# Recorded real sandbox run

- Classification: RECORDED_REAL_SANDBOX_EVIDENCE
- Status: SUCCEEDED
- Run: sandbox-20260717t205034-9f48102b
- Source commit: 4d27eee7eafb9135a8529877d262d3e13ac523da
- Source working tree: CLEAN
- Evidence digest: f3e9eab160e884695df71e4f218730e5932fbab39cbd8768b6ca4e15b1876c77
- Context-pack digest: 13428edb9370abf9ff467da0f39b2028ecce63f0461fd47aed89b1f82aaed273
- Trace ID: 1aa77a6ee7abf5c8ce8f5e6703f51255
- Trace artifact: sandbox-trace-20260717t205034-9f48102b.json
- Trace artifact SHA-256: 12dc204696355623306c71bbd354156e0286e362fba4a9ff3219ba846415150d
- Budget outcome: WARNING
- Tool calls: 3
- Repair attempts: 1
- Model usage: 0 calls, 0 USD (EXACT_ZERO_NO_MODEL)
- Provider: Local Docker
- Runtime image: sha256:adae508da516a8ea332e1b2ed1177ae1b35960a7225d3db1c233b09a9408a8fa
- Network during execution: disabled
- Container user: 65532:65532
- Limits: 0.5 CPU, 256 MiB memory, 64 processes, 30000 ms per command (Docker flags)

## Result

The checked-in synthetic test fails before the controlled patch. For a successful scenario, the build and tests pass after the only changed path, `src/report.js`, is patched.

- pre-test: exit 1 (606 ms)
- build: exit 0 (401 ms)
- test: exit 0 (554 ms)

## Unified diff

```diff
diff --git a/src/report.js b/src/report.js
index dbf3576..3270318 100644
--- a/src/report.js
+++ b/src/report.js
@@ -1,3 +1,5 @@
 export function formatVariance(actual, budget) {
-  return `Variance: ${actual - budget}`;
+  const difference = actual - budget;
+  const direction = difference >= 0 ? "over" : "under";
+  return `Variance: ${Math.abs(difference)} ${direction}`;
 }
```

## Safety boundary

Recorded evidence from an explicitly invoked developer command against repository-owned synthetic fixtures. The static public website does not execute code, accept patches, start sandboxes, or expose this runner as a service.