[ProfSynapse]

Summary

Supersedes #267. This branch merges its exact predecessor commit f42b078d160d8040c50b5b6e7ae24e4e84a25b4b onto completion 0d515ae1ae235d0858802228ce4af8dba8fccd03, then repairs the diagnostic helper and evidence claims. Please leave #267 open for the parent to close after this review.

• Claims a unique retained diagnostic container before create; authenticates daemon, image, container ID/name/label, and Docker client before start. Separates create/start/terminal inspection. On deadline or uncertain start, issues at most one bounded stop to the authenticated new container and verifies terminal state separately. An uncertain create or stop remains consumed; no automatic replay or removal.
• Caps combined Docker CLI stdout/stderr at 8 KiB during streaming, requests one-file 1 MiB JSON log rotation, and limits child output to closed codes. A 120-second execution deadline has an additional bounded cleanup and inspection tail; stop acknowledgement alone is not quiescence.
• Requires independently admitted r2 source-lock, manifest, and closure hashes in guarded mode. The trusted checked-in verifier hashes every staged worker member before mounted code executes. The result binds these source identities.
• Corrects the r4 120-second container claim without relabeling r4 PASS. Documents the exact retained r2 launch boundary, unresolved context differences, and the concrete CPU-only successor command for root review.

Verification

/home/profsynapse/Code/Synaptic-Tuner/.venv/bin/python -m pytest --noconftest tests/scripts/test_diagnose_docker_torch_import.py tests/runtime/test_offline_sft_worker.py -q — 75 passed.

python3 .skills/scripts/sync_skill_trees.py --check — in sync. git diff --check — clean.

No Docker container was launched, no training was replayed, no GPU/model/package/image action occurred, and HF remains paused. The next diagnostic command is a proposal only; root must review the helper bounds and exact scope before any container launch.