TODLANDO — UNCHANGED-S4 DISCOVERY DISCRIMINATOR
Authority: Doyle RNCYMURP / GQF2NYS4 / ZJCJQLBZ. S5 is Hertz's test-only rig lane. No product fix authorized or made.
Source: 35d6f7a38f2189455f1a9e1a85a86b1e4bc0481a, detached isolated Linux worktree .worktrees/304-web-helper-rca.
Run: 2026-09-15 10:13:08.642826Z through 10:15:03.895446Z on kitsubito.

NATIVE RESULTS
pool-claim: 0.
compile: 0; cargo test -p spt-daemon --test serve_for_discovery_probe --no-run --message-format=json; CARGO_BUILD_JOBS=2; own target.
bare: 101; one test, 0 passed / 1 deliberately failed / 0 filtered. Native stdout reports 0.07s.
full: 0; one test, 1 passed / 0 failed / 0 filtered. Native stdout reports 0.08s.
pool-release: 0.
No retries, forced signals, driver errors, final producer survivors, or unreadable census processes.

BARE ATTRIBUTION
Invented B broker, no canonical seed-control server, no docs listener.
Actual product stderr:
WEB_SERVE_FOR: stream=1 ... outcome=failed reason=DOCS_PORT_DISCOVERY_FAILED: Connection refused (os error 111)
Owner returned Ok(Failed(...)); requester received Ok(Refused { ... refused: false }).
BARE_DISCOVERY_REACHED mode=bare reason=DOCS_PORT_DISCOVERY_FAILED was emitted only after asserting BOTH outcomes. The final Registered assertion then deliberately produced native 101. This is not a compile, access-gate, routing, or setup failure.

FULL CONTROL
Same fixture and product binary; retains invented B broker name. Only adds canonical seed-control server plus broker-backed ephemeral docs listener.
Seed DocsStatus matched actual bound port 33319.
Actual product: WEB_SERVE_FOR ... outcome=registered.
Owner returned Ok(Sent { status: 200, bytes: 0 }); requester returned Registered.
FULL_REGISTERED_BOUND_PORT url=http://localhost:33319/kitsubito/f/quoted-by-the-user.md bound_port=33319
This proves the helper registration/discovery exchange, not the full two-host golden or subsequent HTTP fetch.

VERDICT
Fixture defect confirmed on unchanged S4. The canonical seed-control query works when the fixture provides the production services. Neither broker/brain protocol plumbing nor CLI fallback changes are justified by this failure.
Both modes also logged NTP_TOTP_UNCORRECTED and private-home ACCESS_STORE_MINTED notices; neither prevented the attributed exchange. Logs retained unmodified.

PROVENANCE / CLEANUP
Full native stdout, stderr, command/environment/timing/resource receipts, source manifest and census are in linux/ under this proof directory. 24 receipt hashes were verified after SCP collection.
Fixture SHA256: b3cf2faa67ce6002f71ea4446bf406eccdd0d47e4d2dc98e288125a94ccc5d54.
Driver SHA256: d47edfbd6a77d4800944b4c356b54f1a59db2624e0f9b2d9e54a588c6905c963.
All tracked source content matched the initial manifest at producer completion. The only injected source was the untracked integration probe; it was removed at 10:17:15.692231Z after matching the preserved copy's hash. Final worktree status is empty at exact S4.
Target retained, pool released: 2,964,238,336 allocated bytes. Last sampled free space: 270,201,110,528 bytes. This is a sample, not a reservation.
Source, target, original probe artifact and all proofs retained. No product commit, push, assembly edit, Windows producer, check/clippy/trace gate, or unrelated cleanup was performed in this discriminator lane.
Standing down. #308 Windows waits until after v0.70.0 publish and Doyle dispatch.