---
name: ir15-test-liveness-oracle
description: IR-15 lane — PinnedProc authenticated test-side liveness oracle; the A/B returned 0/0 over 80 runs so the specimen stays unreproduced and the lane rests on source-level unreachability.
metadata: 
  node_type: memory
  type: project
  originSessionId: eff1f397-bc60-464a-b7cf-b0a5b20a148d
  modified: 2026-08-03T04:44:20.911Z
---

2026-08-03. Register entry **IR-15** (`REQ-TEST-LIVENESS-ORACLE-AUTHENTICATED`, stages impl+unit) — scope lives in `docs/INFRA-REGISTER.md`, **not** the board, so a greenlit-form check finds no issue number and that is correct.

**What it fixes:** a test that captures a pid and polls it to a verdict was asking `provably_gone`, which answers "is *a* process at this pid" — right for a pid just handed over, wrong for one captured seconds earlier, since the OS can recycle the number onto a stranger. `PinnedProc` (spt-procident) carries pid + birth stamp; `provably_gone` reads Absent⇒gone, Present(same)⇒not gone, Present(different)⇒gone, Present+unstamped⇒not gone, Unproven⇒not gone. **Polarity is load-bearing and doyle-ruled:** every uncertain arm errs toward NOT GONE, preserving can-only-false-RED, which is what same-sha-rerun authorization rests on. Converted sites: `daemon.rs` teardown test + `endpoint_lifecycle.rs` relay_pid. Product callers stay out — releases#120's lane.

**The A/B (doyle's), result 0/0.** Interleaved A,B by round (blocking by side confounds sha with wall-clock), n=20/side, at `bc58712` unpatched vs `184f2ac` patched. Phase A quiet: 20/0 both. Phase B under pid churn severe enough to wrap the allocator inside 400ms (two probe pids 400ms apart, delta −32744): 20/0 both. Churn *reached* the test — means rose 1.7×/1.3× — so the negative is real, not vacuous. Rule of three bounds the per-run rate at ≲7.5% per sha on this rig; that bound does not transfer to a golden runner mid-build-leg.

**So:** specimen NOT reproduced, cause unnamed. The lane is justified by source-level unreachability + first-sighting, never by a reproduction. Don't let that framing drift.

**Residue cost:** the 80 runs left 21 WT husk windows → [[wt-single-process-husk-cleanup]] and board **#131** (`detached_no_inherit_env` missing `CREATE_NO_WINDOW`; product caller `servicehost.rs`).

Related: [[pid-reuse-across-reboot]], [[is-this-red-mine-delta-test]], [[one-sample-is-not-a-negative]], [[golden-respin-test]].