Count delivered page errors after awaited browser close. Exercise the public harness lifecycle with deterministic negative subprocess cases and retain the unchanged Chromium probes for the real transport. Move the premature-snapshot mutation witness to the deterministic Node suite. Issue: #776 User-Visible: no
16 KiB
Browser guards mutation registry (#659)
This is the reviewed classification of every mutation witness that still needs a browser.
The guideline is 200 (#699: a guideline, not a wall); mutation-gate --check,
npm run inventory and the unit contract all read this same inventory. A new browser guard
must be added deliberately under one reason below, and its mutant because must explain
the concrete browser-only invariant.
test/mutation-gate.test.mjs checks each category count against its listed IDs,
the total against the browser guards in MUTANTS, and both guideline numbers
against BROWSER_GUARD_LIMIT (#767). Category names must agree between the table
and inventory; each current browser guard ID must occur exactly once.
Converted witnesses are not listed here: their registry guard names an explicit node --test
suite. The original #659 conversions also use test/mutation-browser-offload.test.mjs;
new behavioral witnesses execute the consumer directly where possible. Catching the mutant
is verified by the nightly run under PROCESS §2.7, not by a development-time mutation run.
led-unbound-in-view moved to test/led-strip-runtime.test.mjs in #791: its guard
requires a non-null marker absent from runtime devices, whereas the browser's
marker: null fixture exits before the mutated guard. The Node witness checks the
exact surviving strip/owner and its live light; the browser smoke still covers
unbound-strip visibility and cold loading.
glow-static-led-release-skipped moved to test/space-card-led-disconnect.test.mjs
in #794: the real static-card callback must release populated LED state
synchronously, before a detached render can hide missing teardown. A
connection-only negative case suppresses late updates but retains its old
lifecycle; the browser smoke retains visible fade coverage without claiming
that transition events alone prove disposal.
| Category | Count | Why a browser is still required |
|---|---|---|
| Performance threshold | 4 | The witness measures real browser wall-time or frame work; a pure assertion cannot prove the budget. |
| Browser harness integrity | 3 | The mutation breaks page-error, round-trip or page-registration observation in the browser harness itself. |
| Paint, cascade and layer composition | 42 | The invariant depends on computed CSS, SVG paint, clipping, stacking or pixels produced by Chromium. |
| Pointer geometry and trusted interaction | 50 | The invariant depends on hit testing, pointer capture, touch/keyboard dispatch or live DOM geometry. |
| Responsive DOM layout | 39 | The invariant depends on measured element boxes, responsive breakpoints, native/HA dialog shells or focusable target size. |
| Custom-element and HA browser lifecycle | 104 | The invariant crosses Lit/custom-element lifecycle, browser storage/events, lazy loading or a complete HA-card state transition. |
| Total | 242 / 200 | Above the guideline mutation-gate --check warns rather than fails (#699); each guard above it is held by its own reason in this inventory and its because. |
Measured effect
The measurements below are GitHub-hosted Linux runs from 2026-09-27. They are recorded separately from the policy limit: the limit proves that browser guards cannot grow unnoticed, while timings show the effect actually observed on the shared runners.
| Measurement | Before | After | Observed change |
|---|---|---|---|
| Full-registry wall time | 54:18 (1,017 mutants) | 48:08 (1,028 mutants) | -6:10 (-11.4%), despite 11 additional mutants |
Sum of the six Each test catches its breakage steps |
4:17:19 | 4:12:32 | -4:47 (-1.9%) |
| Longest full-registry shard step | 50:45 | 45:13 | -5:32 (-10.9%) |
| Same converted-witness slice, aggregate time | 33:43.9 | 12:07.7 | -21:36.2 (-64.0%) |
| Same converted-witness slice, critical shard | 8:05.1 | 2:19.3 | -5:45.8 (-71.3%) |
The candidate slice compares the same 83 converted mutant ids in the baseline
full-registry log and in the S7 candidate Validate
36316464432.
It sums the interval between consecutive per-mutant completion timestamps on
each of the six shards. One of the 84 converted ids, active-tab-not-revealed,
was the first completed mutant in its shard, so the log cannot isolate its time
from clean-guard setup and it is excluded from both sides. The complete candidate
run, which also selected registry/tooling mutants outside this converted slice,
finished in 10:03.
The original estimate of three to four hours saved on a full-registry run is not supported by this A/B evidence. The directly converted slice is materially faster, but registry growth and shared-runner variance consume most of that gain in the end-to-end total; only the measured reductions above are claimed.
Reviewed per-mutant inventory
Performance threshold
The witness measures real browser wall-time or frame work; a pure assertion cannot prove the budget.
junction-limit-p3-quadratic-againjunction-limit-p4-bruteforce-againwall-draw-full-preflight-againwall-draw-wall-artifact-discarded
Browser harness integrity
The mutation breaks page-error, round-trip or page-registration observation in the browser harness itself.
benchmark-page-verdict-unwatchedreport-page-errors-skips-round-tripsmoke-guard-forgets-to-register-pages
smoke-guard-blind-to-tail moved to test/smoke-harness-lifecycle.test.mjs
in #776: controlled delivery during awaited close deterministically rejects a
premature counter snapshot. The unchanged Chromium probes still check the
real Playwright page-error channel.
Paint, cascade and layer composition
battery-icon-collapses-glyphbattery-zigbee-captions-under-endpoint
The invariant depends on computed CSS, SVG paint, clipping, stacking or pixels produced by Chromium.
The #798 Zigbee witnesses exercise the mounted SVG for local and parent-bubble routes in both themes and at minimum/default/maximum plan zoom. Unknown-LQI outlines must scale with the plan, including live CSS projection; known-LQI parent routes must retain the same line/arrow color as local routes.
daycycle-outline-not-promoteddaycycle-outline-promoted-on-inner-paperdaycycle-static-outline-promoted-on-inner-paperdecor-restored-below-room-fillsdevice-keyboard-bypasses-click-pathdevice-long-value-ellipsis-restoreddevice-unavailable-hover-restoredglow-entry-initial-opacity-skippedgolden-filled-tunnel-removedgolden-lamp-out-of-reachhatch-static-renderer-untouchedhatch-stroke-not-scaledhatch-zoom-compensation-backiso-first-frame-reveals-flat-during-lazy-loadiso-room-label-44-box-centres-nameiso-sun-card-drops-occludersiso-sun-flat-wedges-remainiso-theme-dark-wall-rule-returnsled-badge-droppedled-core-white-under-glowled-zoom-coarse-midpoint-wrongled-field-endpoint-droppedled-field-disc-cancels-fanled-field-compound-clip-childrenled-field-circle-events-missingled-icon-not-suppressedled-source-stays-round-at-anchorled-static-live-ignoredstage3-w4-device-target-loses-44px-floorstage3-w5-runtime-nudge-writes-storagestage3-w6-no-borders-keeps-raised-platesstage3-w7-sun-state-enters-structural-keysun-ray-origin-cache-ignoredsun-ray-origin-save-forced-innervalue-static-icon-keeps-live-vacuumvalue-static-icon-keeps-route-warningvalue-static-icon-keeps-vacuum-overlayzigbee-topology-parent-lqi-discardedzigbee-topology-unknown-arrow-outline-removedzigbee-topology-unknown-outline-ignores-plan-zoom
Pointer geometry and trusted interaction
battery-passive-frame-intercepts-pointer
The invariant depends on hit testing, pointer capture, touch/keyboard dispatch or live DOM geometry.
align-guides-exclude-dead-sourcealign-point-reads-frozen-snapshotdecor-default-style-debounce-cutdecor-default-style-seed-cutdecor-keyboard-nudge-drops-focus-dialog-guardsdecor-keyboard-nudge-reruns-magnetdense-device-hit-browser-skips-painted-prioritydouble-fit-bypasses-canonical-fit-allfurniture-art-editor-adopt-skippedfurniture-edge-handles-steal-the-cornerfurniture-exterior-surface-removedfurniture-shift-listeners-not-attachedfurniture-wall-runtime-drops-drag-sidefurniture-wall-runtime-drops-raw-intentled-pan-adds-pointled-pinch-calls-actionled-zoom-quality-never-coarseled-zoom-noop-clears-leaselive-pinch-compositor-demoted-on-active-lit-commitopening-dimension-overlay-hiddenopening-search-hides-noneopening-search-select-not-wiredplacement-accepts-any-mouse-buttonreorder-skips-materializationresize-history-boundary-repair-removedresize-label-uses-old-room-gear-centreresize-labels-hide-narrow-arearesize-pointer-capture-removedresize-preview-reject-silentroom-fit-html-overlay-jumps-aheadroom-fit-pan-release-reacceptedroom-fit-persists-zoomsafe-resize-commit-preflight-bypassedsections-editor-transition-uses-window-heightsections-grid-drops-stage-flex-chainsections-grid-falls-back-to-viewport-heightsections-resize-drops-stage-refit-observerspace-card-decor-capability-change-not-adoptedspace-card-decor-capability-downgrade-does-not-clear-assetstab-drag-outlives-the-cardtab-drag-survives-release-outsidetab-drag-target-follows-captured-sourcetab-drop-indicator-always-beforetab-drop-outside-commits-last-targettab-reorder-not-persistedtouch-pinch-marker-hold-rearmedtouch-pinch-zoom-persists-per-frameunavailable-toggle-stays-silentwall-draw-rejection-rollback-skipped
Responsive DOM layout
zigbee-tooltip-collision-bypass
The invariant depends on measured element boxes, responsive breakpoints, native/HA dialog shells or focusable target size.
dialog-ha-disconnected-reject-reopen-enableddialog-ha-rejected-close-reopen-disableddialog-native-reconnect-recovery-disableddialog-native-surface-stretches-to-viewportdialog-native-update-recovery-disabledfit-house-hidden-walls-votegrid-scale-imperial-roundtrip-driftgrid-scale-opening-hit-unscaledgrid-scale-opening-symbol-unscaledgrid-scale-plan-chrome-unscaledgrid-scale-static-factor-missingheader-menu-item-below-44header-menu-outside-tap-reaches-planhidden-room-names-compact-svg-fallbackhidden-room-names-full-svg-fallbackhidden-room-names-iso-overridehp-dialog-ignores-flex-contentpanel-readonly-empty-bypasses-write-capabilityphone-editor-close-hidden-with-mode-buttonsphone-header-at-tablet-widthphone-header-shows-titlephone-header-wrapsstatic-card-descendants-hit-testablesummary-dialog-drops-flex-contentsummary-picker-hot-add-stays-filteredtab-editing-without-write-accesstoolbar-active-highlight-stops-at-tabtoolbar-close-back-inside-tabtoolbar-close-hidden-at-medium-widthtoolbar-close-slot-collapses-outside-editortoolbar-close-slot-idle-focusabletoolbar-close-slot-leaves-mode-grouptoolbar-close-target-below-24toolbar-device-count-returnstoolbar-mode-zoom-gap-regresseswarm-dialog-drops-transferred-baselinewarm-resume-collapses-pending-headerwarm-memo-publishes-torn-header-stage-pair
Custom-element and HA browser lifecycle
wall-face-lineage-skips-post-reconcile-settlement (#804) needs the production room
dialog, post-reconciliation runtime wiring, history, asynchronous config/set and
reload. Pure lineage-helper tests cannot prove that the editor actually settles
residual-owned IDs before the strict wall-model barrier or rolls rejected writes back.
The invariant crosses Lit/custom-element lifecycle, browser storage/events, lazy loading or a complete HA-card state transition.
accepted-marker-rolled-back-by-layout-failurearea-relocation-clears-whole-historyarea-relocation-loses-position-on-refusalbackdrop-busy-dismiss-races-decisionbackdrop-downscale-drops-alphabackdrop-phase2-falls-back-to-originalbackdrop-probe-always-safebarrier-cache-never-invalidatedcamera-anchor-from-presentedcamera-cancel-loses-zoomchild-readd-clears-parent-tombstonecold-view-toggle-delegated-to-runtimecold-view-vacuum-mapid-delegatedcolor-picker-confirm-click-throughcolor-picker-invalid-confirm-latch-removedconfig-updated-event-ignoredconfirm-dialog-loses-alertdialogcurrent-rejected-physical-write-keeps-optimistic-walldanger-confirm-back-into-the-branchdanger-confirm-lost-space-request-guard-removeddanger-confirm-lost-space-transition-cancel-removeddanger-confirm-uses-last-rendered-language-gatedanger-confirm-warm-language-guard-removeddanger-confirm-warm-transition-cancel-removeddaycycle-programmatic-camera-skips-safe-outlinedevice-echo-keeps-local-noncanonicaldevice-focus-tooltip-blur-cleanup-removeddevice-focus-tooltip-handler-removeddevice-focus-tooltip-room-hover-overwritesdevice-inbox-batch-rollbackdevice-markers-rendered-without-keysdevice-pointer-leave-clears-focus-fallbackdevice-position-cancel-routed-to-commitdiscovery-reset-writes-a-copyeditor-neutral-escape-does-not-exitempty-space-cleanup-disabledfixed-floor-transition-guard-bypassedfloor-geometry-key-global-epochfloor-geometry-key-ignores-contentfrench-locale-wrong-dictionaryglow-barrier-render-pass-wiring-skippedglow-static-ready-after-disconnecthousehold-enter-stops-actinghousehold-marker-drops-keyboard-reachhp-dialog-escape-does-not-closejunction-limit-baseline-cache-stalejunction-limit-candidate-fail-openjunction-limit-write-gate-removedled-auto-slot-reservedled-hidden-marker-loads-chunklocale-failure-toast-droppedmarker-reject-keeps-optimistic-candidatemarker-rollback-keeps-enqueue-time-revisionmoon-static-clock-tick-offnamespace-loader-returns-englishnear-axis-authoring-snap-bypassedonboarding-loader-skips-namespace-ensureopenings-rendered-without-keysplan-only-preview-label-hiddenplan-room-area-icon-hiddenplan-room-area-icon-navigatesplan-upload-client-limitplan-upload-guard-originalplan-upload-reduced-over-limit-stagedpost-write-tail-runs-on-refused-gatereadonly-view-syncs-new-devicesrender-invalidation-renders-irrelevant-harender-reconcile-restarts-editor-runtime-cyclereopened-room-from-registry-spaceroom-accept-leaves-coincident-partitionsroom-gear-second-touch-keeps-dragroom-settings-click-does-not-openroom-tooltip-off-skips-pointer-modalityrooms-rendered-without-keysrooms-rendered-without-space-keysame-space-room-change-recentersspace-card-rooms-rendered-without-keysspace-create-hidden-display-overridestairs-view-pan-opens-target-floorstairs-view-tread-linessupport-invalid-response-leaks-issued-tokensupport-stale-preview-response-revives-consentsupport-timeout-claims-successvacuum-overlay-back-to-the-dock-space-filterview-current-space-aria-removedvolumetric-kiosk-ignores-settingwall-face-apply-skips-overlap-guardwall-face-lineage-skips-post-reconcile-settlementwallthick-hit-narrowedwarm-late-resume-beats-user-modewarm-late-resume-crosses-spacewarm-pan-during-runtime-keeps-refit-blockedwarm-pending-mode-leaves-revive-waitingwarm-resume-camera-depends-on-dialogwarm-resume-overwrites-view-return-camerawriter-history-skips-finished-chain-normalizationzigbee-topology-endpoint-cleanup-skippedzigbee-topology-endpoint-elevation-removedzigbee-topology-hovered-endpoint-elevation-removedzigbee-topology-overlay-double-live-projectionzigbee-topology-overlay-layer-loweredzigbee-topology-solid-route-dashedzigbee-topology-unknown-casing-removedzigbee-topology-unrelated-markers-raised