docs: prepare verified launch captures and provenance

Author: antropos17

docs/CONTEXT.md

@@ -84,7 +84,7 @@ Recheck these observations before acting:
 - Existing Commons run 49092854-f9bd-4b7a-8d12-4ac5ea0e5f70 retains the approved,
   unmerged safe-timer change from job 811bdb98-bcbb-4b65-80b9-f19693aef6b4.
   Preserve it. 29 earlier lab experiments were verified before this release work.
-- Public source: antropos17/commit-zero at 64704c6 (06:14 UTC), CI green; use clean .cache/publication and preserve histories.
+- Public source: antropos17/commit-zero at 4b1238c (06:27 UTC), CI green; use clean .cache/publication and preserve histories.
   README GIF is a 15.8s condensed walkthrough of retained Sequence Kit work,
   not a continuous live recording. Static fallback included; desktop/mobile and all
   three CI jobs passed. Evidence: runtime/verification/github-readme-gif-2026-10-19.json.

docs/DEVELOPMENT.md

@@ -34,6 +34,9 @@ only Node `.test.mjs` files. Run `npm run test:ui` for real browser coverage.
 `npm run benchmark:ui -- --history 1000 --samples 5` measures a labelled read-only
 chat fixture in cold browser contexts after `npm run build`. Use the same browser,
 viewport and parameters for comparison; it never opens a retained user store.
+`npm run capture:launch` performs disposable model-free journeys and captures
+ready-size launch images with provenance under `runtime/verification/launch-assets`.
+Review the actual images before copying them into source; see [distribution](DISTRIBUTION.md).
 Focused suites are explicitly labeled feedback, not full acceptance. Select an area
 deliberately: changed-file inference is unreliable in this dirty checkout and can
 miss integration dependencies. The full gate remains serial to bound PGlite memory.

docs/DISTRIBUTION.md

@@ -9,7 +9,7 @@ active catalog agents or a generated-code sandbox.
 
 | Channel and audience | Official submission rules and fit | Required preparation and timing |
 | --- | --- | --- |
-| [Product Hunt](https://www.producthunt.com/launch): makers and early adopters who can install a developer tool | [Launch guide](https://www.producthunt.com/launch/preparing-for-launch) accepts a GitHub repository URL, asks for a plain name, tagline up to 60 characters, description up to 500, square thumbnail under 3 MB and at least two gallery images. The [guide](https://www.producthunt.com/launch) forbids direct requests for upvotes. | Best after final public commit and CI pass. Use existing real workspace/review captures as two gallery images, the repository logo as thumbnail only after checking dimensions, and a maker's personal account. The owner should verify all fields and be available for questions. No scheduled launch yet. |
+| [Product Hunt](https://www.producthunt.com/launch): makers and early adopters who can install a developer tool | [Launch guide](https://www.producthunt.com/launch/preparing-for-launch) accepts a GitHub repository URL, asks for a plain name, tagline up to 60 characters, description up to 500, square thumbnail under 3 MB and at least two gallery images. Recommended dimensions are 240x240 and 1270x760. The [guide](https://www.producthunt.com/launch) forbids direct requests for upvotes. | Best after final public commit and CI pass. The checked asset set below provides two real viewport captures and the current application mark. A maker's personal account, final fields and availability for questions remain prerequisites. No scheduled launch yet. |
 | [Show HN](https://news.ycombinator.com/showhn.html): developers who can run the project | Show HN accepts software people can run locally, asks for a `Show HN` title and easy trial without a signup barrier. [HN guidelines](https://news.ycombinator.com/newsguidelines.html) prohibit generated or AI-edited submission text and promotion-first participation. | Provide a clean quickstart, public source and reproducible demo. The human maker must write the submission and comments personally. This file supplies a fact sheet, not post copy. Do not ask for votes. |
 | [DEV Community](https://dev.to/): technical readers interested in verification and local AI | [AI-assisted article rules](https://dev.to/guidelines-for-ai-assisted-articles-on-dev) require disclosure and fact checking, and disallow AI-assisted articles promoting a program. | Defer a launch post. A human-authored technical case study about revision-checked reviews and simulation may fit after sustained real-world feedback. No promotional draft is prepared. |
 | [r/LocalLLaMA](https://www.reddit.com/r/LocalLLaMA/): local-model practitioners | The accessible [community rules page](https://www.reddit.com/r/LocalLLaMA/about/rules/) did not expose the rules to this research tool. Reddit's [general guidance](https://www.reddit.com/wiki/selfpromotion/) explicitly says its older self-promotion page is no longer updated and asks authors to check subreddit-specific rules. | Hold. Recheck current rules in a logged-in view and establish genuine community participation before considering a post. Do not infer permission from old general advice. |
@@ -37,10 +37,32 @@ Assets: [workspace desktop](media/workspace-desktop.png), [review](media/workspa
 [condensed saved-run demo](media/workflow-demo.gif), and [static fallback](media/workflow-poster.png).
 The [current scenario PR diff](media/scenario-pr-2026-10-19.png) is a real Chrome
 capture of the deterministic ten-step example; caption it as simulated activity.
-The new [catalog capture](media/agent-catalog-2026-10-19.png) is an optional
-third image only when captioned as 18 disabled proposals in a deterministic
-fixture. Gallery sizing/crop and thumbnail have not been checked against Product
-Hunt's upload requirements; those are prerequisites before submission.
+The [catalog capture](media/agent-catalog-2026-10-19.png) is optional only when
+captioned as 18 disabled proposals. Prefer the following ready-size set for a
+first launch; it demonstrates a model-free entry path and the repository example.
+
+| Asset | Checked file | Required caption |
+| --- | --- | --- |
+| Gallery 1 | [Commons first run](media/launch-2026-10-19/commons-first-run.png), 1270x760 | Actual local project and issue created by a deterministic capture script in disposable services. No model task started. |
+| Gallery 2 | [Scenario PR](media/launch-2026-10-19/scenario-pr.png), 1270x760 | Deterministic ten-step repository example. Author, review and checks are simulated. |
+| Thumbnail | [Current commit mark](media/launch-2026-10-19/thumbnail.png), 240x240 | Current application SVG mark rendered in Chrome, light mode. |
+
+The [capture manifest](media/launch-2026-10-19/manifest.json) records dimensions,
+bytes, SHA-256, capture time, source fingerprint and Chrome version. The PNGs are
+actual viewports without resizing, compositing or invented activity; all are
+below 3 MB. Visual inspection confirmed the relevant issue and changed lines
+are visible. The manifest is capture provenance, not a full release gate.
+
+Regenerate after `npm run build` with `npm run capture:launch`. On this Windows
+host set `CZ_BROWSER_EXECUTABLE` as described in [development](DEVELOPMENT.md).
+The command starts disposable in-memory services, performs actual scenario and
+Commons HTTP interactions, captures PNGs, checks sizes/hashes and awaits cleanup.
+It writes only `runtime/verification/launch-assets`; copy reviewed assets into a
+dated source folder. Captured issue timestamps can differ on later runs, so the
+journey is reproducible but byte-identical screenshots are not promised. The
+personal account, maker comment and final launch timing remain human actions.
+The mutable manifest is replaced with `running` before capture and `failed` on
+an error; an interrupted attempt cannot leave an older success marked current.
 
 ## GitHub release candidate draft
 
@@ -59,6 +81,11 @@ announcement posted elsewhere.
 > in isolated fixtures. The sandbox contract reports its actual host readiness;
 > no container execution is claimed without a working runtime.
 >
+> Chat now starts with the latest 40 saved messages and explicitly loads earlier
+> batches while preserving the reading anchor. `npm run benchmark:ui` records a
+> read-only large-history fixture; smaller initial DOM size is verified, while
+> changed snapshots still transfer the full history.
+>
 > The existing local Builder/Reviewer and Language lab paths remain separate
 > from the deterministic repository example and new fixtures. Proposal parsing
 > and review do not prove code behavior. Follow `README.md` for installation,
@@ -67,6 +94,12 @@ announcement posted elsewhere.
 Before publishing a release, replace the candidate version with an actual tag,
 link its exact commit and CI run, re-run the documented gates, and record real
 browser/model/sandbox coverage separately. No release was created by this note.
+Current implemented-code checkpoint: public `4b1238c`, [CI run 39210013058](https://github.com/antropos17/commit-zero/actions/runs/39210013058)
+passed full gate, Chromium and runtime dependency audit. Local frozen gate at
+`6bab440` passed 66/66 Node tests, DOM/axe 2/2, build and serving with source
+hash `20deff889c69cfceab726fa372d4bf96568ba2b9afea2b43fd8293e0cf9c7917`;
+separate Chrome coverage passed 11/11. This draft and capture tooling will require
+their own final source check before publication.
 
 ## Show HN fact sheet for a human author
 

docs/HANDOFF-2026-10-19.md

@@ -8,17 +8,17 @@ tracks dated decisions and receipts; this file is the operational entry point.
 ## Repositories and state
 
 - Working repository: `X:\ai-github`, branch `codex/development-foundation`,
-  latest fully checked local commit `c394536` at this checkpoint. The local data and model
+  latest fully checked local commit `6bab440` at this checkpoint. The local data and model
   installation are here. Recheck status before acting; this file can age.
 - Public repository: [antropos17/commit-zero](https://github.com/antropos17/commit-zero),
-  `main` at `64704c604e1038070de3c137e8e569906bf975ec` after a normal push.
+  `main` at `4b1238c7af6be8d7facf155c031aaffff28168b8` after a normal push.
   Its separate checkout is `.cache/publication`. The histories are unrelated;
-  the public tree matches local `c394536` (`d0702664b8c8322babb2e9d30111e8e095af35eb`).
-  A measured chat rendering-window unit is currently pending a full gate.
+  the public tree matches local `6bab440` (`77c4ae23feb8d9595d87d7945a8dfa0847d0f571`).
+  A launch capture-tooling/documentation unit is currently pending a full gate.
   Do not merge histories, reset the local branch or force push. Recheck remote
   before publishing anything else.
-- Public CI [run 39208716434](https://github.com/antropos17/commit-zero/actions/runs/39208716434)
-  passed all three jobs for `64704c6`: full gate, Chromium and runtime
+- Public CI [run 39210013058](https://github.com/antropos17/commit-zero/actions/runs/39210013058)
+  passed all three jobs for `4b1238c`: full gate, Chromium and runtime
   dependency audit.
 - This mission has not run local or hosted model inference, spawned product
   agents, submitted promotional posts or created a new release. Prior retained
@@ -43,8 +43,9 @@ run `npm run test:ui`. The browser suite starts disposable in-memory services.
 
 Preserve `runtime/database`, `runtime/identity`, `runtime/backups`, `.env`,
 `runtime/verification` and `runtime/local-model`. The normal gateway at 4173
-was offline during this pass. Installed model files existed; no readiness or
-inference was probed. The existing Commons run
+was offline during this pass. Installed model files existed; their weights and
+inference capability were not verified. UI health reads are separate from model
+execution, and no model-backed job was started. The existing Commons run
 `49092854-f9bd-4b7a-8d12-4ac5ea0e5f70` has an approved **unmerged** Safe
 Timer proposal from job `811bdb98-bcbb-4b65-80b9-f19693aef6b4`. Preserve it.
 
@@ -99,11 +100,11 @@ Timer proposal from job `811bdb98-bcbb-4b65-80b9-f19693aef6b4`. Preserve it.
 
 ## Evidence and limits
 
-- Latest local frozen full gate at `c394536`: 66/66 Node tests, compiled DOM/axe
+- Latest local frozen full gate at `6bab440`: 66/66 Node tests, compiled DOM/axe
   2/2, build and static serving passed. Stable source hash
-  `c37587cb34fe1e3735011bed37a55065d6aabc52579c2eba8b7897eddaeda74f`;
-  receipt `runtime/verification/scenario-pr-full-2026-10-19.json` (ignored by Git).
-- Installed Chrome browser suite passed 10/10 at desktop and 390px. Real captures
+  `20deff889c69cfceab726fa372d4bf96568ba2b9afea2b43fd8293e0cf9c7917`;
+  receipt `runtime/verification/chat-window-full-2026-10-19.json` (ignored by Git).
+- Installed Chrome browser suite passed 11/11 at desktop and 390px. Real captures
   are `runtime/verification/commons-first-run-{desktop,narrow}-2026-10-19.png`,
   `commons-provider-offline-desktop-2026-10-19.png` and catalog captures. Tests
   used in-memory services; provider-health responses were controlled in the
@@ -128,11 +129,13 @@ Timer proposal from job `811bdb98-bcbb-4b65-80b9-f19693aef6b4`. Preserve it.
   10-test grouped run including the final mobile cue, keyboard horizontal scroll
   and narrow axe checks. Actual [PR capture](media/scenario-pr-2026-10-19.png)
   shows deterministic activity. Its full frozen gate and public CI passed at
-  `64704c6`. A pending chat window renders the latest 40 messages with explicit
+  `64704c6`. The chat window renders the latest 40 messages with explicit
   earlier loading. Before/after browser measurements and a separate held-out
   history test are recorded in [measurements](WORKFLOW-MEASUREMENTS.md). Fast/UI
-  checks and all 11 grouped Chrome tests passed; full acceptance for this unit
-  remains.
+  checks, all 11 grouped Chrome tests, the full gate and public CI passed for
+  this unit. Pending launch tooling creates ready-size images and a provenance
+  manifest; its missing-browser failure and subsequent successful capture both
+  exited after disposable-service cleanup. [Assets and drafts](DISTRIBUTION.md).
 - `npm run benchmark:backend` used a disposable PGlite snapshot of five projects
   and 1,000 messages. Twenty samples per path: current normalized message-write
   p50 9.09 ms versus retained legacy pattern 42.99 ms. This verifies a prior
@@ -146,7 +149,7 @@ Timer proposal from job `811bdb98-bcbb-4b65-80b9-f19693aef6b4`. Preserve it.
 
 ## Next work, in order
 
-1. Complete the chat rendering-window unit: run focused UI, grouped Chrome and `npm run check` on frozen source,
+1. Complete the launch capture-tooling unit: run fast/tooling checks and `npm run check` on frozen source,
    commit it, copy the unpublished local commit into the separate public
    checkout, compare Git trees, push without force and inspect public CI.
    Record exact SHA and receipt.
@@ -163,10 +166,10 @@ Timer proposal from job `811bdb98-bcbb-4b65-80b9-f19693aef6b4`. Preserve it.
    limits, qualify output and cancellation, and explicitly enable one role at a
    time. Current names are hypotheses, not benchmark results.
 5. The changed Commons snapshot still hydrates the full document in the UI.
-   The pending latest-40 window bounds initial DOM work; network bytes remain
+   The latest-40 window bounds initial DOM work; network bytes remain
    unchanged. Measure snapshot transfer on larger actual histories before deciding
    whether cursor reads justify a partial cache. Preserve revision and reading
-   position. Product Hunt needs verified image sizes and a
+   position. Product Hunt now has checked-size assets and still needs a
    human maker; HN prohibits generated submission text. Do not post in this
    mission.
 
@@ -179,7 +182,7 @@ Timer proposal from job `811bdb98-bcbb-4b65-80b9-f19693aef6b4`. Preserve it.
 > `docs/HANDOFF-2026-10-19.md`, and `docs/MISSION-2026-10-19.md`. Recheck Git
 > state and `npm run doctor`; use `npm run map -- <area>`. Preserve all runtime
 > data, credentials, earlier model receipts, and separate Git histories.
-> First confirm public CI for `64704c6` and complete any dirty chat rendering or
+> First confirm public CI for `4b1238c` and complete any dirty launch tooling or
 > handoff unit. Then reproduce and improve one
 > concrete browser or transaction journey, using focused checks and the full
 > `npm run check` on frozen source. Keep model-backed catalog roles disabled;

docs/MISSION-2026-10-19.md

@@ -12,7 +12,7 @@ Start: 03:46:17 UTC. Deadline: 15:46:17 UTC. Final integration reserve begins 14
 
 ## Current action
 
-Finish the measured Commons chat rendering window and reproducible UI benchmark. Validate the held-out history/anchor journey, focused UI and grouped Chrome, then run the frozen full gate. Commit and publish with tree comparison. The final integration reserve still begins at 14:16:17 UTC.
+Finish the reproducible launch capture command and checked image set, run fast/tooling feedback and the frozen full gate, then publish with tree comparison. Next audit model/provider source evidence and unmet mission criteria. The final integration reserve still begins at 14:16:17 UTC.
 
 ## Decisions and limits
 
@@ -59,7 +59,10 @@ Finish the measured Commons chat rendering window and reproducible UI benchmark.
 - 06:14 UTC: PR inspection unit committed as local `c394536` after full gate 66/66, source hash `c37587cb`; receipt `runtime/verification/scenario-pr-full-2026-10-19.json`. All 13 changed files matched by SHA-256 and tree `d070266` in the public checkout. Normal push produced `64704c6`; [CI run 39208716434](https://github.com/antropos17/commit-zero/actions/runs/39208716434) passed all three jobs.
 - 06:20 UTC: new browser benchmark measured a routed 1,000-message read-only fixture before/after a latest-40 chat window (five cold contexts and one warmup each). DOM elements fell from 8,224 to 547; p50 228.25/212.72 ms is descriptive only, not a general speedup claim. Full snapshot bytes remain 926,125. A separate 147-message browser fixture passed anchor preservation, new-message appends, explicit earlier loading, oldest-message task linkage and narrow axe. Details and raw-receipt paths: [measurements](WORKFLOW-MEASUREMENTS.md). Focused/full gates remain.
 - 06:24 UTC: `check:fast` passed 9/9 and `check:ui` passed DOM/axe 2/2, build and serving. Three fresh-service Chrome groups passed 11/11, including the held-out chat history and existing first-run/conflict/recovery journeys. Full frozen gate remains before committing the rendering-window unit.
+- 06:27 UTC: chat window/benchmark committed locally as `6bab440` after frozen full gate 66/66, source hash `20deff88`; receipt `runtime/verification/chat-window-full-2026-10-19.json`. All 15 changed files matched by SHA-256 and Git tree `77c4ae2`; normal push produced public `4b1238c`. [CI run 39210013058](https://github.com/antropos17/commit-zero/actions/runs/39210013058) passed all three jobs.
+- 06:33 UTC: resumed the same worker after an explicit liveness checkpoint ended the preceding turn. Repository commands and publication had continued since the 06:05 capacity restart; no second worker or inference was used. The deadline/reserve are unchanged.
+- 06:34 UTC: `npm run capture:launch` produced actual Chrome viewport PNGs at Product Hunt's documented recommended dimensions (two 1270x760 gallery images and a 240x240 current app mark), visually inspected and copied with SHA-256 equality to `docs/media/launch-2026-10-19/`. A missing-browser fixture exited with error and replaced the manifest with `failed`; the next successful run replaced it with `captured`. Both invocations exited after awaited service cleanup. No retained database, model task or external submission was involved. [Distribution](DISTRIBUTION.md) now includes captions, provenance and human launch prerequisites. Full gate remains.
 
 ## Next checkpoint
 
-Finish the chat rendering-window unit, run the frozen full gate, then commit and publish through the separate checkout after tree comparison. Continue bounded implementation. Keep the final 90-minute reserve from 14:16:17 UTC.
+Finish the capture-tooling unit, run the frozen full gate, then commit and publish through the separate checkout after tree comparison. Continue bounded implementation. Keep the final 90-minute reserve from 14:16:17 UTC.