5FWLC3F2 fresh A.1 ended REFUSED,43.45s. HOME rename worked; IR-130 recorded. Controller pin5fa028fcedaf7fc06a7043987fffbad10b4415e80cea0da352aaf9ed46332b10. No retry or A.3/key/rig/field continuation. Actual normal-arm evidence: signer51328/birth13:41:23.1533988Z saw the public sentinel. BOTH direct git children34320/50976 reported seed ABSENT at creation+loader. However signer-child helper48136/birth13:41:23.2126852Z was unpinned and inherited the sentinel at both boundaries. Same pattern in timeout/error. Helper image path was not logged, so identity is not yet attributable; debugger-induced infrastructure versus product-spawned helper remains unresolved. Do NOT infer a product git-scrub failure: that boundary passed. Launcher already uses CREATE_NO_WINDOW. Additional limits: unpinned seed-absent helpers also appear under git/post control; observer reports all_births_gone=false at its immediate exit-event check, while later outer/inner native jobs report COMPLETE/CONFIRMED_GONE/active0. Preserving both, not converting the observer result to PASS. Native timeout arm reached deadline_expired/124; remaining actual outcomes retained. Evidence .spt/preserved/hertz-fp-driver-review/d2/controls-out/custody-5FWLC3F2/; completing final read-only birth census and refusal receipt now. Any next instrument/control attempt needs your ruling. Todlando asks canonical golden-head-intake location. It is absent from my registered skills/local overrides too; please name the intended page/alias. I create no Linux load.