storage-cors-3 dispatch-3: route reproduced buffer and service tombstone fixes

docs/TODO.md

@@ -2,6 +2,8 @@
 
 ## dispatch
 
+- 2026-10-22 storage3 independent7/3pass/4fail: buffer newer-version loss and service deleted snapshot/cache leakage routed separate small commits; coordinator stale render still open/read-only pending registered lifecycle evidence. QA3 app-less3pass not CI proof; genuine cached Buffer followup granted exclusive narrow browser.
+
 - 2026-10-22 resumed six-priority campaign: Firefox QA3, active cancellation client9, tombstones storage3 now; playback dispatch4, Amber dispatch5, mobile dispatch6 staged with acceptance criteria. See docs/agents/CAMPAIGN-2026-10-22.md. All six remain unfinished; old idle/quiet-hours hold superseded for this foreground scope. Final integrated checks/build/preview and live/manual disclosure outstanding.
 
 - Next bounded item requested by interpreter2026-10-21T02:40:06Z under continuing owner instruction: existing client read-only currentHEAD active HEAD-request last-owner abort reproduction/shared/rejoin controls;no product/test edits before evidence. HLS/torrent separate. Quiet-hours22:00–08:00 hold for new starts/messages;route next foreground checkpoint at/after08:00 local without another permission loop. No scheduler created.

docs/agents/CAMPAIGN-2026-10-22.md

@@ -21,3 +21,9 @@ Owner: "yeah lets get the fleet spun up and address all of these", relayed by in
 6. Verify required focused/lint/mutants and unchanged normal gates; land via queue, verify durable status + unstable ancestry before closing. Integrated build/artifact/local preview and final six-row status, honest live/manual blockers.
 
 No deploy/push/spend/production data/real-wallet/credential/live signer/cron authority. No retries, sleeps, force exits, weaker assertions or speculative fixes. No background monitoring claim. Read KNOWN_ISSUES before debugging; existing Firefox flakes and logout failure are baselines, not presumed causes of this CI failure.
+
+## 14:12UTC evidence/routing checkpoint
+
+QA released first browser14:11:17Z: original3 scenarios pass but app bootstrap failed because Buffer CDN was denied, so not CI reproduction. Next exclusive narrow Firefox diagnostic authorized only with pinned genuine cached Buffer and actual readiness, preserving assertions and isolated control; no broad/full/build.
+
+Storage3 dispatch-independent scratch on7369f1fe/runtime-equivalentc5b678f7:7scenarios/3pass/4fail/network0, naturalexit1/29.89ms. Service snapshot/persistent cache leaks original deleted version; old tombstone unconditionally removes newer live active version in buffer; overlapped coordinator older result renders deleted reference at renderVideoList boundary. Two smallest service/buffer fixes routed in separate commits with mutants/controls; coordinator remains open/read-only pending faithful registered lifecycle evidence. No DOM/production proof.

docs/agents/prompts/storage-cors.md

@@ -1,3 +1,11 @@
+## Implementation routing 2026-10-22 — storage-cors-3
+
+Dispatch independently reproduced all7 scratch scenarios using dispatch imports at7369f1fe (runtime diff0 vsc5b678f7):3pass/4fail, naturalexit1/29.89ms/network0. Temporary ownership ONLY js/nostr/videoEventBuffer.js and js/services/nostrService.js plus new uniquely named focused regression/integrity/evidence files. This supersedes investigation-only restriction for these two boundaries; existing client.js and app/feedCoordinator.js remain read-only.
+
+Separate commits: first buffer timestamp-safe deletion (recordTombstone already protects strictly newer active content; remove no valid newer version), then service snapshot/persistent eligibility + obsolete affected-record cleanup. Retain failed baseline and independently failing mutants for every new scenario. Do not invent root/address/author rules or broaden deletion across authors; use existing authoritative tombstone semantics and verified conversion path. Cover deletion-marker ID differing from original; late older tombstone against newer live; late older content; multiple versions/unrelated roots/authors; deleted/invalid persistent entries; empty-result persistence so deleted-only caches do not resurrect; warm/second-load/latest-consumer and stale-subscription controls. Preserve live cache/moderation/access/ordering and publication semantics. Report any preexisting identity weakness separately rather than opportunistic rewrite.
+
+Coordinator stale-refresh result remains OPEN: current scratch pauses actual feed engine decorator and calls actual coordinator, but is not full registered UI lifecycle proof. Gather faithful registered-feed/view/disposal overlap evidence only after first fixes; no coordinator/app edits yet. No tests/runner/helpers changes to bypass contract. If new test needs explicit registration, ask dispatch for narrow ownership. Run focused suites, failing restored mutants and lint; request serialized full gate before product submit; QA holds narrow Firefox browser slot. Normal gates/durable ancestry mandatory. No real signer/cloud/relay/deletion/credential operations.
+
 ## Current assignment 2026-10-22: storage-cors-3 — feed/view tombstone stale-refresh
 
 Supersedes old idle/storage2 and deferred3 scope below. Read dispatch campaign brief, PROGRAM/RULE-CHANGES/KNOWN_ISSUES and docs/nips before Nostr investigation. Inspect own worktree and safely fast-forward clean branch to unstable; preserve any unexpected work; report SHA, claim item3, send read/next-action. Read actual tombstone/deletion/cache/view lifecycle; reproduce delete ingest followed by stale refresh/late older event/view switch with synthetic offline events/controlled IO. Check unrelated live/newer valid content and existing deletion semantics; do not invent new policy. Source read/scratch/unique evidence/backlog only; NO product/committed test edits until demonstrated defect and precise ownership routing. App/feed/services/Nostr shared modules remain read-only for now. No real signer/relay/cloud/credentials/delete; no browser/build/full suite/normal product submission yet, QA owns initial expensive/browser slot. Focused offline checks permitted, env -u NODE_TEST_CONTEXT. Report path and strict failed/control counts or already-fixed evidence, proposed smallest files/retained regression and remaining limits. No optional new storage work after this slice without campaign routing.

fleet/LOG.md

@@ -161,3 +161,8 @@
 - Inspected all6 worktrees: status0/clean, HEAD-only0 each; unstable fb54cea3, queue0. Client7/dispatch7/QA18/storage18 commits behind; main/lander current. Dispatch safely ff-only to unstable (initial sandbox Git metadata read-only, approved host retry exit0); workers synchronize own branches before work.
 - Initial assignments client9 HEAD-first cancellation, QA3 Firefox CI diagnosis, storage3 tombstone stale-refresh; source/scratch evidence only. QA initial exclusive narrow browser/expensive slot; focused offline others. Playback/Amber/mobile acceptance-scoped and staged, not dropped. Historical432 gate not rerun; no fresh product verification yet.
 - Coordination c6022f21 durably landed c5b678f7; status/log/ancestry0. All3 explicit read/next-action ACKs consumed: storage14:08:34, QA14:08:41, client14:08:44UTC; all report safe ff/claim atc5b678f7. Actual fleet status4 alive/working/unread0 after consumption. No browser/full job at ACK; no diagnosed product defect or current blocker yet.
+
+## 2026-10-22 — Independent tombstone reproduction; Firefox fixture boundary
+
+- QA3 first controlled3/3 PASS excludes actual app bootstrap(Bufferdenied3); not CI repro/pass. Browserreleased14:11:17Z. Authorized pinned genuine cached Buffer scratch prep + one narrow app-ready Firefox/control diagnostic; no product/tests/config writes or broad suite.
+- Storage3 independently run env -u NODE_TEST_CONTEXT node /tmp/bitvid-dispatch-tombstone-audit.mjs at7369f1fe(runtime JS/tests/config diff0 vsc5b678f7):7tests,3pass/4fail,0network, naturalexit1/29.89ms. Deleted original persists/emits, reload briefly emits it, oldtombstone deletes strictly newer active, older refresh renders deleted reference after newer result. Buffer/service minimal fixes routed as separate commits with tests/mutants; coordinator open/read-only pending full registered-lifecycle fidelity. No browser/DOM or real-event signature qualification.

fleet/RULE-CHANGES.md

@@ -9,6 +9,8 @@ a landing rule changes.
 
 ## 2026-10-22
 
+- Storage3 independently reproduced by dispatch on runtime-equivalent7369f1fe: actual subscription/buffer/service/feed-engine/coordinator scratch7=3pass/4fail, naturalexit1/29.89ms/network0. Route storage3 implementation in separate small commits: first ONLY js/nostr/videoEventBuffer.js timestamp-safe active deletion + unique focused tests, then ONLY js/services/nostrService.js snapshot/persistent-cache deleted/invalid eligibility and affected-record cleanup + unique integration tests after buffer controls. Existing client.js tombstone/address/author semantics preserved; no root-only widened deletion. Temporary ownership overrides roster exclusion only for those modules/tests. Coordinator stale-render remains reproduced/open but app/feedCoordinator.js READ-ONLY until faithful registered-feed/lifecycle evidence and separate routing. Focused+mutants+lint now; full/normal product queue/browser via explicit slot. QA owns next narrow Firefox bootstrap diagnostic using pinned genuine cached Buffer; first app-less3pass is not CI reproduction. No gate/expectation weakening.
+
 - Owner six-priority resume relayed by interpreter14:02:34UTC and routine YES14:03:29UTC supersedes local-review/quiet-hours hold for this foreground campaign. Existing client9 active HEAD cancellation first (HLS/torrent separately tracked); QA3 Firefox deterministic CI run39536282396/job119013565277; storage3 tombstone stale-refresh. Investigation/source/scratch evidence only until reproduced defect and explicit implementation routing. QA owns next browser/expensive slot, must announce start/release; no full suite/normal product submission without slot. Client/storage focused offline checks only. Playback enhancements, Amber and mobile remain tracked/acceptance-scoped, not dropped. All worktrees inspected clean, no unlanded unique commits; each worker safely fast-forwards own branch before work, reports SHA. No app.js writer, new launch, test weakening, kit/scheduler or restricted external authority. See campaign brief; newer current assignments override archived prompt bodies.
 
 ## 2026-10-20

test_logs/TEST_LOG_2026-10-22_14-13-00_dispatch-tombstone.md

@@ -0,0 +1,5 @@
+- SHA7369f1feeb76eb03f7c6c45d6da52ab8353cc1c4 printed by git rev-parse HEAD; git diff c5b678f7 HEAD -- js tests config empty/runtime-equivalent.
+- env -u NODE_TEST_CONTEXT node /tmp/bitvid-dispatch-tombstone-audit.mjs: exit1 naturally,7tests/3pass/4fail/cancelled0/skipped0,29.894975ms,fixture network attempts0. Script copied from worker scratch with only absolute imports redirected to dispatch.
+- Actual client subscribeVideos/buffer/service/feed engine/coordinator; substituted transport, verifier, metadata and persistence IO only; synthetic unsigned events, localStorage real.
+- Fails subscription emits/persists original deleted:true, optimistic reload emits deleted original, oldtombstone removes newer active, stale decorator resolves after deletion and renders deleted reference. Controls:live/unrelated,delete+older absence,strictly newer after tombstone pass.
+- No browser DOM/full registered UI lifecycle, real signer/relay/cloud or production proof. No committed test/product edits by dispatch. Implementation routed buffer/service separately; coordinator remains open.