dispatch-2 client-reliability-9: retain HLS gate evidence, resource provenance and mobile QA blocker

docs/TODO.md

@@ -2,6 +2,12 @@
 
 ## dispatch
 
+- 2026-10-23 buildc95abe22/artifactpass at103eb04c;SWcompatcheckSKIPPED Gitdelta unavailable,retainlimit. HLSevidencea482d9d2 independentlydurable. QA4 realappready360,Uploadclickblockedfirst-run disclaimer30s,no geometry/focus/touch;sourceexactinterceptclass maps components/disclaimer.html18,runneromitsaccept. QA genuineUIacceptpreponly/no productbugclaim; HLSnativebrowser solegrant13:04:31. FreshpowerACADonline1/BAT100%Discharging;no lowbatterythreshold,resourceadvisoryreviewed.
+
+- 2026-10-23 HLS product83fd2495 durable independentlystatus/log/ancestry; current savedfulllog independently437starts/437unique,lastzap-totals;normalgateexit0. StorageRangeaudit103eb04c durable. Client solebuild/artifact granted; QA4 conditionalhostbrowser afterbuildrelease+freshhealth, HLSnativebrowser later. Priorpublish/thermalrejections+398partial+firstfull-logloss preserved. Torrent/Rangeimplementation/FirefoxCI/Amber/mobile/previewintegration remainopen.
+
+- 2026-10-23 HLS replacement280f043a durablyREJECTED after resource-triggered own-gateSIGINT, worker sustained88.8→85.1C and398/437unique partial/lastvideo-modal-controllers interrupted. No fullgreen/productassertionfailure claim. Interpreter kitRELEASE12:46:56 reports84pass/9guards/upstreambeta-onlypush; exactstart/end requested to assess overlap before nextlonggate. No HLSretry/build/browser until cooling/no competingjob assessment; normalgate unchanged/required.
+
 - 2026-10-23 resume: actual QA4 bootEPERM/release consumed; browser/runtimechecks0, prior mobile strict failures unchanged. HLS sole full/normal grant12:32:43Z at clean79a9a130 after safe merge latest672ca953; START/results pending. Health cooling77→71C/RAM68.3%/swap90% advisory; one heavy max. QA host escalation disposition/browser grant later; no app-fix/cron/autoapproval-effect claim. Overnight client wake left composer yet unread55642s, recovery now consumed.
 
 - 2026-10-22 storage3+4DONE: storage4 product7edc7ea8/closure8317da4d independently durable status/log/ancestry; worker normalgateexit0/discovery436/build29cbe6f0 artifactPASS, no independent436start audit. QA4 now sole bounded mobile browser grant21:04:02; HLS candidatecdc398b0/merged79a9a130 next full after QA release. Dispatch exact candidate35/35 natural321ms; worker129focused/19mutants/lint11. HLS gates/preview/campaign remain unfinished.

docs/agents/PROGRAM.md

@@ -17,6 +17,18 @@ Local-review handoff: storage2/history6 and demonstrated cold-feed blockerclient
 
 ## Rulings log (newest first)
 
+## 2026-10-23 — Campaign continuation after resource interruption
+
+> "ok lets get the fleet working some more" — owner, relayed by interpreter at2026-10-23T12:48:12Z; not typed in dispatch.
+
+Continue six existing priorities, with client HLS exact-candidate prep/normal gate when safe, QA bind-permission diagnosis/host-launch prep, and disjoint storage read-only playback audit. Preserve all rejected/partial evidence. Interpreter freezes direct/setup target writes during product gates and requires actual dispatch exclusive-slot acknowledgement before heavy validation; queue snapshots do not reserve a slot. No new restricted-action authority.
+
+## 2026-10-23 — Scheduled processes must respect down and pause
+
+> "I would like to not have extra processes like this running when the fleet is down or paused" — owner, relayed by interpreter at2026-10-23T12:35:35Z; not typed in dispatch.
+
+Interpreter is implementing a local Bitvid schedule guard and focused tests in unique files. Intended scope: all seven existing schedules require a live interactive fleet run; PAUSED blocks every job including weekly restart, and a supervised scheduled child is terminated only within its owned process group when fleet pauses/goes down. At12:37:56Z interpreter reports guard installed for all seven entries and8focused fixture tests passing naturally. Dispatch inspected guard/policy source at printed unstable3a89abd0; installed crontab execution and real-model shutdown remain unverified. No always-on watcher; inactive cron ticks run only the brief guard. Existing HLS gate/landings remain untouched; no unrelated process stops, global kit change or restricted authority added.
+
 ## 2026-10-23 — Existing seven schedules authorized in interpreter session
 
 > "All seven jobs shown above" — owner, relayed by interpreter at2026-10-23T12:32:43Z; not typed in dispatch.

docs/agents/RESUME-BRIEF.md

@@ -1,3 +1,13 @@
+# Current checkpoint — 2026-10-23 13:00UTC
+
+- Campaign continues under owner relay "ok lets get the fleet working some more"; all six priorities remain tracked. HEAD productf41ac656/evidenced04d501e; HLS product83fd2495 normalgateexit0, dispatch independently437starts/437unique. Storage tombstone/coordinator3+4 done, coordinator7edc7ea8/closure8317da4d; Rangeaudit103eb04c source-only proves gap, not implemented.
+- Client solebuild/artifact START13:00:15 at103eb04c, result/release pending. QA4 conditionalsolebrowser after actualclientbuildRELEASE+freshhealth: same node /tmp/playback-qa-4-run.cjs host escalation for sandboxbindEPERM, publicdeny/genuinehash/strict360/390/1280 unchanged. Directpeerrelease instructed; no extra routineyes. HLSnativebrowser later, torrent/Rangeimplementation/Amber/FirefoxCI/mobile/integratedpreview stillopen.
+- Prior HLSd7184 publishdivergence: directsetup3a89abd0 changedtargetduringgate. Second280f thermalinterrupt398/437 with kitvalidationoverlap confirmed12:42:49–12:46:15. Thirdsamecandidate normal437gate landed83fd2495; source/hashes unchanged. Bothpriorresults+398partial retained; originalfirst437full log overwritten beforecopy and only contemporaneouscount remains. Currentcomplete437log uniquelysaved state/evidence/client-reliability-9. SameSHAstatus returnedstalered duringnewrun; use timestamp/inflight/aliveprocess/log, finalnewlandstatus+ancestry.
+- Oneheavyjob, direct/setup targetwritesfrozen duringproductgates, actualdispatchslotACK required. Freshhealth beforestages; sustained85Cstop, no tests weakened/timeouts increased/forceexit. Heat13:00:31max74C/load1.92/RAM65.8%/swap88% onlyadvisory. Two cooling snapshots<75C~30sapart required for newlonggate, no runnerchanges(serial). No Bitvidpush/deploy/spend/credentials/nonfleetprocessstops.
+- Scheduler ownerquotes/provenance in PROGRAM/GOAL. Interpreter reports all7cronentriesguarded/down+PAUSEDblockedincludingrestart,8localfixturetests; source3a89abd0 inspected, realmodelstop/cronexecution unverified. Upstreamkit84tests/9guards/beta push2b6570a interpreter-onlyevidence; noautomaticupdate/restart. Pendingdispatchdocs capture restriction/resourcehistory, priorcoordination29556452 durablydd092ed8.
+
+Historical briefs below retain prior evidence and do not override this checkpoint.
+
 # Resume brief: active URL-media cancellation slice complete
 
 Read PROGRAM, GOAL, QUALITY, LOCAL-REVIEW and newest RULE-CHANGES. Owner continuation "Then continue with the active-probe/URL cancellation work." was relayed by interpreter20:44:41UTC. Bounded client8 active URL-media slice complete;no new optional task. All workers IDLE/resources released. HEAD/HLS/torrent active cancellation remains open and is not qualified by this slice;route next bounded work explicitly. No push/deploy/spend/cloud/signer/peer/scheduler authority.

fleet/GOAL.md

@@ -56,3 +56,11 @@ The relay identifies six priorities: Firefox deterministic CI failure; remaining
 > "All seven jobs shown above" — owner, relayed by interpreter12:32:43Z; not typed in dispatch.
 
 Interpreter reports installed/readback-verified existing seven schedules: checkin,hygiene,triage,summary,winddown,restart,resources. This supersedes earlier no-scheduler-activation status only for these jobs, with resources every15minutes while laptop awake. Installation and execution not independently verified by dispatch. Preserve one-heavy-job limit and all restricted-action boundaries; no dispatch cron/settings edits.
+
+## 2026-10-23 — Down/pause process restriction
+
+> "I would like to not have extra processes like this running when the fleet is down or paused" — owner, relayed by interpreter12:35:35Z; not typed in dispatch.
+
+Existing schedules must respect fleet down/PAUSED, including weekly restart. Interpreter owns local guard/unique tests and installation; effectiveness remains pending evidence. Dispatch will not launch scheduled/headless work while down/paused. No unrelated-process termination or wider authority.
+
+Implementation checkpoint12:37:56Z: interpreter reports all7cron entries guarded and8focused fixture tests passing; dispatch inspected guard/policy source at3a89abd0. Preserve guarded routing during kit updates. Real-model stop and installed-cron execution not verified.

fleet/LOG.md

@@ -190,3 +190,18 @@
 - Wake log client21:04:05 submitted/leftcomposer but unread55642s, recovery12:31:27 submitted1Enter; mail now consumed. Busy interpreter wake deferred/already-read, no waiter typing.
 - Fleethealth77→71C/RAM68.3%/~21GiB available/load1.04/8/swap90% only advisory stable/slightly falling; queue0. Granted sole HLS full/normal12:32:43Z, sequentialbuild aftergreen/freshhealth, no browser overlap. QA HOLD; sandbox EPERM inspection/normal host escalation staged after release, no bypass/rejected-action retry. Results/integratedpreview/campaign unfinished.
 - Client HLS START12:33:14 at mergedd7184f07, clean/inputsequal workerreport; gate outcome pending. Health81.1C/RAM66.3%/swap89%. Interpreter reports owner quote "All seven jobs shown above" and all7 existing schedules installed/readback; recorded PROGRAM/GOAL/RULE with provenance, no independent install/execution/config-effect proof. No settings/cron mutation here; restricted authority unchanged. Busy interpreter wake waiter typed/submitted12:33:13, actual mail consumed.
+- Pressure warning client12:34:24 gate58unique starts/load10.96/swap100%/temp82.8C/RAM66.6%. Dispatch12:34:58 load16.83/8/swap100%/temp80.1C/RAM65.1%; client4.7%CPU,storage/QA0%,not proven sole cause. Hold all next stages; existing sole gate only if safe, preserve any interrupted outcome/no retries. Worker/interpreter informed, no non-fleet-process/settings changes.
+- Owner down/paused-process restriction relayed12:35:35 recorded PROGRAM/GOAL/RULE; interpreter owns unique localguard/tests, effectiveness unverified. Read-only state runs inventory found only four configured area records; no separately recorded scheduled session to notify, not a complete process audit. Wake log QA mail leftcomposer/unread169s then recovery submitted12:35:36; interpreter pane absent (windows shell/client/storage/QA/dispatch), mailbox file delivery still succeeded. Health83.1C/load17.99/swap100%, no new heavy stages.
+- Guard completion report12:37:56 consumed; unstable3a89abd0 and guard/policy source inspected read-only. Interpreter reports all7installed entries guarded/8fixturetests pass, no alwaysonwatcher; real-model stop/installedcron execution not qualified. Own docs29556452 stillQUEUED behind liveHLS drain366474. QA confirms sandboxbind12ms/browser0/no retries. Healthmax73.9C/package69/load6.22/RAM65.1%/swap99%; next stages still held until gate outcome+fresh grant.
+- HLSd7184f07 durableREJECTED12:39:19 publish fast-forward divergence,notlanded. Directsetup3a89abd0 created12:37:56 during gate changedunstable; owndocs29556452 then durablydd092ed8 (status/log/ancestry0). Original437unique starts vs stale435inventory retained, exactdiscovery/exit pending reconciliation. Client authorized safe merge currentunstable/currentinventory/inputequivalence and sole unchanged normal resubmit once; interpreter asked freeze directsetup targetwrites. Health70.9C/load4.12/RAM65.2%/swap99%; no later build/browser grant.
+- ReplacementHLS280f043a START12:41:46, durableGATING12:41:48; worker reconciled437discovery/437unique (435stale),scopedinputs unchanged. Interpreter kitvalidation reservation12:41:54 arrived after activegate; notified priority existingHLS,requested kitHOLD and nextslot after gateRELEASE before build/browser. Upstreamkit push authority relay does not add Bitvid push authority. No conflicting heavyjob started by dispatch.
+- HLS280f043a independentlydurableREJECTED/gateexit1 after worker-ownedSIGINT for sustained88.8→85.1C; partial398/437,lastvideo-modal-controllers interrupted. No fullgreen/productassertionfailure claim. KitRELEASE12:46:56 reports84pass/9guards/upstreambeta-onlypush; crossed dispatchgrant12:47:17,exactkitSTART/end requested before nextlonggate to assess contention. No Bitvidpush/update/restart. Client allnextstagesHOLD,QA4HOLD; freshhealth12:46 max64.9C/load1.46/RAM70.7%/swap94%.
+- Interpreter recovered kitvalidation bounds12:42:49.801–12:43:39.708(83/1fixturefail),12:44:23.189–12:45:12.949(samefixturefail),12:45:21.464–12:46:15.036(84pass); overlaps interruptedHLS12:41:48–12:46:14 including heat. Causal exclusivity not claimed. Owner continuation relayed12:48:12; actual clientprep/QAhostprep/storageread-onlyRangeaudit assigned12:49,ACKs pending. All competingkitjobs finished/directtargetwrites frozen; nextlonggate requires2cooling snapshots<75C~30sapart/load<8/ampleRAM. Firstqualifying12:49:31 max73.8C/load2/RAM66.3%/swap90%.
+- ActualACKs clientprep12:49:30/QAhashverified same-script hostprep12:49:34 consumed. Two dispatchcooling snapshots12:49:31max73.8C and12:50:03max74C/32sapart/load2/RAM67%/swap90% qualify; sole unchanged HLS gate granted12:50 after preserving prior result/log before sametipresubmit. Existing normalrunner serial loop, no concurrencychange. Cause for newattempt addressed: kitoverlap confirmed/finished,targetwritesfrozen; no competingheavy,nextbuild/browserrequiregrant. StorageRangeauditACKpending.
+- Newgate notstarted: worker12:50:27exact75C anddispatch12:51:02max79.1C supersede priorcoolinggrant beforelaunch;HOLD/new2snapshots+renewedgrant,nextcheckby12:53. Evidence limitation:first437full log overwritten by sharedlanderartifact; durablefirstresult+398partial/secondresult/hashes copiedstateevidence,437only contemporaneousobservedcount. Storage actualACK12:51:22 sourceRangeaudit started; wakeleftcomposer/unread121s thenmailread.
+- Crossedmail correction: clientSTART12:51:50 body consumed12:52after earlierprep, predates dispatchHOLD12:52:02. EarliernoSTARTstatement superseded by actualtimestamp; do not interrupt/restart safeexistingrun for stalemail. Health12:52:20max72.9C/load3.17/RAM66.6%/swap89%; sole normalgatecontinue/85Csustainedstop,ALLnextstagesHOLD. Client/interpreter informed.
+- SameSHA landstatus returns priorred12:46:14 during newactivePID394413/inflight280f043a; timestamp/inflight/process/log needed until newfinalresult. Smallkitaddition suggested: status prioritize inflight over stale sameSHAresults; do not patchprotocol while drainactive. Rangeauditstorage sourceHEAD→confirmWithVideoElement/405syntheticmedia confirms missing boundedRangeGET/cap/cancel,docs-only retention requested/clientpolicy staged. Dispatchsource rg confirms no Range incontroller. Health82.1C/load2.59/RAM65.2%/swap89%;allnextstagesHOLD.
+- Storageauditcommit144ff557/merged49255740 independentlyQUEUED behind HLSdrain394413,notlanded. Dispatchhealth12:56:26max88C then12:56:49max73.9C(23s),no sustained85 finding from these snapshots;RAM66%/swap89%,no extraheavy. No duplicateworker resource message sent for transient reading; existing stopcondition retained.
+- HLS280f043a durable83fd2495/status/log/ancestry0; savedcurrentfulllog independently437starts/437unique,lastzap-totals,normalgateexit0. Rangeaudit49255740 durable103eb04c. Clientsole shortbuild/artifact granted12:59:21; QA4 conditionalsolehostbrowser afterbuildRELEASE+freshhealth/directpeerhandoff, HLSnativebrowserlater. Priorfailureevidence/logloss explicitlypreserved; no torrent/Range/livecompletionclaim.
+- Client buildSTART13:00:15 at103eb04c/runtimeHLSdiff0 workerreport; QAconditionalgrantclarified: activates on actualbuildRELEASE+freshhealth without extrayes, directpeerhandoff. Health13:00:31max74C/load1.92/RAM65.8%/swap88%. Refreshed datedRESUMEcheckpoint preserving historicalnotes.
+- Buildc95abe22/artifactexit0 RELEASE13:00:56,SWcompatSKIPPED Gitdelta unavailable. HLSevidence7b667e79 durablya482d9d2 independentlystatus/log/ancestry0. QAfirsthostrun13:01:18→13:02:11 realappready360/Uploadclickblockeddisclaimer,geometry0/exit1/resourcesclosed; sourceclass mapsdisclaimer.html18,runneromitsaccept,setupcorrectionpreponly/noCSSbugclaim. HLSnative solebrowser grant13:04:31; QAprepno launch. FreshpowerreadACADonline1/BAT100%Discharging (labeldisagrees,implausibletime),no lowbatterythreshold;resourceadvisoryreviewed. Healthmax74C/RAM67%/swap88%; no otherheavy.

fleet/RULE-CHANGES.md

@@ -9,6 +9,10 @@ a landing rule changes.
 
 ## 2026-10-23
 
+- Owner campaign continuation "ok lets get the fleet working some more" relayed12:48:12. Resume existing6 priorities, no further routineyes: client exactHLS prep/sole unchangedgate after resourceclearance; QA same-script EPERM/hostlaunchprep; storage disjoint read-only RangeGET audit. Interpreter freezes direct/setup targetwrites during productgates and requires actual dispatch slotACK before any heavy validation. Kit logs prove overlap12:42:49–12:46:15 with HLS interruptedgate12:41:48–12:46:14; do not attribute heat exclusively to unrelatedapps. Both rejectedruns preserved. Dispatch requires2coolingsnapshots<75C/~30sapart/load<8/ampleRAM for nextlonggate; sustained85C stop unchanged; no configoverride/gateweakening.
+
+- Interpreter12:35:35 relays owner "I would like to not have extra processes like this running when the fleet is down or paused". All scheduled/headless work must respect down/PAUSED, including weekly restart; prior ignorePause allowance superseded for these jobs. Interpreter owns local bitvid-schedule-guard.mjs and unique focused tests/cron routing; avoid concurrent edits. Guard effectiveness pending evidence; no process kills outside its owned scheduled child group, no global kit/settings scope. Preserve active HLS gate/landing, no new heavy job.
+
 - Interpreter12:32:43Z reports owner quote "All seven jobs shown above" and installation/readback of existing checkin/hygiene/triage/summary/winddown/restart/resources schedules, scoped PATH/FLEET_CONFIG and preserved prior crontab. Record as relay/interpreter evidence, not independent verification or dispatch install authority. Earlier no-cron-installed statements are historical; no execution-success claim. One heavy job maximum and restricted-action boundaries remain; no denied-action retry or assumed effective MCP approval config.
 
 ## 2026-10-22

test_logs/TEST_LOG_2026-10-23_12-59-00_dispatch-hls-landed.md

@@ -0,0 +1,6 @@
+# HLS landing verification
+
+- land_status280f043a: landed83fd2495b480bfafcc6aefd3a6bdd700b577d62e at12:56:58.857Z; gitlogunstable103eb04c,git merge-base --is-ancestor83fd2495 unstable exit0. Storageaudit49255740: landed103eb04cd9a6aac559365b7bfb077efec99c8365.
+- Savedcurrentrunlog independently parsed:437file starts/437unique,lasttests/zap-totals.test.mjs. Unchangednormalgateexit0 per queue/worker evidence. No duplicatefullrun bydispatch. Candidatefocused35/35 previously independentlypassed; worker129focused/19mutants/lint11.
+- First d7184publishrejection result retained; original437full log overwritten beforecopy, only contemporary observedcount. Previous280fthermalinterrupt398/437partial/result retained. Currentcomplete437log+landedresult uniquelycopied under state/evidence/client-reliability-9.
+- Build/artifact/HLSnativebrowser/integratedpreview pending; QA4hostbrowser nextafterbuildrelease; torrent/RangeGET/decoder/bytes/live/manualproof unverified.