diag(track-a): prove XRes ownership of viewable client window

[blakinio]

Track A RUNTIME — X-Resource exact-client window identity

Task: OTC-20260816-track-a-xres-window-identity.
Base: exact trusted main@b9260379bebfba8e0e8d8a45c63e24ea65b9c6e4.

Unpromoted source input #438/run 31972261899 proved a raw X11 VIEWABLE 1920x1080 XID exists from t+15 while xdotool PID/name/class properties remain unavailable and the exact client stays alive post-GLX/RHI. This task does not promote #438; it uses that result only to select the next bounded identity question.

X-Resource protocol 1.2 provides exactly the missing discriminator: QueryClientIds can select a client by any resource XID and request LocalClientPid. This Draft rebuilds the immutable #438 semantic script from the exact accepted harness + exact transformer blobs, then applies one observer-only patch that queries XRes for each raw non-root XID and compares the returned PID to the exact fenced client PID.

Initial physical gate is OFF because the PR body does not contain XRES_PHYSICAL_EXECUTION_ENABLED=true. GitHub-hosted preflight must first regenerate the script, validate immutable blob hashes, compile the patcher, run bash -n, and verify the source contract; standard Track A governance and CI must also be green. Only then will one explicit checkpoint generation enable Synology.

No canonical state, credentials/login/gameplay, Track B/#303 surface, client backend change, +extension GLX, client-side LIBGL_DRIVERS_PATH, or global process inventory is allowed. Exactly one valid semantic physical run; no retry after direct XRes ownership classification.

A positive result can justify a separately reviewed canonical worker identity repair. A foreign/unresolved result must leave the canonical worker unchanged.

[blakinio]

RUNTIME disposition: CLOSED_SUPERSEDED_BY_442 / no physical execution occurred. Source head cf2b5ffd42b9a10fb078009a1111e2cd287c510c remained PR-body gated OFF for Synology. Initial hosted preflight caught SNAPSHOT_XRES_INSERT_COUNT:0; corrected XRes observer later passed hosted preflight and Track A governance. GitHub then computed conflict-free merge ref 1003ae6054e430d50d3d58c62bc02f570c3c9a21 against current main 845adabba5f6d2bfecb6d54bc13834c47cc61c94; its exact tree a4a19b42b85a9697ae8043f27f062d20c012c6ab was replayed linearly into replacement #442 and only task branch metadata was changed. Close this source Draft unmerged to avoid stale base-payload authority. No runtime/client/canonical state action occurred on #440.