[2026-10-16] eagle: work/projects/cpm-readiness-telemetry-tech-design-2026-10-15.md

work/projects/cpm-readiness-telemetry-tech-design-2026-10-15.md

@@ -129,3 +129,13 @@ None.
 **Localization / Internationalization**
 
 None.
+
+## App-hosted validation, 16 October 2026
+
+A separate local suite now runs inside the signed `DuckDuckGo.app`, using actual AppDelegate lifecycle/flag callbacks, Tab/MainWindowController/WindowsManager, macOS WebExtension providers/native delegate, production monitor/recorder and system WebKit. Worktree: `cpm-e2e-init`, `macOS/IntegrationTests/CPM/`; scheme `CPM Integration Tests`, without profile-cleaning pre-actions. No commits or PR changes.
+
+The ten core methods passed together (`signed-core.xcresult`, 0 failures): healthy baseline, slow HTTP document, slow native settings, one failed navigation followed by recovery, persistent single-tab failure, several tabs in one window, all windows including a newly opened tab, automatic M4 recovery, dashboard-transport negative control, and a runtime diagnostic-proxy flag cycle. Healthy checks require page-side initResp as well as a forwarded real native dashboard message. Fault scopes are injected into a temporary extracted copy at the extension messaging boundary; navigation/monitor events are not fabricated.
+
+Observed library metadata: message loss gives `init_stage=none`; delayed settings gives `received`, then recovery on `failed_navigation` (`4s_to_10s`); a missing dashboard confirmation despite page receipt gives `response_sent`; later-document recovery is `later_navigation`. These are metadata captured before the platform pixel adapter/daily deduplication, not proof of an actual production HTTP payload or production causal attribution. JSON artifacts contain only owned fixture page URLs and test observations; pixel parameters remain the existing bucketed metadata.
+
+Additional app/WebKit characterization tests cover real shared-pinned-window closure, main/embedded flag transitions, startup race, process termination, slow idle wake and the real error-6 load timeout. Their final outcomes and the preserved red experiments are tracked in [[cpm-status-2026-10-15#13. Integration tests в настоящем приложении — работа начата]]. iOS lifecycle and natural listener-metadata loss remain unproven by the macOS suite. The initial unsigned CLI workaround was unnecessary; the original project signing configuration builds successfully and is used for the reported results. The temporary vault bypass has been removed.