**End withdrawn System Logs token reads and show connection loss**
Reuse current credential snapshots with the log route's settings-read
scope and instance authority before history, queued and live lines and
idle checks. Preserve independent readers and session/proxy admission.
Show native connecting, reconnecting and disconnected states in the
existing panel without confusing them with display pause.
Contract-Neutral: Enforces the existing instance-admin/settings:read log
route and unchanged SSE format; connection status corrects the existing
panel. No route, grant or public API shape changes.
**Keep the existing log-panel shell fixture connected**
The shell fixture replaces the full state hook, so include its new
native connection-state projection before running the existing
architecture suite. Production and exercised lifecycle sources remain
unchanged.
**Record native System Logs withdrawal browser verification**
Bind the production log consumer to the real registered route's admitted
SSE frame, persisted deletion EOF, denied reconnect and independent
reader. Retain 31 native browser checks and four inspected
desktop/narrow captures; source and fixture limits remain explicit.
**Keep log safety smoke checks aligned with connection tracking**
Check disposed and paused admission in the actual receive callback, with
connection state updated between them. Preserve all display-only helper
checks and reject removed/reordered guards. Require every negative
control to mutate the source, so an obsolete matcher cannot pass
silently.
---
Fleet candidate `20261031T214001Z-core-runtime` from the `core-runtime`
lane. Reviewed tip `e62320cd99e8d5b14596610bdcb5837a75bdc5c2` on `main`.
[How Pulse handles
triage](https://github.com/rcourtman/Pulse/blob/main/docs/AI_TRANSPARENCY.md)
pulse-triage[bot]
4d35b8b557