalue-numeric</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L122" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-query-orderbychild-limit.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-query-orderbychild-limit.json</code></a> plus <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json</code></a> (firstPositions <code>[1,2]</code>). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-orderbyvalue-numeric.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-orderbyvalue-numeric</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L137" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>limitToLast(N)</code> caps from the end</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json</code></a> — observed <code>lastKeys: ['d','e'], lastPositions: [4,5]</code> for <code>limitToLast(2)</code> on a 5-child collection ordered by <code>pos</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L131" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-limittofirst-vs-limittolast.json</code></a> — observed <code>lastKeys: ['d','e'], lastPositions: [4,5]</code> for <code>limitToLast(2)</code> on a 5-child collection ordered by <code>pos</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L146" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Listeners on a <code>Query</code> (<code>onValue(q, …)</code>) emit only the windowed snapshot — NOT the parent ref's full data</span></span></summary>
@@ -814,7 +823,7 @@ In production each database URL is its own instance, with its own data and its o
 <div class="compat-list">
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Basic success — <code>runTransaction(ref, current =&gt; (current ?? 0) + 1)</code> resolves <code>{ committed: true, snapshot }</code> where <code>snapshot.val()</code> is the new value</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-success.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-success.json</code></a> — observed <code>committed: true, snapVal: 1</code> after running <code>current =&gt; (current ?? 0) + 1</code> against an empty ref. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-on-rules-denied-path.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-on-rules-denied-path</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-options-applylocally.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-options-applylocally</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L141" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
+<div class="compat-evidence"><div class="compat-probe">oracle: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-success.json" target="_blank" rel="noopener noreferrer"><code>packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-success.json</code></a> — observed <code>committed: true, snapVal: 1</code> after running <code>current =&gt; (current ?? 0) + 1</code> against an empty ref. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-on-rules-denied-path.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-on-rules-denied-path</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-options-applylocally.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-options-applylocally</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/public-operations.test.ts#L156" target="_blank" rel="noopener noreferrer"><code>public-operations.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
 <summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior">Returning <code>undefined</code> from the update fn <strong>aborts</strong> the transaction — resolves <code>{ committed: false }</code>, no write performed (RTDB-specific; distinct from Firestore where the only abort path is throwing)</span></span></summary>
@@ -867,10 +876,9 @@ In production each database URL is its own instance, with its own data and its o
 <div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/fruit-aliases.test.ts#L21" target="_blank" rel="noopener noreferrer"><code>unit:modular/fruit-aliases.test.ts</code></a></div>
 <div class="compat-note">accepted no-op; no sandbox logger to wire into</div></div>
 </details>
-<details class="compat-row" data-status="diverged">
-<summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-behavior"><strong>Divergence:</strong> <code>refFromURL(db, url)</code> matches Firebase's path parsing, query ignoring, FTP-to-database normalization, and fragment rejection, but the single-database sandbox does not validate the URL host/namespace against the handle; Firebase rejects a mismatched host while the sandbox uses its path.</span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-reference-shape-url.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-reference-shape-url</code></a> captures accepted FTP/query URLs and rejected fragments, malformed URLs, and host mismatches; <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-reference-writes.test.ts#L33" target="_blank" rel="noopener noreferrer"><code>unit:modular/oracle-conformance-reference-writes.test.ts</code></a> pins the conforming validations plus both sides of the host divergence.</div>
-<div class="compat-note">path and validation behavior conform except URL host/namespace matching (single-database sandbox)</div></div>
+<details class="compat-row" data-status="ok">
+<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><span class="compat-behavior"><code>refFromURL(db, url)</code> matches Firebase's path parsing, query ignoring, FTP-to-database normalization, fragment rejection and malformed-URL error. As the SDK does, a URL whose host is not the database's host throws <code>Host name does not match the current database</code>, unless the database's host is custom (any domain but <code>firebaseio.com</code> and <code>firebaseio-demo.com</code>). A sandbox database opened without a URL has no host, so its URLs are not checked.</span></span></summary>
+<div class="compat-evidence"><div class="compat-probe">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-reference-shape-url.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-reference-shape-url</code></a> captures accepted FTP/query URLs and rejected fragments, malformed URLs, and host mismatches; <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-reference-writes.test.ts#L33" target="_blank" rel="noopener noreferrer"><code>unit:modular/oracle-conformance-reference-writes.test.ts</code></a> replays each, and <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/ref-from-url-host.test.ts#L52" target="_blank" rel="noopener noreferrer"><code>unit:modular/ref-from-url-host.test.ts</code></a> pins the host check for an app's default instance, a named instance and a custom host, from hunt finding RT-12.</div></div>
 </details>
 </div>
 
@@ -889,8 +897,8 @@ The web hosted client talks to the Node host over one WebSocket. When that socke
 <div class="compat-evidence"><div class="compat-probe">Production behavior: the same <code>@firebase/database</code> 1.1.3 code as row HD1 (<code>onRealtimeDisconnect_</code>, <code>restoreState_</code>, <code>sendOnDisconnect_</code>, <code>cancelSentTransactions_</code>); the package runs the same database core in Node. Pyric behavior: <code>packages/cli/src/serve/worker/rtdb-drop-fates.ts</code> is the per-method table both this client and the web hosted client classify a call with, and <code>packages/cli/src/remote/index.ts</code> <code>releaseInFlight</code> applies it, failing a key-less push. <code>packages/cli/src/remote/held-calls.ts</code> holds the calls until the next attach. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/remote/reconnect.test.ts#L22" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/remote/reconnect.test.ts</code></a> stops a real loopback host with calls in flight and asserts each method's outcome, that a write or get is sent again on the restarted host under a new id and resolves on its reply, the order (restored listeners, then calls in flight, then calls issued while down), that a call sent again outlives the hold deadline, and that a returning host refusing the attach or <code>close()</code> fails them unsent. <code>packages/cli/test/remote/loop-hold.test.ts</code> asserts the release by fate and that a held call keeps a Node process alive until it settles. App scenario <code>test/apps/node-client-host-restart</code> runs a <code>firebase-admin</code> writer under <code>node --import @pyric/cli/register</code>, restarts the hosted Vite dev server by editing <code>vite.config.js</code> mid-run, and asserts every write resolves and is stored and none reports the URL as stale (#1107). CDD assertion <code>rtdb-modular#HD2</code> pins the sandbox side: the in-page sandbox has no socket, so a write and a get settle in process across <code>goOffline()</code> and <code>goOnline()</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/node-client-host-restart/scenario.ts#L2" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L4" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div>
 </details>
 <details class="compat-row" data-status="ok">
-<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">pyric-admin DataSnapshot forEach / numChildren / hasChildren / child, and worker bridge snapshots</code><span class="compat-sub"><span class="compat-behavior">A node whose keys are integers keeps its children when <code>val()</code> renders it as an array. A <code>pyric-admin</code> snapshot of such a node, read in process or through the remote arm, iterates <code>forEach</code> over children keyed <code>'0'</code>, <code>'1'</code>, ... in index order, skipping indexes that hold no value, and <code>numChildren()</code>, <code>hasChildren()</code>, <code>child('1')</code> and <code>hasChild('1')</code> count and address the same children. A snapshot the worker bridge hydrates without the host's ordered entries, from <code>child()</code> or inside <code>forEach</code>, iterates an array value the same way. <code>forEach</code> stops when the callback returns <code>true</code> and returns <code>true</code>.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">Production behavior read from <code>@firebase/database</code> 1.1.3 <code>dist/index.node.cjs.js</code>: <code>DataSnapshot.forEach</code> returns <code>false</code> only for a leaf node and otherwise walks the node's children in priority, then <code>nameCompare</code> key order; <code>hasChildren</code> is <code>!isLeafNode() &amp;&amp; !isEmpty()</code>; <code>size</code> is <code>ChildrenNode.numChildren()</code>; <code>ChildrenNode.val</code> renders a node as an array only when every key is an integer and the largest is below twice the key count, leaving missing indexes as holes. Pyric behavior: <code>valueChildren</code> (exported from <code>pyric/database/internal</code>) lists a value's children (array indexes as string keys without holes or nulls, or object keys in <code>nameCompare</code> order), used by <code>packages/pyric-admin/src/database/index.ts</code> <code>buildSandboxSnap</code> and <code>packages/cli/src/serve/worker/client/rtdb-snapshots.ts</code> <code>makeRtdbSnapshot</code>. <a href="https://github.com/davideast/pyric/blob/main/packages/pyric-admin/test/database/array-children.test.ts#L3" target="_blank" rel="noopener noreferrer"><code>packages/pyric-admin/test/database/array-children.test.ts</code></a> asserts a dense, sparse and nested array, each child's key, value and reference, and the early exit. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/client/rtdb-snapshots.test.ts#L29" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/worker/client/rtdb-snapshots.test.ts</code></a> iterates a nested and a sparse array below the top level of a worker snapshot. App scenario <code>test/apps/node-client-host-restart</code> reads the stored ticks back with <code>forEach</code> from a <code>firebase-admin</code> process under <code>node --import @pyric/cli/register</code> (#1110). CDD assertion <code>rtdb-modular#AS1</code> pins the sandbox side: an array written through <code>getAdminDatabase</code> iterates as one child per index. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/node-client-host-restart/scenario.ts#L86" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div>
+<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">pyric-admin DataSnapshot forEach / numChildren / hasChildren / child, and worker bridge snapshots</code><span class="compat-sub"><span class="compat-behavior">A node whose keys are integers keeps its children when <code>val()</code> renders it as an array. A <code>pyric-admin</code> snapshot of such a node, read in process or through the remote arm, iterates <code>forEach</code> over children keyed <code>'0'</code>, <code>'1'</code>, ... in index order, skipping indexes that hold no value, and <code>numChildren()</code>, <code>hasChildren()</code>, <code>child('1')</code> and <code>hasChild('1')</code> count and address the same children. A snapshot the worker bridge hydrates without the host's ordered entries, from <code>child()</code> or inside <code>forEach</code>, iterates an array value the same way. <code>forEach</code> stops when the callback returns <code>true</code> and returns <code>true</code>. Both <code>pyric-admin</code> arms store a write by key, as the host does, so an object whose keys are integers, written with <code>set()</code>, <code>update()</code> or <code>push()</code>, reads back from <code>val()</code> as an array when its largest key is below twice the key count, with a hole at each missing index, while <code>exportVal()</code> and <code>toJSON()</code> keep the integer keys as object keys. Null children and empty objects are dropped. For a node written without priorities, the in-process arm, the remote arm and the in-page client sandbox agree on <code>val()</code>, <code>exportVal()</code>, <code>toJSON()</code>, <code>numChildren()</code>, <code>forEach</code> keys and order, and <code>child()</code>. Both <code>pyric-admin</code> arms refuse a write firebase-admin refuses (<code>undefined</code>, a function, <code>NaN</code> or an infinity, an invalid key, <code>.value</code> beside children, an inline priority that is not a string or number, or an <code>update()</code> key ending in <code>.priority</code> whose value is not a valid priority) by throwing synchronously with firebase-admin's text, and store nothing. Both arms write a value as RTDB stores it, so a <code>Date</code> is dropped as firebase-admin drops it. Priorities are not modeled on the <code>pyric-admin</code> arms: a valid priority, inline or under an <code>update()</code> key ending in <code>.priority</code>, is accepted and dropped on both, and the in-process arm's <code>exportVal()</code> carries none. The remote arm's <code>exportVal()</code> and <code>toJSON()</code> return the host's export, so a priority another plane set reads back with it.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe">Production behavior read from <code>@firebase/database</code> 1.1.3 <code>dist/index.node.cjs.js</code>: <code>DataSnapshot.forEach</code> returns <code>false</code> only for a leaf node and otherwise walks the node's children in priority, then <code>nameCompare</code> key order; <code>hasChildren</code> is <code>!isLeafNode() &amp;&amp; !isEmpty()</code>; <code>size</code> is <code>ChildrenNode.numChildren()</code>; <code>ChildrenNode.val</code> renders a node as an array only when every key is an integer and the largest is below twice the key count and the call is not exporting (<code>exportVal()</code> and <code>toJSON()</code> call <code>val(true)</code>), leaving missing indexes as holes; <code>validateFirebaseData</code> and <code>validateFirebaseMergeDataArg</code> refuse a write synchronously. Pyric behavior: <code>valueChildren</code> (exported from <code>pyric/database/internal</code>) lists a value's children (array indexes as string keys without holes or nulls, or object keys in <code>nameCompare</code> order), used by <code>packages/pyric-admin/src/database/index.ts</code> <code>buildSandboxSnap</code> and <code>packages/cli/src/serve/worker/client/rtdb-snapshots.ts</code> <code>makeRtdbSnapshot</code>. Both <code>pyric-admin</code> arms validate a write with <code>validateWrite</code> before it runs or is relayed, and their shared snapshot keeps the stored value for <code>exportVal()</code> and <code>toJSON()</code> and renders <code>val()</code> with <code>coerceArrays</code>; the in-process arm stores what <code>normalizeNode</code> builds. These are the write-boundary normalization the in-page sandbox and the host use, exported from <code>pyric/database/internal</code>. <a href="https://github.com/davideast/pyric/blob/main/packages/pyric-admin/test/database/write-validation.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/pyric-admin/test/database/write-validation.test.ts</code></a> runs 35 refused writes on both arms and asserts the synchronous error text firebase-admin 13.10.0 throws for each, read from the SDK run offline, and that nothing is stored; it also asserts a valid priority is dropped on both arms, a <code>Date</code> is dropped on both, and the remote arm's <code>exportVal()</code> carries a priority the host set. <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/write-validation-text.test.ts#L4" target="_blank" rel="noopener noreferrer"><code>packages/pyric/test/database/modular/write-validation-text.test.ts</code></a> asserts the in-page sandbox's refusal text for <code>set</code>, <code>push</code> (naming the parent's path), <code>setWithPriority</code>, <code>update</code>, a transaction result, and <code>onDisconnect().set()</code> and <code>setWithPriority()</code>, and its keyed <code>exportVal()</code> and <code>toJSON()</code>. <a href="https://github.com/davideast/pyric/blob/main/packages/pyric-admin/test/database/array-children.test.ts#L3" target="_blank" rel="noopener noreferrer"><code>packages/pyric-admin/test/database/array-children.test.ts</code></a> asserts a dense, sparse and nested array, each child's key, value and reference, and the early exit. <a href="https://github.com/davideast/pyric/blob/main/packages/pyric-admin/test/database/integer-keys-parity.test.ts#L4" target="_blank" rel="noopener noreferrer"><code>packages/pyric-admin/test/database/integer-keys-parity.test.ts</code></a> writes dense, sparse and over-threshold integer keys, arrays, nested mixes, null children, empty objects, <code>update()</code> and <code>push()</code> on the in-process arm, the remote arm on the real worker host, and the in-page client sandbox, and asserts the same <code>val()</code>, <code>exportVal()</code>, <code>numChildren()</code>, <code>forEach</code> keys and order, and <code>child()</code> on all three (#1121). <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/client/rtdb-snapshots.test.ts#L29" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/serve/worker/client/rtdb-snapshots.test.ts</code></a> iterates a nested and a sparse array below the top level of a worker snapshot. App scenario <code>test/apps/node-client-host-restart</code> reads the stored ticks back with <code>forEach</code> from a <code>firebase-admin</code> process under <code>node --import @pyric/cli/register</code> (#1110). CDD assertion <code>rtdb-modular#AS1</code> pins the sandbox side: an array and an object with keys <code>0</code>, <code>1</code>, <code>2</code> written through <code>getAdminDatabase</code> read back as the same array, which iterates as one child per index. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/node-client-host-restart/scenario.ts#L86" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div>
 </details>
 </div>
 
@@ -901,7 +909,7 @@ A server process started with `node --import @pyric/cli/register` and `PYRIC_SAN
 <div class="compat-list">
 <details class="compat-row" data-status="diverged">
 <summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getDatabase(app) in a registered server process</code><span class="compat-sub"><span class="compat-behavior">Under a remote register activation on the Node host, <code>firebase/database</code> in a server process reads and writes the host's data under its rules as the process's signed-in user: a write the rules deny for that user fails with <code>PERMISSION_DENIED</code>, <code>.info/connected</code> follows the process's connection, and an <code>onDisconnect</code> write runs when that connection ends. From its first RTDB call on an instance the process stays up until <code>goOffline()</code> on that instance or <code>deleteApp()</code>, as <code>@firebase/database</code> keeps a Node process up. When the host is not the Node host, every call fails with <code>failed-precondition</code> and a message naming the Node host (<code>pyric sandbox --hosted</code> or <code>pyric({ hosted: true })</code>); when no host is found, with the discovery error <code>pyric-admin</code> gets. No call falls back to an in-process sandbox.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-probe">App scenario <code>test/apps/client-sdk-under-register</code> runs the client SDKs under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server, reads back with <code>firebase-admin</code> and a page, and asserts a write and a read, a denied write to another user's path, <code>.info/connected</code>, an <code>onDisconnect</code> that ran after the process exited, and that a process stays up after a write until <code>goOffline()</code>. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-realm.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-realm.test.ts</code></a> pins when the process is held. CDD assertion <code>rtdb-modular#RS1</code> pins the sandbox side: rules evaluate per signed-in session, and a registry bound to the refusal opens no database handle. On main (942cb175) it failed: the calls ran against a private in-process sandbox, so an upload returned a <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>data:</code></a> URL and firebase-admin read nothing they wrote. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/register/node-origin.test.ts</code></a> runs the served surfaces under a Node origin whose host is not the Node host, or cannot be found, and asserts every call fails, <code>useWorker</code> stays true, the served app entry's placeholder sandbox stays empty, and a <code>pyric/*</code> mirror resolved from the app refuses. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L80" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins the mapping per activation value.. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/register-child.test.ts#L138" target="_blank" rel="noopener noreferrer"><code>register-child.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div>
+<div class="compat-evidence"><div class="compat-probe">App scenario <code>test/apps/client-sdk-under-register</code> runs the client SDKs under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server, reads back with <code>firebase-admin</code> and a page, and asserts a write and a read, a denied write to another user's path, <code>.info/connected</code>, an <code>onDisconnect</code> that ran after the process exited, and that a process stays up after a write until <code>goOffline()</code>. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-realm.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-realm.test.ts</code></a> pins when the process is held. CDD assertion <code>rtdb-modular#RS1</code> pins the sandbox side: rules evaluate per signed-in session, and a registry bound to the refusal opens no database handle. On main (942cb175) it failed: the calls ran against a private in-process sandbox, so an upload returned a <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>data:</code></a> URL and firebase-admin read nothing they wrote. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/register/node-origin.test.ts</code></a> runs the served surfaces under a Node origin whose host is not the Node host, or cannot be found, and asserts every call fails, <code>useWorker</code> stays true, the served app entry's placeholder sandbox stays empty, and a <code>pyric/*</code> mirror resolved from the app refuses. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L78" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins the mapping per activation value.. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/register-child.test.ts#L138" target="_blank" rel="noopener noreferrer"><code>register-child.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div>
 <div class="compat-note">the app must use the same Firebase options as the host's other clients (one configuration per runtime)</div></div>
 </details>
 </div>
@@ -923,6 +931,49 @@ Modules Vite loads for server rendering under `vite dev` with `pyric()` (`server
 </details>
 </div>
 
+## Behavior checked against production captures
+
+Each row cites a production capture from the SDK behavior hunt. A `bug` row states production's behavior and pyric's; its test holds both answers until the fix lands.
+
+<div class="compat-list">
+<details class="compat-row" data-status="bug">
+<summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">runTransaction(ref, fn) followed at once by set(ref, value)</code><span class="compat-sub"><span class="compat-behavior">On a cold production client the set overtakes the transaction, which rejects with Error('set'); pyric commits it. A warm client commits in both. RT-15.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set</code></a> keys <code>cold</code> and <code>warm</code> (both clients were cold) and <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set-warm.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set-warm</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-transaction-then-set.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="bug">
+<summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">runTransaction then set on the served planes</code><span class="compat-sub"><span class="compat-behavior">On the served planes the transaction reruns on the set's value and commits on top (101); production keeps the set's 100. RP-4.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set</code></a> and <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set-warm.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set-warm</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/oracle-captures/rtdb-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>rtdb-transaction-then-set.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-transaction-then-set.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="bug">
+<summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">Event order for one remote multi-path update</code><span class="compat-sub"><span class="compat-behavior">Production fires deeper paths first and child events (removed, added, moved, changed) before value; the in-page sandbox fires value first, parents first, in registration order. RT-2, RT-3.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a> key <code>log</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="bug">
+<summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">setPriority(ref) and child_changed</code><span class="compat-sub"><span class="compat-behavior">Production fires child_changed on the parent's listeners for a priority-only change. Pyric fires none, on every plane. RT-4.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a> (<code>R changed a</code> and <code>Q changed a</code> after setPriority). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/oracle-captures/rtdb-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>rtdb-remote-update-event-order.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="bug">
+<summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">child_moved on a query with no orderBy</code><span class="compat-sub"><span class="compat-behavior">Production fires child_moved for a priority change on a query with no orderBy (<code>L moved a</code>). The in-page sandbox fires none; the served planes match production. RT-5, part of #138.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="ok">
+<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">Object.keys(snapshot.val())</code><span class="compat-sub"><span class="compat-behavior">Production and pyric order <code>val()</code> keys by priority, then key, on a ref and a query snapshot. RT-7, fixed in #1371.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a> key <code>valKeys</code>, replayed in page and on the served planes; <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/snapshot-serialization.test.ts#L9" target="_blank" rel="noopener noreferrer"><code>packages/pyric/test/database/modular/snapshot-serialization.test.ts</code></a> adds priorities and nested values. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/oracle-captures/rtdb-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>rtdb-remote-update-event-order.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="bug">
+<summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">Event order for one remote update on the served planes</code><span class="compat-sub"><span class="compat-behavior">Production delivers one write's events deepest path first, child events before value. On the SharedWorker and Node host planes they arrive listener by listener in registration order. RP-5.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/oracle-captures/rtdb-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>rtdb-remote-update-event-order.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="ok">
+<summary class="compat-line"><span class="compat-dot" data-status="ok" role="img" aria-label="Conforming" title="Conforming"></span><span class="compat-main"><code class="compat-api">orderByPriority with endAt or endBefore and limitToLast over children with no priority</code><span class="compat-sub"><span class="compat-behavior">Production and pyric give the same keys: <code>z</code> for endAt("1","A") with limitToLast(1), <code>b,z</code> for endBefore("1") with limitToLast(2), <code>1,10,A,a,b,z</code> with no limit, and <code>a,b,z</code> for the endAt(2) limitToLast(3) control. The capture refuted hunt finding RT-17.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-priority-window-limit-to-last.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-priority-window-limit-to-last</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-priority-window-limit-to-last.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-priority-window-limit-to-last.test.ts</code></a>)</div></div>
+</details>
+<details class="compat-row" data-status="bug">
+<summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">onValue(query) and a grandchild's priority change</code><span class="compat-sub"><span class="compat-behavior">Production fires a value event on every listener above a grandchild whose priority changes, orderByKey queries included. Pyric's query listeners miss it on every plane, though plain ref listeners get it. RP-8 (differential seed 7395).</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-probe"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-grandchild-priority-query-value.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-grandchild-priority-query-value</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-grandchild-priority-query-value.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-grandchild-priority-query-value.test.ts</code></a>)</div></div>
+</details>
+</div>
+
 ## Current gaps
 
 ### Documented divergences
@@ -930,8 +981,8 @@ Modules Vite loads for server rendering under `vite dev` with `pyric()` (`server
 Known differences between Pyric and production Firebase. Each remains tracked as a non-conforming row.
 
 <div class="compat-list">
-<details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-sub"><span class="compat-behavior">Cold production clients may invoke the update fn first with speculative <code>null</code> and then with the current seeded value; the always-warm in-process sandbox invokes it once with the current value</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-note">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-current-value-arg.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-current-value-arg</code></a> captures two seeded-path production invocations (<code>null</code>, then current); <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-transactions.test.ts#L52" target="_blank" rel="noopener noreferrer"><code>unit:modular/oracle-conformance-transactions.test.ts</code></a> pins the sandbox's single current-value invocation. The separate warm-client observation matches the sandbox but does not erase the cold-client contract. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/transaction.test.ts#L94" target="_blank" rel="noopener noreferrer"><code>transaction.test.ts</code></a>)</div></div></details>
+<details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-sub"><span class="compat-behavior">Cold production clients may invoke the update fn first with speculative <code>null</code> and then with the current seeded value; the always-warm in-process sandbox invokes it once with the current value, so abort-if-missing aborts in production and commits in pyric (RT-16)</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-runtransaction-current-value-arg.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-runtransaction-current-value-arg</code></a> captures two seeded-path production invocations (<code>null</code>, then current); <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-transactions.test.ts#L52" target="_blank" rel="noopener noreferrer"><code>unit:modular/oracle-conformance-transactions.test.ts</code></a> pins the sandbox's single current-value invocation. The separate warm-client observation matches the sandbox but does not erase the cold-client contract. <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set</code></a> key <code>abortIfMissing</code>: production aborts, pyric commits (RT-16). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/transaction.test.ts#L94" target="_blank" rel="noopener noreferrer"><code>transaction.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-transaction-then-set.test.ts</code></a>)</div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-sub"><span class="compat-behavior">**Divergence:** two ordinary concurrent <code>runTransaction</code> calls are serialized by the in-process backend, so their update functions are not retried with Firebase's captured contention counts. A synchronous re-entrant conflicting write does trigger a deterministic retry.</span></span></span></summary>
 <div class="compat-evidence"><div class="compat-note">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-concurrent-transforms.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-concurrent-transforms</code></a> captures invocation counts [2, 3]; <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/transaction-contention-cdd.test.ts#L12" target="_blank" rel="noopener noreferrer"><code>unit:modular/transaction-contention-cdd.test.ts</code></a> pins the sandbox's [1, 1] ordinary-concurrency boundary and separately covers its deterministic re-entrant retry seam.</div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-sub"><span class="compat-behavior">**Divergence (pending fix):** clean <code>goOffline</code>, app deletion, playground <code>pagehide</code>, and best-effort MessagePort close drain queued operations, but unannounced total renderer/process loss is not guaranteed by the in-memory sandbox</span></span></span></summary>
@@ -954,12 +1005,31 @@ Known differences between Pyric and production Firebase. Each remains tracked as
 <div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/fruit-aliases.test.ts#L20" target="_blank" rel="noopener noreferrer"><code>unit:modular/fruit-aliases.test.ts</code></a></div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-sub"><span class="compat-behavior"><code>enableLogging(logger?, persistent?)</code> — accepted no-op: the sandbox has no modular-SDK-style logger to wire a level/sink into (it uses host-level <code>console</code> logging directly, matching <code>pyric/firestore</code>'s <code>setLogLevel</code>). Accepted so init code that calls it compiles + runs</span></span></span></summary>
 <div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/fruit-aliases.test.ts#L21" target="_blank" rel="noopener noreferrer"><code>unit:modular/fruit-aliases.test.ts</code></a></div></div></details>
-<details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><span class="compat-sub"><span class="compat-behavior">**Divergence:** <code>refFromURL(db, url)</code> matches Firebase's path parsing, query ignoring, FTP-to-database normalization, and fragment rejection, but the single-database sandbox does not validate the URL host/namespace against the handle; Firebase rejects a mismatched host while the sandbox uses its path.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-note">Oracle <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-reference-shape-url.json" target="_blank" rel="noopener noreferrer"><code>rtdb-modular-reference-shape-url</code></a> captures accepted FTP/query URLs and rejected fragments, malformed URLs, and host mismatches; <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/modular/oracle-conformance-reference-writes.test.ts#L33" target="_blank" rel="noopener noreferrer"><code>unit:modular/oracle-conformance-reference-writes.test.ts</code></a> pins the conforming validations plus both sides of the host divergence.</div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getDatabase(app) in a registered server process</code><span class="compat-sub"><span class="compat-behavior">Under a remote register activation on the Node host, <code>firebase/database</code> in a server process reads and writes the host's data under its rules as the process's signed-in user: a write the rules deny for that user fails with <code>PERMISSION_DENIED</code>, <code>.info/connected</code> follows the process's connection, and an <code>onDisconnect</code> write runs when that connection ends. From its first RTDB call on an instance the process stays up until <code>goOffline()</code> on that instance or <code>deleteApp()</code>, as <code>@firebase/database</code> keeps a Node process up. When the host is not the Node host, every call fails with <code>failed-precondition</code> and a message naming the Node host (<code>pyric sandbox --hosted</code> or <code>pyric({ hosted: true })</code>); when no host is found, with the discovery error <code>pyric-admin</code> gets. No call falls back to an in-process sandbox.</span></span></span></summary>
-<div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/client-sdk-under-register</code> runs the client SDKs under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server, reads back with <code>firebase-admin</code> and a page, and asserts a write and a read, a denied write to another user's path, <code>.info/connected</code>, an <code>onDisconnect</code> that ran after the process exited, and that a process stays up after a write until <code>goOffline()</code>. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-realm.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-realm.test.ts</code></a> pins when the process is held. CDD assertion <code>rtdb-modular#RS1</code> pins the sandbox side: rules evaluate per signed-in session, and a registry bound to the refusal opens no database handle. On main (942cb175) it failed: the calls ran against a private in-process sandbox, so an upload returned a <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>data:</code></a> URL and firebase-admin read nothing they wrote. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/register/node-origin.test.ts</code></a> runs the served surfaces under a Node origin whose host is not the Node host, or cannot be found, and asserts every call fails, <code>useWorker</code> stays true, the served app entry's placeholder sandbox stays empty, and a <code>pyric/*</code> mirror resolved from the app refuses. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L80" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins the mapping per activation value.. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/register-child.test.ts#L138" target="_blank" rel="noopener noreferrer"><code>register-child.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div></details>
+<div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/client-sdk-under-register</code> runs the client SDKs under <code>node --import @pyric/cli/register</code> against a hosted Vite dev server, reads back with <code>firebase-admin</code> and a page, and asserts a write and a read, a denied write to another user's path, <code>.info/connected</code>, an <code>onDisconnect</code> that ran after the process exited, and that a process stays up after a write until <code>goOffline()</code>. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-realm.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>node-realm.test.ts</code></a> pins when the process is held. CDD assertion <code>rtdb-modular#RS1</code> pins the sandbox side: rules evaluate per signed-in session, and a registry bound to the refusal opens no database handle. On main (942cb175) it failed: the calls ran against a private in-process sandbox, so an upload returned a <a href="https://github.com/davideast/pyric/blob/main/test/apps/client-sdk-under-register/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>data:</code></a> URL and firebase-admin read nothing they wrote. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-origin.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>packages/cli/test/register/node-origin.test.ts</code></a> runs the served surfaces under a Node origin whose host is not the Node host, or cannot be found, and asserts every call fails, <code>useWorker</code> stays true, the served app entry's placeholder sandbox stays empty, and a <code>pyric/*</code> mirror resolved from the app refuses. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/mapping.test.ts#L78" target="_blank" rel="noopener noreferrer"><code>mapping.test.ts</code></a> pins the mapping per activation value.. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/register-child.test.ts#L138" target="_blank" rel="noopener noreferrer"><code>register-child.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">getDatabase(app) in a server-rendered module under vite dev</code><span class="compat-sub"><span class="compat-behavior">On a hosted dev server, <code>firebase/database</code> in a server-rendered module reads and writes the host's data under its rules as the SSR session's user: a write the rules deny for that user fails with <code>PERMISSION_DENIED</code>. <code>ssrLoadModule</code>, the environment runner and every <code>ssr.noExternal</code> setting share one app and one session. Closing the dev server lets the process go, so a process that created the server through Vite's API ends on its own, though RTDB would otherwise hold it until <code>goOffline()</code>. On a SharedWorker dev server every call fails with <code>failed-precondition</code> and a message naming <code>pyric({ hosted: true })</code>. No call reaches production or an in-process sandbox.</span></span></span></summary>
 <div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/vite-ssr-client-sdk</code> writes and reads the SSR user's own path, is denied another user's, reads the writes back with <code>firebase-admin</code> in SSR and in a process on the host, repeats it with <code>ssr.noExternal</code> <code>['firebase']</code> and <code>true</code>, refuses on a SharedWorker dev server, and creates a dev server through Vite's API that ends on its own after SSR used RTDB. On main (ba2c0bf0a) the scenario failed: SSR sign-in rejected with <code>auth/network-request-failed</code> from the network guard, and the RTDB, Firestore and Storage writes did not settle, because the imports loaded the real SDK. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/vite-module-swap.test.ts#L4" target="_blank" rel="noopener noreferrer"><code>vite-module-swap.test.ts</code></a> pins the routing per specifier, AI mode and environment (Vite 5's <code>ssr</code> option, a runnable environment, a non-runnable one), <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/vite-ssr-activation.test.ts#L1" target="_blank" rel="noopener noreferrer"><code>vite-ssr-activation.test.ts</code></a> the host, the restart hand-over and the SharedWorker refusal, and <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/vite-plugin-firestore.test.ts#L14" target="_blank" rel="noopener noreferrer"><code>vite-plugin-firestore.test.ts</code></a> runs Vite with <code>firebase</code> installed, so it takes the externalized path. CDD assertion <code>rtdb-modular#RS2</code> pins the sandbox side. <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/register/node-realm.test.ts#L1" target="_blank" rel="noopener noreferrer"><code>node-realm.test.ts</code></a> pins the release when the in-process host ends. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/vite-ssr-client-sdk/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div></details>
 <details class="compat-row" data-status="diverged"><summary class="compat-line"><span class="compat-dot" data-status="diverged" role="img" aria-label="Diverged (documented)" title="Diverged (documented)"></span><span class="compat-main"><code class="compat-api">firebase-admin/database in a server-rendered module under vite dev</code><span class="compat-sub"><span class="compat-behavior">On a hosted dev server, <code>firebase-admin</code> in a server-rendered module resolves to <code>pyric-admin</code> bound to the dev server's host, as a <code>firebase-admin</code> process on the host is: a bare <code>initializeApp()</code> connects to it, reads bypass the rules, and the writes of browsers and SSR sessions are visible. On a SharedWorker dev server its first call fails with <code>failed-precondition</code> and a message naming <code>pyric({ hosted: true })</code>, without dialing.</span></span></span></summary>
 <div class="compat-evidence"><div class="compat-note">App scenario <code>test/apps/vite-ssr-client-sdk</code> reads a path the rules let only the SSR user read, and a browser's write, with <code>firebase-admin</code> in SSR through both loaders and with each externalization setting, and gets the refusal on a SharedWorker dev server. On main (ba2c0bf0a) <code>firebase-admin</code> in SSR was the real SDK. <a href="https://github.com/davideast/pyric/blob/main/packages/pyric-admin/test/app/ambient-init.test.ts#L128" target="_blank" rel="noopener noreferrer"><code>ambient-init.test.ts</code></a> pins that a bare <code>initializeApp()</code> binds the in-process activation's sandbox when PYRIC_SANDBOX is unset, and that the variable wins when set. CDD assertion <code>rtdb-modular#RS3</code> pins the sandbox side. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/test/apps/vite-ssr-client-sdk/scenario.ts#L1" target="_blank" rel="noopener noreferrer"><code>scenario.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/lifecycle-and-identity.test.ts#L28" target="_blank" rel="noopener noreferrer"><code>lifecycle-and-identity.test.ts</code></a>)</div></div></details>
 </div>
+
+### Bugs
+
+Behavior that should match production Firebase but currently does not.
+
+<div class="compat-list">
+<details class="compat-row" data-status="bug"><summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">runTransaction(ref, fn) followed at once by set(ref, value)</code><span class="compat-sub"><span class="compat-behavior">On a cold production client the set overtakes the transaction, which rejects with Error('set'); pyric commits it. A warm client commits in both. RT-15.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set</code></a> keys <code>cold</code> and <code>warm</code> (both clients were cold) and <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set-warm.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set-warm</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-transaction-then-set.test.ts</code></a>)</div></div></details>
+<details class="compat-row" data-status="bug"><summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">runTransaction then set on the served planes</code><span class="compat-sub"><span class="compat-behavior">On the served planes the transaction reruns on the set's value and commits on top (101); production keeps the set's 100. RP-4.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set</code></a> and <a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-transaction-then-set-warm.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-transaction-then-set-warm</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/oracle-captures/rtdb-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>rtdb-transaction-then-set.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-transaction-then-set.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-transaction-then-set.test.ts</code></a>)</div></div></details>
+<details class="compat-row" data-status="bug"><summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">Event order for one remote multi-path update</code><span class="compat-sub"><span class="compat-behavior">Production fires deeper paths first and child events (removed, added, moved, changed) before value; the in-page sandbox fires value first, parents first, in registration order. RT-2, RT-3.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a> key <code>log</code>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>)</div></div></details>
+<details class="compat-row" data-status="bug"><summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">setPriority(ref) and child_changed</code><span class="compat-sub"><span class="compat-behavior">Production fires child_changed on the parent's listeners for a priority-only change. Pyric fires none, on every plane. RT-4.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a> (<code>R changed a</code> and <code>Q changed a</code> after setPriority). (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/oracle-captures/rtdb-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>rtdb-remote-update-event-order.test.ts</code></a>)</div></div></details>
+<details class="compat-row" data-status="bug"><summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">child_moved on a query with no orderBy</code><span class="compat-sub"><span class="compat-behavior">Production fires child_moved for a priority change on a query with no orderBy (<code>L moved a</code>). The in-page sandbox fires none; the served planes match production. RT-5, part of #138.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>)</div></div></details>
+<details class="compat-row" data-status="bug"><summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">Event order for one remote update on the served planes</code><span class="compat-sub"><span class="compat-behavior">Production delivers one write's events deepest path first, child events before value. On the SharedWorker and Node host planes they arrive listener by listener in registration order. RP-5.</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-remote-update-event-order.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-remote-update-event-order</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/cli/test/serve/worker/oracle-captures/rtdb-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>rtdb-remote-update-event-order.test.ts</code></a>, <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-remote-update-event-order.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-remote-update-event-order.test.ts</code></a>)</div></div></details>
+<details class="compat-row" data-status="bug"><summary class="compat-line"><span class="compat-dot" data-status="bug" role="img" aria-label="Bug" title="Bug"></span><span class="compat-main"><code class="compat-api">onValue(query) and a grandchild's priority change</code><span class="compat-sub"><span class="compat-behavior">Production fires a value event on every listener above a grandchild whose priority changes, orderByKey queries included. Pyric's query listeners miss it on every plane, though plain ref listeners get it. RP-8 (differential seed 7395).</span></span></span></summary>
+<div class="compat-evidence"><div class="compat-note"><a href="https://github.com/davideast/pyric/blob/main/packages/conformance/observations/rtdb-modular/rtdb-modular-grandchild-priority-query-value.json" target="_blank" rel="noopener noreferrer"><code>oracle:rtdb-modular-grandchild-priority-query-value</code></a>. (Structured evidence: <a href="https://github.com/davideast/pyric/blob/main/packages/pyric/test/database/cdd/capture-grandchild-priority-query-value.test.ts#L2" target="_blank" rel="noopener noreferrer"><code>capture-grandchild-priority-query-value.test.ts</code></a>)</div></div></details>
+</div>