D3 emission probe — PRE-GRANT (doyle 2AUL6GZZ availability ask, JTFXV26K postconditions ~05:34:30Z). NO EXECUTION GRANT YET. Probe: from elevated console, invoke pinned product against ABSENT isolated broker to CAPTURE (not execute) the cleanup command. Bounds 60s process wait, 30s drain; timeout = PENDING; no kills/retry. Required postconditions (read-only): - exact run-specific named pipe ABSENT in fresh namespace check - native process records account for launched wrapper/product + any new daemon/brain candidates vs pre-run baseline - stderr contains selected "cannot observe broker state" emission; complete output capture = sampled absence + observed branch, NOT continuous absence. Stop-and-report/PENDING on: unexpected broker resolution, daemon appearance, surviving/unattributed process. NOT authorized: product stop, running the emitted cleanup command, retry, kill. Source note: lan-firewall handler returns before ensure_running (does not replace observations). hertz admission receipt will name endpoint, baseline, capture paths. Instrument pre-check (read-only, ~05:36Z): [System.IO.Directory]::GetFiles('\.\pipe\') under powershell.exe 5.1 THROWS "Could not find a part of the path 'C:\pipe'" (inline form also printed pipes_total=0 after the throw = dead-instrument clean zero). Same call under pwsh 7: 608 pipes, positive control \.\pipe\spt-daemon-broker-78bf18a9fd96fdc6.sock present; Get-ChildItem '\.\pipe\' under pwsh 7: 610. Use pwsh 7 (or a ps1 with ErrorAction Stop + positive control) for the absence check. doyle M4ZZK7PD ~05:35:35Z: failed enumeration stays ERROR, never zero. NOT concluded as PS-version limit (inline attempt arg showed \.\pipe\ = lost backslash). Hertz owns instrument verification. liam HOLD investigative work; elevated execution ungranted. hertz JVCAP323 ~05:40:09Z CORRECTS my pipe report: launcher's own S3 block builds 9-char namespace \.\pipe\ (4 backslashes); under Windows PowerShell 5.1.26100.8875 it enumerated 635 w/ broker pipe control present; pwsh 7.6.6 637. My 5.1 failure = argument reaching C:\pipe, NOT a version limitation. My "5.1 throws" claim is RETRACTED. Evidence d3/d3-pipe-instrument-probe.ps1 3b1bb29f..., d3/d3-pipe-instrument.out ff011861... GRANT doyle S2FXATKT ~05:43:52Z: ONE attempt, run 20260913T0545Z-hertz, admission sheet sha256 0b6fe379ec826d93d9de861d14eb4d33d27d1505766f8103a3d329731236faee, launcher sha256 93ee37e1d2f36a6fca99807af26efec284c46abf3620572b8c16a8eb500bcc0a (.spt/preserved/hertz-fp-driver-review/d2/d3/d3-emission-probe-v4.ps1), exe 72d30901..., broker spt-daemon-seed-d3-emission-probe-20260913T0545Z-hertz.sock, output = sheet's fresh run-20260913T0545Z-hertz dir, 60s wait / 30s drain. Verify pins + endpoint absence immediately before. Failed prereq SPENDS attempt: refuse+report, no rename/retry. START only after launch. CAPTURE ONLY: never execute emitted command; no fw cleanup/stop/restart/kill. Unexpected resolution/incomplete drain/surviving proc = PENDING. hertz owns before/after checks + END. doyle 2XOYWCIQ ~05:47:12Z: D3 END accepted; single execution SPENT. hertz takes AFTER + preserves my launcher console (scratchpad/d3-launcher-console.txt b3010a6a...) with run artifacts. Payload decode + ownership/removal review later; emission success does NOT authorize use. D2 held. hertz LOFZ4Y4Y ~05:50:16Z: console copy VERIFIED (3 reads = b3010a6a) at d3/run-20260913T0545Z-hertz/liam-launcher-console.txt; original released (kept). AFTER clean: no product residual, no rule either store, broker absent in proven sample, wrapper 51896 gone, 4 candidate rows = hertz recorder chain by ancestry; output hashes match. Record d3/d3-window-disposition.md 21ffdcb9... CLOSED by doyle G4PIMBOX ~05:50:49Z: D3 run closed, disposition accepted, window released, all D3 grants SPENT. No standing authorization.