# HP llfix quiet4 with approved scoped helper pause

2026-10-12. The user said **Continue** immediately after the final response
requested approval for a specific temporary pause of helper PID 892412 during
quiet4, with automatic resume. This is accepted for that disclosed action only;
the scope and 15-minute bound were restated before execution. The helper's
current PID/start/parent/group/UID match the already qualified operator target.
No other process or process group is selected for a signal.

The [operator preparation and verified evidence](RECORD_2026-10-12_hp-framework-tx-quiet.md)
remain immutable. HP only; no turbo, IRQ, service, governor or sysctl change.
The same eleven-file source3 epoch, protected llfix 1.0.7 original/framework/peer
payload and positive inactive-service functional2 proof remain the inputs.
This is the older framework ELF scope, not current framework/SDK or Stage 2
llfix 1.0.8 qualification.

## Operation

The home helper waits for an actual high-priority isol-no-shared lease before
pausing the one exact identity with a PID file descriptor. The unchanged idle
step and original 120-second/5% preflight remain required. A successful capture
would execute the same three balanced fresh-process repetitions of each of the
three TX clock arms, with 1,000 warmup and 1,000,000 measured orders per pair.
Ordinary wire/raw/activity review remains outside timing, under shared/high,
after the helper resumes. No native summary alone receives a timing grade.

A durable remote supervisor binds all four operator sources/target-table bytes
and modes to the preceding archive seal before invoking the already qualified
home command. It preserves original return codes, pause/resume/exited/error
receipt and final live identity. No later PID is signalled during that readback.
The worker and host CPU lease survive the bootstrap SSH connection closing;
the known interrupted archive connection is not allowed to strand a paused
helper. Original operator and benchmark source files are unchanged.

## Observed refusal and successful resume

The durable worker starts 04:20:55 UTC; its actual high/exclusive HP lease starts
04:21:29 after the earlier queued fullbench shared qualification. All four
operator inputs and home-script bytes/modes match the prior seal. The exact
helper is observed stopped at 04:24:08 with matching start/parent/group/UID.

The idle step finishes after 210.32 seconds, with 60.09 seconds clear and no
compiler/VM process in any of eight snapshots. Load1 falls from 5.73 to 0.18.
The original 120.01-second preflight then refuses at 04:27:00 UTC: load1 falls
from 0.18 to 0.03 and CPU placement/isolation pass, but PID 222572 (`claude`)
peaks at 15.6% of one CPU. The unchanged 5% activity rule rejects. No native
pair starts, and no ordinary wire/raw audit or timed matrix is produced.

The pause receipt records only stopped/resumed PID 892412, no exited target
and no resume error. Start/end are 04:21:29/04:27:00 UTC: 331 seconds, within
the 900-second bound. Final direct readback finds the same original helper
in state S, with its original start tick, parent, group and UID. Capture SHA256:
`b74144a2f867bc7e2fcd8eea6c6abe80bfcf01338f9b14e0ab199bbd99993d5b`;
pause receipt SHA256:
`37c3560d8eeab6a366c2ab57bed0246e66fe573e85b6bd1c5127f94a0806e0ed`.

A separate 04:30:16 read-only follow-up records the current Claude PID's
start tick 172201469, UID 1000, parent 221952, group 3570 and directory
`/home/yann/code/libhft`. Its current chain leads through Code/Xfce to the
remote desktop session. Two root-owned ancestors' directories are unreadable;
those gaps remain explicit. The frozen preflight lacks the original peak's
start-tick/context record, so this follow-up is not recast as original live
identity attribution. Arguments/environments are not collected. No signal is
sent to Claude, its parent, or any other desktop/session process.

## Reviewable next-step proposal

A fresh quiet5 proposal uses the same already tested PID-fd pause module,
existing functional proof and benchmark gates. The two selected same-user
identities would be Codex PID 892412/start182386193/parent2756020/group892412
and desktop Claude PID 222572/start172201469/parent221952/group3570, UID 1000
for both. The maximum pause remains 15 minutes under an actual exclusive/high
HP lease, followed by restoration of only identities this invocation stopped.
The shared desktop process group, Code parents and root desktop services are
not selected. Replaced/exited/already stopped targets refuse before any signal.
The existing seven child controls include all-target prevalidation and partial
two-target failure rollback; no pause-module implementation change is proposed.

The exact target JSON, `capture-idle5.py` and
`run-llfix-quiet5-with-background-pause.sh` are prepared under this session's
build root. Source adaptation changes only the fresh ops directory/quiet5
attempt and the target table. These files are not deployed or executed.
The earlier permission covered only Codex during quiet4; including the desktop
Claude helper requires separate user approval. No new capture is queued.

## Lossless retention

The actual high/shared retainer seals 25 inputs / 27,118 compressed bytes:
archive SHA256
`8970745993952fef974a6d2ac9d871fb72de158c3b4f2167e8e9aac721a3610d`,
seal SHA256
`98a3687901c5abe943b05cb13c86eda26b1201461561259984cc13ba498dc7c8`.
Archive and fully verified local replica are
`~/archive/libhft/codex-llfix-reference-20261012/hp-framework-quiet4-refusal1.tar.gz`
on HP and locally. They bind the preceding verified preparation archive,
unchanged operator inputs, original idle/preflight/capture/phase logs,
restoration receipt and separate follow-up context.

The first outgoing transport mistakenly selected the preceding preparation
archive. Local member-name validation refuses before extracting it; the wrong
transport and original producer/consumer exceptions remain preserved. A
separate high/shared read-only continuation copies the correct already sealed
quiet4 archive, without rerunning retention or changing its grade. Both copies
pass full stream verification. The successful local transport wrapper is
removed. The [selection index](evidence/hp-framework-tx-quiet4-20261012/selected-files.json)
retains exact compact inputs plus failed-transfer and proposed quiet5 source
bytes: 39 files / 127,982 bytes. No native raw file exists or is excluded for
this zero-pair attempt.

Seven earlier HP pause controls remain the tested implementation; this actual
attempt independently proves the one requested pause and restoration. The
blocking condition is now the separate desktop helper. No SDK, Stage 2,
current-framework, full-session, timing, engineering-target or vendor claim is
promoted. The old active epoch remains available for a future approved attempt.