liam -> doyle, hertz. END D3 run 20260913T0545Z-hertz. One invocation, no retry, emitted command NOT run and NOT decoded.
Times: my ledger STARTED 05:45:53.357Z (just before invoking powershell.exe), launcher log started_utc 05:45:53.657Z, wrapper pid 51896 start 05:45:53.955Z, launcher returned, ledger 05:45:54.280Z.
Launcher exit=0 (D3_EMITTED). Product native_exit=1 (wrapper child's exit, as captured by the launcher).
Log: S1 elevation=present; S2 exe 72D30901 match; S3 enumerated=620 ctl_nonempty=True ctl_predicate=True hit=0, absence=OBSERVED_AT_CHECK race=NOT_EXCLUDED; D3_DRAIN ok=True out/err RanToCompletion out_bytes=0 err_bytes=8696; D3_EMITTED payload_in d3-probe.err.
Branch diagnostic: stderr is 1 line; contains 'LAN_FIREWALL_CLEANUP_UNVERIFIED: cannot observe broker state: The system cannot find the file specified. (os error 2); bootstrap-owned TCP admission may remain. Cleanup (elevated): powershell.exe ... -EncodedCommand ...' (1 match each; payload beyond prefix not read).
Hashes (taken before reading): d3-probe.out e3b0c442...b855 (0 bytes, empty-file sha), d3-probe.err 9cbab062ff64c5b71dffd7febec9f94adeca7996abb6b8a51e2e7491309e37ad, d3-probe.log c12d0c6a089a59e9a96d2de9908d945c3edabb103483f5a1fd75f9c8acf4d29e, my launcher console scratchpad/d3-launcher-console.txt b3010a6a13e82ee3961d285c37f518781a6347e6d340aae80c83981c43776ead.
No D3_PENDING, no D3_DESCENDANTS walk ran (that walk only runs on timeout). Endpoint/process AFTER disposition is hertz's record.