[skygunner]

Problem

stateless_full_trace_correlates_only_hashed_openai_window located the tools/list ActionAudit row with durable_rows.last(). Trace persistence is asynchronous, so row order is not a stable identifier for that request: any later row for the same Window makes the assertion fail for reasons unrelated to the behavior under test, and the failure message points at the wrong contract.

Change

Test-only. The test now:

• issues one further unrelated tools/call in the same Window after tools/list, so the tools/list row is no longer expected to be last;
• matches the row by identity (action_name == "toolsList") and requires exactly one match, reporting the whole row set on failure;
• keeps every invariant the positional assertion covered (operation mcp_tools_list, window_meaningful == 0, no recorder gap);
• additionally requires the matched row's trace id to differ from both tools/call trace ids, so a row cannot satisfy the assertion by belonging to another request.

Production logging order and all identity/privacy assertions are unchanged.

Validation

cargo test --locked -p webcodex --lib stateless_full_trace_correlates_only_hashed_openai_window
  -> 1 passed; 3834 filtered out

With the old positional assertion restored (and the interleaved request present), the same test fails:
  assertion failed: left: "toolsCall", right: "toolsList"
  test result: FAILED. 0 passed; 1 failed; 3834 filtered out

This demonstrates the old assumption fails as soon as another request persists after tools/list; the filtered assertion is independent of persistence order. Not run here: Windows/macOS lanes (no environment available).

[yyjeqhc]

Reviewed the scoped implementation and regression coverage against its source baseline; CI and diff checks pass. No blocking issue identified.