From 23cc250c641c2aaa7da9e480799fd930d166a9bf Mon Sep 17 00:00:00 2001
From: cesnimda <connor.babbington@cesnimda.co.uk>
Date: Wed, 9 Sep 2026 18:46:46 +0200
Subject: [PATCH] fix(test): isolate PDF fixture output on Linux

---
 JobTrackerApi.Tests/JobTrackerApi.Tests.csproj      | 4 +++-
 docs/audits/2026-09-07/validation/b06-completion.md | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/JobTrackerApi.Tests/JobTrackerApi.Tests.csproj b/JobTrackerApi.Tests/JobTrackerApi.Tests.csproj
index 77c19b0..891d31f 100644
--- a/JobTrackerApi.Tests/JobTrackerApi.Tests.csproj
+++ b/JobTrackerApi.Tests/JobTrackerApi.Tests.csproj
@@ -22,7 +22,9 @@
 
   <ItemGroup>
     <ProjectReference Include="..\JobTrackerApi\JobTrackerApi.csproj" />
-    <ProjectReference Include="PdfBrowserStub/PdfBrowserStub.csproj" ReferenceOutputAssembly="false" />
+    <!-- Build the fixture, but only our explicit subdirectory copy owns its output.
+         The Linux apphost has no .exe suffix and collides with that directory if copied to root. -->
+    <ProjectReference Include="PdfBrowserStub/PdfBrowserStub.csproj" ReferenceOutputAssembly="false" Private="false" />
     <Compile Remove="PdfBrowserStub/**/*.cs" />
   </ItemGroup>
 
diff --git a/docs/audits/2026-09-07/validation/b06-completion.md b/docs/audits/2026-09-07/validation/b06-completion.md
index 7fab4c6..6a9106b 100644
--- a/docs/audits/2026-09-07/validation/b06-completion.md
+++ b/docs/audits/2026-09-07/validation/b06-completion.md
@@ -318,3 +318,7 @@ The first correction (`f485f72`) attempted to install pinned Compose v5.3.1 thro
 Validation before the corrective push: **3/3 tests through `docker compose` and 3/3 through the real standalone binary** with Docker discovery disabled for the latter fixture; tracked-secret scan and `git diff --check` pass. This corrects a CI dependency assumption; it neither repairs local Docker Desktop nor supplies any missing F04 deployment evidence.
 
 [Run 737](https://git.cesnimda.uk/cesnimda/jobtrackingapp/actions/runs/737/jobs/1609) then failed in the action itself: `Parameter token or opts.auth is required`; deployment again skipped. The final setup uses the [official standalone release](https://github.com/docker/compose/releases/tag/v5.3.1) directly, in a runner-local temporary directory. It pins Linux x86_64 and SHA-256 `f9ebc6ebdb19d769b793c245a736caaeb198c62587f13b25c660c13b4987f959`, verifies before execution, and needs neither a daemon nor an authentication token. A fresh local download matches that official release digest; 3/3 ingress config tests and diff validation pass. Runner execution and deployment are tracked separately from these local checks.
+
+[Run 738](https://git.cesnimda.uk/cesnimda/jobtrackingapp/actions/runs/738/jobs/1611), for `97fce89`, passed Compose installation, all repository safety scripts, browser-extension tests, secret/SBOM checks, parser tests and the Release API build. Test-project build then failed with MSB3021/MSB3024: the Linux `PdfBrowserStub` apphost was copied to an output path already used as the fixture directory. Windows' `.exe` suffix had hidden the collision. The project reference now sets `Private="false"`; it still builds the fixture, while the existing explicit subdirectory copy is its sole output owner. SDK target inspection confirms this disables transitive content copying. No renderer or admission behavior changes.
+
+Local verification: `C:/Users/Connor/.dotnet/dotnet.exe test JobTrackerApi.Tests/JobTrackerApi.Tests.csproj --configuration Release --no-restore --filter FullyQualifiedName~PdfRenderAdmissionTests --logger "console;verbosity=minimal"` built successfully and passed **22/22** tests, including real exporter/fixture failure recovery. A preliminary unqualified `dotnet` invocation could not find the pinned SDK because PATH selected the system runtime; the explicit installed SDK resolved it. Diff checks pass. Linux runner confirmation remains required after push; a build/package fix does not close F04.