# AetherDesk AI PC Locked Apply Drill - 2026-07-02 06:34 UTC

## Result

Status: passed.

The disposable apply drill proved the AI PC mutation gate is locked by default on the live backend. The workflow produced a diff preview, an approval record, an apply receipt, and a drill receipt without mutating the target file.

## Command

```powershell
npm run aetherdesk:ai-pc:drill
```

## Evidence

- Base URL: `http://127.0.0.1:5717`
- Drill schema: `aetherdesk_ai_pc_apply_drill_v0`
- Result: `safe-locked`
- Apply status: `locked`
- Mutation enabled: `false`
- Mutated files: `0`
- Final scratch content: `before\n`
- Apply lock reason: `AETHERDESK_ENABLE_APPLY is not set to 1`

Artifacts:

- Diff preview: `artifacts/aetherdesk_diff_previews/pc-diff-2026-07-02T06-34-01-823Z-3b92f9f1.md`
- Approval: `artifacts/aetherdesk_apply_approvals/pc-approval-2026-07-02T06-34-01-880Z-1c31cd5a.json`
- Apply receipt: `artifacts/aetherdesk_apply_receipts/pc-apply-run-2026-07-02T06-34-01-900Z-b04f2495.json`
- Drill receipt: `artifacts/aetherdesk_apply_drill/apply-drill-2026-07-02T06-34-01-905Z.json`
- Scratch target file: `C:\Users\issda\AetherDesk\artifacts\aetherdesk_apply_drill\target-2026-07-02T06-34-01-823Z-3b92f9f1\drill-target.txt`

## Product meaning

This is the first stronger end-to-end AI PC safety proof after route validation:

- agents can create a diff/approval path;
- the apply runner records a receipt;
- mutation is refused unless explicitly enabled;
- the target file remains unchanged in locked mode;
- the receipt explains the exact enabling condition.

## Remaining gap

The locked path is proven. The apply-enabled path is not proven in this report. To prove full mutation and rollback behavior, run the same drill under a deliberately apply-enabled backend and require enabled mode:

```powershell
npm run aetherdesk:restart:apply
npm run aetherdesk:ai-pc:drill:apply
```

Only do that when an operator intentionally wants to test mutation with disposable drill files.