**Gate verdict (doyle, 2026-09-08 __TIME__Z): PASS at `fd296557` — landed by fast-forward, tested sha == merged sha.**

Head = build/ws272-w3 at `fd296557` (todlando's RED 3 fix, one commit over `ff034bf5`, files `crates/spt-daemon/src/dispatch.rs` + `crates/spt-store/src/serving.rs`; hertz's two drift riders present by patch-id since `ff034bf5`). Battery ran from a frozen driver (`1d4d7a735544`, six scripts) in the gate worktree under a proven scrubbed env, pool `ws272-w3` claimed at leg 0, every leg's exit read from its FILE; `.spt/gate-w3-fd296557/` in the gate tree is the record.

- claim / kitsubito re-point / treqs / prebuild / notify-shell / xtask check — all 0
- clippy `--workspace --all-targets -D warnings`: Windows 0 (1m00s, full Checking chain, 0 warnings), kitsubito 0 (14.82 s, same)
- nextest list: all 28 named W3 cells present (20 + 3 ladder + 5 twohost_web), ruled-absent 0
- libs (spt-daemon / spt-net / spt-store / spt-runtime / spt-msg): **1965 run / 1965 passed** (4 leaky, 1 skipped), one Summary — incl. the three RED 3 cells by name (`the_family_census_is_bijective_with_the_enum`, `docs_dir_parent_traversal_is_refused_at_register`, `a_docs_dir_that_leaves_the_adapter_directory_is_refused_by_name`)
- xtask bin: 99 run / 99 passed (exit 0, one Summary) · spt bin: exit 0, one Summary
- e2e (Summary 1 each): lan_bootstrap 0 · webserve 0 · dispatch 0 · webserve_attachment 0 · webserve_cross_node 0 · io_events_undriven_kinds 0
- **Web pair, Windows: WITNESSED — a/b exit 0, one Summary each, helper_role_a PASS 64.2 s non-skip, role_b PASS 84.8 s, owner `WEB_SERVE_FOR … outcome=registered audience=w2-helper-audience`, 5/5 both roles** · **Web pair, Linux (kitsubito): WITNESSED — same lines, helper_role_a PASS 66.1 s, role_b PASS 86.3 s, 5/5 both roles**
- **Ladders: one-box Windows WITNESSED (a/b exit 0; drive-sid, B-2 sid, ladder-done both sides) · one-box Linux WITNESSED (same markers) · cross-box (golden shape, A=hfenduleam B=kitsubito) WITNESSED — cargo test A `3 passed` 74.56 s, B `3 passed` 132.14 s; printed markers counted: drive-ready B=1, B-2 ticker B=1, ladder-done sent A=1 B=1, ladder complete A=1 B=2, A-3 bare-id wake A=1 B=1** — every printed witness line present; one `PUMP_PEER_FAIL` on B per ladder (the 65 s family, hertz's rider, not a red)
- **Mutations** (one arm each, sites 1/1/1, reverted to dirty 0): M1 (load-time ParentDir accepted) EXACT — libs 743 run / 2 failed = `docs_dir_parent_traversal_is_refused_at_register` + `a_docs_dir_that_leaves_the_adapter_directory_is_refused_by_name` only; absolute-path, missing-docs_dir and resolve-time siblings intact · M2 (changelog stripper no-op) EXACT — xtask bin 99 run / 1 failed = `traceability_comments_are_stripped_and_changelog_is_scanned` only (`changelog leaked internal codes: [(5, REQ-X), (7, REQ-Y)]`), `non_comment_lines_preserve_bytes_and_order` intact, and `xtask check` exit 1 naming the drifted page · M3 (lanhost exe-sha compare skipped) EXACT — `the_set_gate_refuses_by_name_and_serves_nothing` red at arm (2) sha-mismatch only + `lanhost::tests::set_gate_admits_the_applied_set_and_names_each_refusal` red at its sha assertion; `bootstrap_serves_the_applied_set_isolates_bad_triples_and_stops_for_real` intact
- GATE-W3 DONE 13:58:48Z dirty_tracked 0, kitsubito_dirty 0

**Field arm (pin 2b, §4 of GATE-W3-272-PLAN.md) WITNESSED at `fd296557`** on rig A (hfenduleam, `spt-rig-a`) + rig B (kitsubito, `spt-rig-b`): rig A stopped, `releases/` cleared; linux artifact built at the head on kitsubito (`4adb39f2…`, 449,398,280 B), Windows artifact rebuilt at the clean head (`360109a0…` — the pool exe after M3 is the mutated build, so the field artifact is always rebuilt first); `debug-rollout --key-id w3-rig-2026-09-08` staged release 3 (debug channel) into the rig home; rig A started from the head exe under a scrubbed env (child env read back, leaked NONE); `update apply --finish` → `Updated spt-core to release 3 and restarted the daemon`, `applied-state {phase: applied, version: 3}`, exe at the path == staged artifact; `serve lan --bootstrap --port 5470` → `LAN_BOOTSTRAP_UP http://192.168.1.81:5470/install` + one sha line per triple, both == the staged artifacts, bound `0.0.0.0:5470`, firewall rule PRESENT (Private, 192.168.1.0/24). **From kitsubito:** both sidecars 200 / 890 B and byte-identical (version 3, key `w3-rig-2026-09-08`, artifact hashes == printed), `/install` 200, the linux bin 200 / **449,398,280 B == expected, sha == expected == printed** in 19.4 s; the rig's docs port bound `127.0.0.1` + `[::1]` only (302 on loopback, LAN probe times out); fleet docs 5474 unreachable from LAN. `--bootstrap` again → `LAN_BOOTSTRAP_ALREADY_UP` same url; `--stop` → `LAN_BOOTSTRAP_DOWN`, 0 listeners, kitsubito `/install` post-stop times out; second `--stop` → `LAN_BOOTSTRAP_NOT_UP` exit 0. **Rig B** (kitsubito, dev bin at the same sha, no applied set): `serve lan --bootstrap --port 5470` → `LAN_BOOTSTRAP_REFUSED:unsigned-exe`, exit 1, nothing bound. Rigs A/B left up on the fd296557 bins. One procedure finding, not a red: the apply-relaunched daemon takes its env from the `update apply` caller, so a rig daemon started with the ephemeral-ports flag loses it across an apply and its docs server then collides with the fleet daemon's 5474 (`DOCS_SERVER_BIND_FAIL`, daemon continues by design) — register candidate.

**Predictions:** P1 (all legs green at the head) HELD (first sha of this head where it did) · P2 (each mutation reds EXACTLY its named cells) HELD 3/3 · P3 (first-attempt LAN fetch sha match with the firewall rule PRESENT) HELD · P4 (dev-rig refusal = `unsigned-exe`, not `sha-mismatch`) HELD (`unsigned-exe` fired; distinguishable from `sha-mismatch` by name).

**History of this head:** three reds before this sha, every one closed at a named mechanism and none by rerun — RED 1 (composed head `bf6f493d` E0432: riders imported seams the producer had inlined), RED 2 (generator laundered a visible tracker code), RED 3 (`ff034bf5`: census stale by one after Xfer left; ParentDir refusal unnamed) — all in the PR body. Register candidates from the lane: doubled `manifest invalid:` prefix (pre-W3, `23c22a73`); pre-nextest disk re-measure in the driver; POOL_GUARD per-leg line (hertz rider 3).