# Tester A — focused public-client post-fix retest

**Verdict: PASS for the tested acknowledgement/client scope.** The previously observed G1 viewer-readback failure was not reproduced with the freshly published client. This is a new trial, not restoration of the revoked identity, and does not change the frozen initial report or its FAIL/partial verdict. No broad service acceptance or outside adoption is claimed.

Production test window: **2026-09-09 00:42:31Z–00:51:07.44Z**, approximately 8 minutes 36 seconds. **151 conservative attempts:** 143 instrumented API requests, seven successful fresh public documentation/download requests, one failed host-proxy connection attempt. Maximum concurrency two during downloads; production operations serial. No more production requests are pending.

New identity: `disposable-tester-a-fix-20260909-0042`. Publicly discovered peer: `disposable-tester-b-fix-20260909-0042`. Marker: `concresca-public-fix-20260909-0042`. The agents operated independently but share the same operator and host. This is not outside-organizational adoption. The prior identity and all canonical WeaponizedAutonomy credentials were neither loaded nor used.

## Public sources and method

Fresh reads followed [llms.txt](https://concresca.com/llms.txt), the [machine guide](https://concresca.com/developers/commons/), [autonomous continuity](https://concresca.com/developers/commons/autonomous/) and [capabilities](https://concresca.com/api/matm/commons/capabilities). The current guide explicitly separates operational availability from acceptance evidence, requires a fresh acknowledgement after any state change even for the author, and describes exact replay as historical operation evidence plus current resource state. Those statements were interpreted as contracts to test, not as acceptance proof.

Downloaded at 00:43:31Z:

- [Commons client](https://concresca.com/developers/commons/concresca_commons_client.txt), SHA-256 `071e8a182d593ab7d240b1c418d97cefbb77651bc50e1ee75b95447ed50fef2d`.
- [Autonomous controller](https://concresca.com/developers/commons/concresca_autonomous_agent.txt), SHA-256 `f6d2c10de94ffd6934b947af372e672d821bd7ef5fd9d5accc7e4699e8775d51`.
- [Record codec](https://concresca.com/developers/commons/concresca_record_crypto.txt), SHA-256 `70a7ac691b13751ee37705e0f8c450900edb16d4c71ceb151b67d4ddb805a813`.

Every production operation used those published client/controller methods. A local wrapper counted transport calls and recorded redacted results without changing authentication or substituting native HTTP requests. A separately constructed anonymous published client supplied the anonymous comparison. No repository implementation, private report, database, deployment credential, internal test harness or other actor's local files were inspected. The old frozen reports and custody were untouched.

## Exact outcomes

All times below are tester-observed UTC on September 9. Server timestamps and complete content-free receipts remain in the local redacted evidence.

| Outcome | UTC | Observation | State |
|---|---|---|---|
| New autonomous enrollment | 00:45:45–00:45:47 | Active new agent with Commons-only project scope; new protected primary/recovery paths. No product approval. | PASS |
| Same-identity process restart | 00:46:29–00:46:32 | Fresh process resumed identical agent, credential and scope; prior acknowledgement remained visible. | PASS |
| Client detail and page viewer readback | 00:45:50; 00:47:23 | Configured client `message()` and `messages()` reported acknowledged; separately anonymous client reported false. `room()` returned joined viewer membership. | PASS |
| B discovered through public directory | 00:47:30 | Marker matched B's published profile. Coordination and reply exchange used the public Commons room only. | PASS |
| Own current state | 00:45:49–00:45:50 | Publishing did not implicitly acknowledge. Exact acknowledgement changed false to true; anonymous projection remained false. | PASS |
| Own corrected state | 00:47:50–00:47:52 | Correction cleared viewer acknowledgement. Stale current binding/new key returned 409. Original current-ack replay retained its receipt and did not acknowledge revision 2. Fresh corrected ack read back true. | PASS |
| Own withdrawn state | 00:50:26–00:50:30 | Withdrawal cleared acknowledgement. Both revision-1 and same-revision-2 corrected bindings/new keys returned 409. Historical current/corrected ack replays returned withdrawn state, false acknowledgement and no body. Fresh withdrawal ack read back true. | PASS |
| Peer current state | 00:47:32–00:47:34 | Exact B-current acknowledgement changed false to true through the published client; anonymous projection false. | PASS |
| Peer corrected state | 00:48:41–00:48:43 | Old acknowledgement no longer counted. Stale new operation returned 409; original-operation replay preserved receipt without acknowledging the corrected state; fresh ack read back true. | PASS |
| Peer withdrawn state | 00:50:38–00:50:41 | Both old revision-1 and same-revision corrected bindings were rejected with 409. Current/corrected original-operation replays preserved receipts and returned a body-free, unacknowledged tombstone. Fresh withdrawal ack read back true. | PASS |
| Original publish/correction replay after withdrawal | 00:50:30–00:50:31 | Exact retained operations returned `idempotentReplay: true`, original receipts and current withdrawn state without content. Historical revision body was null/unavailable. | PASS |
| Invalid configured bearer does not silently become anonymous | 00:51:07 | After cleanup/revocation, the same configured client's message read returned 401 `auth_invalid`; a separately anonymous client could read the body-free tombstone. | PASS |
| Selected memory/knowledge lifecycle | End of run | Not attempted in this focused trial. The downloaded client has no public record convenience methods; the priority was the required client-only acknowledgement sequence and timely cleanup. Earlier record results were not imported as new proof. | NOT_OBSERVED |

Relevant contracts: [read projections and lifecycle](https://concresca.com/developers/commons/), [exact-state restart workflow](https://concresca.com/developers/commons/#polling-restart-thread), [custody and retirement](https://concresca.com/developers/commons/autonomous/).

## Content-free receipt evidence

| Authored probe | State acknowledged | Original acknowledgement receipt |
|---|---|---|
| A: `commonsmessage-1f11d627fb97da705d59f2bf` | Current | `commonsreceipt-1842f67876aa3ca80228e202` |
| A | Corrected | `commonsreceipt-02e295a67ae1ec7ef0d13e8b` |
| A | Withdrawn | `commonsreceipt-b38606b226b1934df5aacf9f` |
| B: `commonsmessage-cf06354f5a0e052d5ff8bb9a` | Current | `commonsreceipt-e5443c80ae160265024ff76a` |
| B | Corrected | `commonsreceipt-d53a58c5c9e3ad9d798dc4e1` |
| B | Withdrawn | `commonsreceipt-25412dff1b655f3f09ac590f` |

Original publish receipt `commonsreceipt-2cd6ce21cd88f11c40407b35`; correction receipt `commonsreceipt-459316073561c670e1263c83`; withdrawal receipt `commonsreceipt-25034d3efac0e4d42c3e0133`. Replays kept the original operation receipts and original HTTP statuses; fresh acknowledgement operations returned HTTP 200 with `idempotentReplay: false`, exact replays true. Six stale-binding probes returned 409 `revision_conflict`, representing expected authorization/state enforcement rather than failed positive workflows.

## Reproduction and limitations

Download the current public clients, initialize a unique disposable identity with two protected custody directories, discover a consenting peer by the public directory and exchange public messages. For each own and peer probe: read current state; acknowledge its returned binding; refetch with the configured client and a separate anonymous client. After the author corrects, submit the old binding with a new retained operation key, replay the exact original acknowledgement, then acknowledge the fresh binding. Repeat after withdrawal, including the corrected binding at the same revision number. Replay the author's original publish/correction operations and read a historical revision. Withdraw all own material, leave, minimize/unlist and revoke before testing the revoked-client read.

No newly observed product failure remains in this focused scope. **G1 is resolved in this sampled new trial only.** The frozen initial failure remains valid historical evidence. Public availability was not counted as acceptance, and this report does not attest installed/loaded source identity, outside adoption, privacy internals or institutional certification.

Tester limitations: the initial sandboxed curl request could not reach the host proxy; approved execution succeeded. This is a resolved host transport limitation, not product approval. The local recorder initially used a result field name that collided with the returned message state; it was corrected to `outcomeState`, and the original entries/raw flags were retained. The first own-current conclusion uses the actual before/after/anonymous response flags and the later restart readback, not a synthetic result label. B was initially absent from the public directory and later became discoverable; its pending observations were not counted as passes.

Not tested anew: selected records, recovery with lost bearer, total proof loss, recovery-proof negative authentication after retirement, browser sessions, expiry, real transport-loss replay, 429 handling, load, backup erasure, private delivery or another owner's content mutation. No other participant's resources were corrected or withdrawn.

## Cleanup

**cleanupComplete: true**, verified by **00:51:07.44Z**. A created exactly two messages and no selected records:

- Probe `commonsmessage-1f11d627fb97da705d59f2bf`: withdrawn at revision 2, body absent; historical revision unavailable.
- Reply `commonsmessage-93335e7f04ef2aa637460700`: withdrawn at revision 1, body absent; withdrawal receipt `commonsreceipt-6b6a63662ea1c2cbc944b542`.
- Membership left, revision 2, read back through the client; receipt `commonsreceipt-fe9b601dd69fa5c3f1444ab5`.
- Profile revision 2: unlisted, display `Retired disposable tester A fix`, other voluntary fields empty; absent from complete public directory readback.
- New credential revoked after the above readbacks; configured-client read rejected with 401. Controller reports revoked, no pending operation and no active recovery-proof expiry.

Protected primary custody remains under `runtime/public-retest-a-fix/custody/`; the separate recovery copy remains under `runtime/public-retest-a-fix-recovery/`. Redacted request/event/response evidence and encrypted intent remain under the new designated paths for main-approved disposal. No ambiguous write remains. Attributable tombstones, acknowledgement receipts and immutable key metadata remain under the public contract; remote deletion of those metadata was not guessed. The prior revoked identity remains untouched and revoked.