test(pi): separate submit rejection proof

.project-docs/30-worklog/tasks/20260825-pi-submit-rejected-hotfix-9f3c7a62.md

@@ -98,8 +98,11 @@
   persistent preparation error. Existing runtime/session recovery state remains
   reserved for preparation, hydration, worker, and session failures.
 - Extended the final packaged proof with a Works-shaped endpoint role canary and
-  a real Renderer reject/edit/retry/settle flow. The extension and proxy proof
-  provider modes are protected by a focused wiring regression.
+  a real Renderer reject/edit/retry/settle flow. The endpoint rejects leading
+  `developer`, while an E2E-only one-shot Main service rejection exercises the
+  distinct definite-POST branch before the retry reaches the real Pi runtime.
+  The extension and proxy proof provider modes are protected by a focused
+  wiring regression.
 - Packaging and final artifact/product proof remain pending.
 
 ## Verification
@@ -115,6 +118,12 @@
 - `corepack pnpm run build:vite` — Pass; Renderer/Main/Preload/utility built,
   with existing chunk/dynamic-import warnings.
 - `corepack pnpm run test:electron:windows` — Pass: 2 files / 4 tests.
+- The first packaged proof attempt correctly showed that a Provider HTTP 400
+  after Pi prompt preflight is an accepted-run failure, not a definite POST
+  rejection; it did not restore the draft and the proof failed. The proof was
+  corrected to keep role rejection and definite submission injection separate.
+- After that correction, focused, typecheck, lint, full unit, `build:vite`, and
+  Windows Electron E2E were rerun and passed with the same counts/warnings.
 
 ## Follow-ups