research(track-a): validate raw XRes wire helper hosted

[blakinio]

Track A — hosted raw-XRes wire validation

Canonical task: OTC-20260816-track-a-canonical-runtime-e2e.
Base: exact trusted main@55803133a5abe8b1e75e4660da1d2b84b154ab9a after coordinator promotion #444 and child-task archive #445.

The promoted evidence proves a raw full-display VIEWABLE X11 resource exists but exact official-client PID ownership is still UNKNOWN. Convenience libxcb-res / libXRes helpers are absent, while the contained XRes protocol header records the QueryClientIds/LocalClientPid wire basis.

This Draft implements only a pure byte codec:

• QueryVersion(1.2) request encoding and exact reply parsing;
• minimum-version and sequence fencing;
• one-resource QueryClientIds(LocalClientPid) request encoding;
• bounded QueryClientIds reply parsing;
• strict unambiguous LocalClientPid extraction for the requested XID.

The helper performs no I/O and has no socket/network/process/runtime imports. A dedicated ubuntu-latest workflow compiles it, runs deterministic little/big-endian positive and malformed/truncated/oversized/ambiguous fixtures, and AST-checks that the helper remains transport-free.

No Synology, Xvfb, official client, QueryExtension call, canonical lease/registration/session, credentials/login/gameplay, Track B or historical #303 surface is accessed. runtime_access:none, mutation_authorized:false.

Research output remains Draft-only. A later coordinator review must promote the validated helper before any separately admitted physical PID-identity run.

[blakinio]

Coordinator code-review checkpoint — ACCEPT_PENDING_FINAL_REPOSITORY_CI on exact source head 32c61120b9086904b328e7b4aa50526d64bef807.

Independent review covered the persistent helper/test/workflow and hosted evidence. One material fail-closed finding was identified before this terminal head: a one-spec QueryClientIds extraction could previously accept the requested target record plus an unrelated extra record. The source fixed that boundary by requiring exactly one record total for any non-empty one-spec result and added test_rejects_extra_non_target_record_even_with_target.

Validation after the fix:

• semantic helper head 06c6f18fc4a8920428ca353173b0596758a0190a dedicated run 32001448940 / job 95302425720 = SUCCESS;
• 33/33 deterministic fixtures PASS;
• XRES_WIRE_PURE_TRANSPORT_FREE=PASS;
• Track A governance 32001448948 = SUCCESS;
• exact terminal source head dedicated run 32001585699 is SUCCESS;
• exact terminal source head Track A governance 32001585708 is SUCCESS;
• review threads = 0;
• no physical/Synology/Xvfb/client/canonical state access occurred.

Repository CI 32001585992 is the only remaining source gate and was still in progress at the last permitted ordinary observation. Promotion must not begin until its CI / Required is SUCCESS. If green, coordinator decision becomes ACCEPT and the helper/test/workflow/evidence/task checkpoint should be replayed onto current trusted main in a separate promotion PR; researcher Draft #447 remains unmerged.

[blakinio]

Coordinator final source decision: ACCEPT / promotion PR #448 opened.

Exact final source head 32c61120b9086904b328e7b4aa50526d64bef807 passed all source gates:

• dedicated raw-XRes workflow 32001585699 / job 95302804376 = SUCCESS;
• Track A governance 32001585708 = SUCCESS;
• repository CI 32001585992, CI / Required 95303113378 = SUCCESS;
• review threads = 0.

The coordinator-reviewed fail-closed extra-record finding was resolved before terminal source closeout and the final helper remains 33/33 fixture-clean and transport-free. Promotion #448 replays the exact conflict-free source tree onto trusted main and is currently validating. This researcher Draft remains unmerged and will be closed superseded only after #448 actually merges.