--- phase: verification agent: verification-advisor-supplemental agent_version: 1 report_invocation_id: inv-006 generated_at: 2026-10-14T10:01:00+09:00 concerns_checked: true concerns: - Physical touchscreen device smoke remains unperformed; trusted CDP touch is browser automation. - Baseline evidence proves SSR contract regression, not an old-browser geometry replay. - Cross-origin behavior remains Node harness coverage, not independent runtime origin coverage. - update_plan unavailable; binding tool action not fabricated. --- # Supplemental independent verification Read only prior verification.md, final-doc-ui-audit.md, final-prechange-ssr-regression.log, final-current-ssr-regression.log and operational docs/usage/webgl-display.md. No implementation/design/diff inspection, product/test/source edits, installs, DB or application changes. Current player JS/CSS were executed by HTTP without inspecting their contents. Root supplied fixture DOM contract. The exact unmodified previously uploaded GoraniCoin build was served from its retained temporary directory. ## Previously open concerns reassessed The erroneous java-jar WAR instruction is resolved: current operational guide explicitly explains absent Main manifest and documents the actual successful Java21 Maven spring-boot:run command, plus macOS Java environment setup. No operational-guide failure remains observed. The supplied real HEAD baseline log fails the named SSR stored-ratio/responsive-stage regression (1 failure); the identical current named regression passes (1 pass). This resolves absent independent baseline execution evidence for the SSR contract. It does not retrospectively prove an old browser geometry matrix; prior current 12/12 geometry evidence remains valid. Final documentation advisor report records all 21 unconditional impact-map paths present, three index links valid, all feature-doc links resolved, scoped Impeccable detector findings reviewed as incumbent/out-of-scope and false-positive. Therefore earlier AC8 audit and AC9 root evidence gaps are resolved by supplied scoped audit evidence. Unrelated pre-existing usage index links remain disclosed there. ## Observed Unity menu and trusted touch verification An isolated own Chrome headless instance on loopback18087 and HTTP fixture18086 avoided the unavailable shared Chrome MCP profile. Node22 built-in WebSocket issued Chrome DevTools Protocol Input.dispatchTouchEvent touchStart/touchEnd. Unity document event instrumentation recorded trusted pointerdown(pointerType touch), touchstart and touchend, all isTrusted=true. These are real browser-dispatched trusted events, not synthetic JavaScript TouchEvents; they are still automated emulation and do not represent hardware touchscreen execution. 1. Normal initial viewport500×757: screenshot visibly showed Home and named Shop button. Viewport touch(202,586) produced iframe-local(74.453125,510), and before/after screenshot confirmed Home→SHOP with hardware list and Open Upgrades. 2. Expanded after resize to exact844×390: same iframe and same Unity instance. iframe rect(345.75,60,152.484375,330), canvas CSS152×330, drawing buffer152×330. Screenshot visibly showed SHOP and Open Upgrades. Trusted touch at viewport(466,345), iframe-local(120.25,285), changed to UPGRADES with Fan Tune1 and INSTALL UI. Both screenshots inspected. 3. Return to normal and exact390×844: same iframe and same Unity instance; iframe rect(58.453125,76,273.078125,591), canvas CSS273×591, drawing buffer273×591. Home navigation was exercised before the screenshot. Trusted touch on named Shop at viewport(140.353125,643.36), iframe-local(81.8999939,567.3599854), changed Home→SHOP. Screenshots inspected. Top currency/progress and bottom navigation visible. Coordinates match the current scaled canvas and iframe offsets in both portrait normal and landscape expanded modes. No mine modal obstructed these observations; mining progress changed during the run without preventing the named actions. Resize/return retained game currency/progression, DOM iframe and Unity instance. No observed product input mapping defect. Evidence: artifacts/input-supplemental/normal-before.png, normal-shop-after.png, expanded-landscape-before.png, expanded-landscape-upgrades-after.png, portrait-home-before.png, portrait-shop-after.png, portrait-input.json. Harness server.py/cdp.mjs are session-only artifacts. Expanded event and geometry values above were captured from CDP output and screenshots, not inferred from source. ## Integrity and outcome Original ZIP SHA256 remains02e5272e4086f8f0e2e3a4b41ca4313d5f8862897a1655421f3f1b4315942461. Retained uploaded entry HTML and HTTP-served HTML remain8a9f8aaff7e949b49f4cab1a87c5b6d414db4031b5fb3e268f5102bc40cbcc74. Original ZIP/uploaded HTML were not modified. AC7 named Unity action and trusted automated mobile-touch coordinates now PASS in normal portrait and expanded resized landscape. Earlier 377 Java/11 Node/WAR/actual L2/JSP/12-geometry/fullscreen-state checks stand; doc-only changes do not require full suite replay. No observed defect or rollback signal exists. All automated/runtime observations pass within the explicitly stated baseline and cross-origin evidence bounds. Overall: needs_user_verification for real physical touchscreen smoke, not fail due to an observed product defect. Complete physical-device acceptance is not claimed. Owned fixture server and own isolated Chrome terminated after collection; shared8080/5433 and shared browser untouched. Temporary upload and original ZIP retained. No children; update_plan unavailable disclosed to root. ATP_POOL_RESULT wginput1 1/1 14ce996a.