Checkpoint web parity through Chromium input tasks

docs/status/M13-03G.md

@@ -0,0 +1,43 @@
+# M13-03G Status
+
+status: done  
+task: same-session sandbox recovery and audit continuity  
+updated: 2026-08-19 America/New_York  
+enablingTask: false  
+parityStateChange: false
+
+## Scope
+
+A denied script request can be resumed in the same session after a Worker generation change from 4
+to 5. The Main revision remains 11, and the source and canonical manifest hashes remain stable.
+Two default-deny audit entries use distinct request IDs, sequence 1/2, and a continuous
+`previousEntrySha256 -> entrySha256` chain. Replay and source-hash tampering are rejected. This task
+does not enable Python execution or claim Blender server isolation.
+
+## Evidence
+
+- `node --test web/tests/unit/script-sandbox-recovery.test.mjs` passed 2/2.
+- `CHROME_PATH=/usr/bin/google-chrome-stable WEB_TEST_PORT=5535 npm --prefix web run test:script-sandbox-recovery` passed unit 2/2 and Chromium Worker E2E 1/1.
+- `node tools/web/check-script-sandbox-recovery.mjs` passed:
+  `script-sandbox-recovery-ok generation=4->5 revision=11 sourceStable=true manifestStable=true sequence=1,2 chain=true replay=SCRIPT_MANIFEST_INVALID tamper=SCRIPT_MANIFEST_INVALID next=M13-04A`.
+- `npm --prefix web run typecheck`, `npm --prefix web run lint` and `git diff --check` passed.
+
+## Artifact Hashes
+
+- protocol: `8034faded657d49e1376ea42051bc302a090b485024a9ff3781e46aa82638b64`
+- worker: `7b02331c375d4fb7dbadadd179f0ab9a0e336c8b95fabb071c06e67f3e7b3fe4`
+- checker: `612015a3fca44bae0f0b78e622f044a5297ed8aa3a0efc774a40f0d47ddbdc9e`
+- unit: `69a2d34e38d591043ff62b2d305bd9aae684ecebd9ecba718580d77318931226`
+- e2e: `73176e513f115ba917be74f62a5deb8fe2918fafa8a84c9294e80d2a86b8f1ed`
+- package: `3df02b6049ac5d7185c23aef7764933ee460fedeb6595b3861272b0d49da5ecd`
+- report: `9057b3f49c3bb15cf53d638ada4bd2743949d3914173cd3799414489d584111d`
+- manifest: `5cd365eeebbd6a7f56f380af103b66f2beb11eb49cb6db6adb49972b572cf2ec`
+
+## Next Task
+
+`M13-04A`: create an unpredictable one-shot directory for each real Blender server job.
+
+## Rollback
+
+Remove the recovery protocol, Worker, focused tests/checker, report, manifest, package command and
+this status entry; restore M13-03F as the queue tail and move `nextTask` back to `M13-03G`.