{
  "baseline": {
    "test": "bootstrap_firewall::windows::tests::a_rule_heavy_prewrite_query_still_reaches_reconcile_write",
    "nextest_seconds": 4.039,
    "query_wall_ms": 3013,
    "outcome": "killed",
    "producer_exit": 100
  },
  "successor_uncommitted": {
    "same_test_nextest_seconds": 5.357,
    "firewall_suite": "34 passed, 1008 skipped",
    "producer_exit": 0,
    "hung_child_test": "bootstrap_firewall::tests::a_hung_firewall_child_is_killed_at_its_operation_budget",
    "hung_child_nextest_seconds": 1.428
  },
  "elevated_netsecurity_children": [
    "pre-write verify-query",
    "reconcile-write (ownership queries are statements inside this child)",
    "post-write verify-query"
  ],
  "nominal_child_budget_seconds": 30,
  "maximum_elevated_budget_sum_seconds": 90,
  "all_hung_case": "First pre-write child is killed at its budget; write and post-verification do not run.",
  "unelevated_case": "Read-only query before elevation is a separate child; if repair is authorized, helper obtains fresh evidence. At most four child budgets (120 s), plus elevation/user/IPC/OS overhead.",
  "cleanup_case": "One cleanup child contains ownership checks/removal/verification; an initial CLI is-clean observation is a separate child. Cleanup is not an additional normal startup leg.",
  "listener_ordering": [
    "lanhost.rs:700-717 binds before publishing bound port and serves on independent thread",
    "lanhost.rs:727-741 waits for successful bind and records listener before LanUp",
    "servehost.rs:334-342 returns LanUp only after successful start_at",
    "serveverb.rs:238 prints LAN_BOOTSTRAP_UP before report_lan_admission call"
  ],
  "limits": "Source-derived child counts/budgets, not a measured hard end-to-end CLI bound. No live firewall mutation or field acceptance performed."
}