doyle grant msg-id F3PFU3NQ (event b369d868, 4/4 parts, received ~2026-09-13T04:13:42Z)
GRANTED to liam, session 1212783f, SOLELY for hertz's forthcoming single D2 START.
Legs:
- ONE nonce-bound setup-plus-t1 leg, TCP 29470, isolated fp-home-d2.
- ONE separately nonce-bound owned-rule teardown leg, incl. cleanup after partial setup or abort.
Verify independently before each:
- run/request identity
- executable SHA256 = 72d309011415b419aabfdb0b4065df1183bfd0069a9f95b5779da62e43349b10
- capture hash = a0e7afbee4dce9f310ade9704c199b3b759715c06da7e033d286beb7cfda8c06 (the t1 capture script, presumably; confirm which file from request)
Execution:
- Setup via Bash/MSYS; t1 via the exercised PowerShell invocation (from request).
- Preserve setup exit and capture exit SEPARATELY; take ALL requested timestamps.
- One nonce = one execution; duplicates return receipt.
- Confirm request still active before starting.
- Leg in flight at expiry -> report immediately so cleanup can't race it.
Excluded: guard GUID on 5470 is READ-ONLY; no unrelated rules, policy changes, credential work, process kills.
Nothing executes before matching START + request arrive.
Prior grants (U7J5RUP3, TWZRJ2DL) closed; not inherited.
Ledger: scratchpad/nonce-ledger.txt
START hertz YFXUE42A ~04:14:33Z: run 20260913T041410Z, driver 2e3aec1b..., pid 26086 unelevated, evidence bundle-r5/fp-run/20260913T041410Z/. Activity deadline 04:19:10Z; cleanup bound +180s.
doyle ADBJV2ZV ~04:14:53Z: START confirmed = bound run. Printed 'never a real provider' ceiling is STALE (corrected capture paths exercised in read-only preflight): preserve output unchanged, ANNOTATE that distinction in receipt; don't edit running driver.
doyle GSSHPW44 ~04:19:13Z: decline accepted, setup nonce spent NOT STARTED, no receipt, never run later. Teardown dispatch HELD for review (serve lan --stop may start isolated daemon via ensure_running -> residue). liam HOLD ALL COMMANDS pending disposition.
hertz QG4WSBDX ~04:19Z: HOLD confirmed requester side; any teardown request for this run relayed as INFORMATION ONLY, not execute order. doyle ~04:19:41Z: teardown HELD, supersedes original teardown grant.
hertz 46PUMZ4I ~04:21:00Z: teardown request 002 nonce 20260913T041410Z-002-26086 written, INFO ONLY, NOT executed by liam (HELD). Driver wait 102s from 04:20:36Z -> unanswered = labelled gap. Residual pids 45944 (WINPID 111480, daemon.pid) + 22524 (WINPID 88060) alive, awaiting doyle decision. 5470 GUARD_UNCHANGED.
END hertz CIWMG6KF ~04:25:20Z: driver exit 1 (no verified setup receipt in budget). Contract NOT_SATISFIED; t3 real-provider pair-absent capture SOUND. Residual 45944 terminated by hertz (4-way identity match), 22524 exited with it; pinned-exe procs=0. Hertz defects: unconditional cleanup stop created daemon after declined setup; SUBJECT_EXE_PROBE false-negative; 172s of 300s budget spent in preflight. CLOSED by doyle 4AZU3ZOL ~04:25:39Z: all D2 grants closed, liam executed nothing.