[Pepps233]

Summary

Preserve task services between Diffex shutdown and Harbor verification.

The adapter now requests environment-owned background processes, stops agent execution before verification, and retains services with validated ownership evidence until sandbox teardown.

Reasoning

Killing every process carrying the run marker also killed servers that the verifier needed.

Cleanup must distinguish transferred task services from active agent work and must block verification if agent shutdown cannot be established.

Changes

• Add a launcher stop barrier and PID/start-time checks, including protection against launcher death before CLI identity publication.
• Validate durable ownership records, retain environment-owned services, and terminate untransferred work with bounded escalation.
• Record agent shutdown and retained-service evidence separately; preserve failed and interrupted outcomes and block Harbor verification when shutdown is unverified.
• Reconcile lifecycle evidence in offline qualification and trajectory metadata.
• Add deterministic Linux regressions, source-CLI outcome smokes, an upstream gRPC verifier fixture, and lifecycle documentation.

Testing

• npm run check passed.
• .venv/bin/python -m unittest discover -s tests: 142 tests passed.
• Seven Linux cleanup regressions passed as root on arm64 and as a non-root user on amd64.
• 32 controlled source-CLI outcome cases passed across arm64 and amd64, covering success, service failure, forced CLI death, authentication failure, exhaustion, recovery, interrupted output, and timeout.
• All seven unmodified pinned upstream gRPC verifier tests passed on each architecture, with service identity preserved through adapter cleanup.
• All smoke containers were removed; git diff --check passed.

Source-image validation uses the actual CLI and a local faux provider.
It does not qualify the pinned npm release or replace a fresh live benchmark trial.