# Recorded Pandoc case R3 / Caso registrado Pandoc R3

**BOUNDED_STATIC_RECORDED_CASE.** A small presentation derived from preserved evidence, not the complete private evidence archive or a live converter. R3 changes release presentation/provenance only; the R2 recorder, controls and recorded derivatives remain byte-identical. R2 passed separate local browser/download QA; publication is recorded separately, not proved by this file. Open `index.html` to read offline; no dependency, account or upload is needed. The optional full-ZIP and GitHub links make ordinary hosting requests only when clicked.

## EN — baseline and evidence layers

The unchanged R212 baseline used unmodified official Pandoc **3.12.1**, Windows x64: one version query plus nine conversions, all exit zero, all stderr empty, four unchanged original inputs. Three newly authored synthetic controls distinguish exact citation keys from bibliography targets. Two inline-bibliography controls retain keys but lack the declared exact AST/HTML targets; the own-BibTeX citeproc positive control retains `ref-r212_bib_alpha`. Exit zero does not establish the target contract. No universal defect or repair follows.

`controls/` contains four byte-identical authorial inputs; `outputs/` contains nine unchanged R1 derivatives: formatted ASTs, with only citeproc bibliography metadata path sanitized; template-stripped HTML body text; uncompiled template-stripped Typst body text. They are not raw standalone originals or rendered UI. `data/measurements.json` separates recorded observations from the declared interpretation. `provenance.json` retains source hashes/transformation definitions and the parent package manifest hash. `MANIFEST.json` covers every public file except itself; its hash is bound by an external private build receipt.

R2 changes only the optional execution/recording instructions and bounded presentation. It does not rerun or repair the frozen baseline, run CTTL/Px, compile Typst, demonstrate referenceability/PDF appearance, establish novelty/independent replication, claim endorsement/customers/savings, or create revenue.

## EN — optional separate reproduction

Use **PowerShell 7+** and your own verified existing Pandoc 3.12.1 executable. Keep the entire package layout, including `process-invocation.ps1`, `MANIFEST.json` and `controls/`; downloading only the main script is insufficient. Supply a **new folder you own with an existing parent**:

```powershell
./reproduce.ps1 -PandocPath '<your existing executable>' -Destination '<your new destination>'
```

The script validates control hashes before exclusive destination creation. It refuses existing destinations and does not download, install, delete or overwrite them. After destination creation, **including the version check**, each attempted process has a persisted start intent; a closed result and available captured text are written before the caller throws on failure. Wrong version retains evidence but runs no conversions. Filesystem failures can prevent persistence and propagate as errors; an interrupted start intent is not a completed-process result. No hostile concurrent writer/reparse-point guarantee is made.

Configured waits: **20 seconds execution after `Process.Start` returns; at most 2 seconds termination wait and 2 seconds joint stream-drain wait**. The monotonic budget is not a hard real-time 24-second total: Start/Kill, OS scheduling, filesystem and recording/compilation calls may take additional time. Only the owned direct process handle is killed; descendant cleanup is not attempted/certified. Unconfirmed direct-child exit is recorded as possibly remaining, not clean termination. Incomplete drain is recorded and fails; no pending task is synchronously retrieved.

Each stream retains at most **1,048,576 UTF-16 code units** (2 MiB UTF-16 payload, excluding fixed buffers, object overhead and bounded snapshots); additional text is drained/discarded with truncation counters. Partial/unavailable/cancelled/read-failure states are explicit. Logs are UTF-8-decoded text with replacement fallback, re-encoded UTF-8 without BOM: **not byte-exact raw streams**.

**Review before sharing:** `private-logs/` and converter outputs may contain private host paths/data. They are local and are never uploaded. Structured process results use the recipe's closed logical relative arguments; this is not a general-purpose redactor for arbitrary caller input. Literal exception details are private. A final success receipt is written only after ten successful processes, expected output files and input hash checks; it is not a semantic-fidelity certificate or a claim of complete transcripts when truncation/partial flags are set. The actual Pandoc visitor recipe remains **NOT_EXECUTED** in this package's preparation. Owned synthetic process tests are separate from the original ten converter invocations. Output-byte equality across environments is not promised.

## PT-BR — leitura e reprodução opcional

Apresentação estática delimitada R3, derivada de evidências preservadas; não é o arquivo privado integral ou conversor ao vivo. R3 altera apresentação e proveniência para distribuição, não o gravador R2, controles ou derivados. A publicação fica em recibo separado; a leitura offline não exige conta, dependência ou upload. Links de ZIP e GitHub geram requisições normais somente por decisão do visitante. O baseline original permanece: Pandoc oficial 3.12.1, três controles sintéticos, versão + nove conversões, todos com código zero/stderr vazio e quatro entradas inalteradas. Chaves não são o mesmo que alvos bibliográficos; o controle citeproc positivo deve acompanhar os dois casos inline. Não há demonstração de reparo universal, execução CTTL/Px, compilação Typst, referenciabilidade/PDF, ganho, cliente, economia ou receita.

Para executar por decisão própria, mantenha o pacote inteiro, use PowerShell 7+, Pandoc próprio verificado e uma pasta nova própria com pai existente. O comando acima aceita caminhos entre aspas. Não instala, baixa, apaga ou sobrescreve destinos. Após criar o destino, inclusive na verificação de versão, registra intenção de início e persiste resultado fechado/texto disponível antes de falhar. Falhas de persistência propagam erro; intenção interrompida não comprova término.

Espera de execução monotônica: 20 s após retorno de Start; encerramento até 2 s e drenagem conjunta até 2 s. Não é limite rígido de 24 s: Start/Kill/SO/escalonamento/arquivos podem acrescentar tempo. Só atua no handle do filho direto próprio; não certifica descendentes. Saída não confirmada indica possível filho restante. Captura limitada a 1.048.576 unidades UTF-16 por stream, com flags de truncamento/parcial/indisponível. Logs são texto decodificado/regravado, não bytes brutos idênticos.

**Inspecione antes de compartilhar:** logs privados, exceções e saídas podem conter caminhos/dados locais. Resultados estruturados usam argumentos lógicos relativos, sem upload. Recibo final só após sucesso de processo, arquivos esperados e hashes; não certifica fidelidade semântica. A receita real com Pandoc continua **NOT_EXECUTED** nesta preparação. Testes sintéticos próprios não aumentam as dez invocações do baseline. Leitura em navegador/downloads e compilação Typst são gates separados.

## Scope, attribution and existing intake

Independent work: AI agents (Nexo/Codex) implemented and technically reviewed the case; research/product concepts by Júnior, physician/researcher. No affiliation/endorsement by Pandoc maintainers or OpenAI. / Implementação e revisão técnica por agentes de IA; conceitos de pesquisa/produto por Júnior, médico/pesquisador, sem representação ou endosso dessas organizações.

Potential audience, not validated demand: technical publishing/document migration. Which exact IDs/links must survive? Which formats/versions? What defines acceptance? / Público potencial, sem demanda validada: publicação técnica/migração documental. Quais IDs/vínculos, formatos/versões e critérios de aceite?

Only the [existing GitHub intake](https://github.com/NixEngine/return-brake/issues/4), which may require login, is linked. Do not post private files/credentials/client data. No new form/upload endpoint. Scope, price, deadline, rights/custody and lawful invoicing issuer remain unresolved; no commercial commitment. / Intake existente pode exigir login; sem dados privados, formulário novo ou compromisso comercial; escopo, preço, prazo, direitos/custódia e emissor fiscal pendentes.

## R3 release boundary / Limite da distribuição R3

The ZIP contains this complete 20-file small case folder, not the converter, private logs or baseline archive. Its public hash is provided by the release receipt/hosting record; MANIFEST.json covers the nineteen other files and does not self-hash. Keep the entire extracted layout before any optional local reproduction. The hosted ZIP link intentionally needs the public Site even when this page is opened offline. No private source is uploaded by this page. / O ZIP contém a pasta pequena completa de vinte arquivos, não o conversor ou acervo privado. Preserve a estrutura inteira; MANIFEST.json não calcula o próprio hash. A receita opcional não é executada pela hospedagem.