[mdspinali]

Candidate CI on 2cfd2df1746aa8401a8c6b07cf3e3e9e130e704d failed before both Android suites and during Swift soft-delete integration.

The pinned emulator identity query now selects its headless backend. Trusted probe errors retain bounded diagnostics. Other command output remains private.

Both Android jobs mask the generated database URL before environment export.

The Swift integration helper retries actual synchronization after managed backoff releases ownership. It preserves production admission behavior and final propagation assertions.

Tracks #338, #339, and #340. These issues remain open until their Candidate acceptance criteria pass.

Validation on clean commit b08bb289afdd14e57111ed07dc3b23cc47eab2e0:

• make test-android-emulator-prepare: 91 passed, zero failures, zero skips.
• make test-swift-integration: 394 passed, zero failures, zero skips.
• Independent review accepted the complete correction after the shared deadline repair.
• Two separate focused Make runs passed both soft-delete propagation and stopped-client controls.
• Each focused run passed its structured parser with two tests and zero failures or skips.
• Delete omission mutant 2a9a50fd8eaf1f343d6c9fec470268646578eeb3 failed the soft-delete condition wait as expected.
• Full Candidate validation remains required after checked promotion to master.

The failed Candidate run remains available at https://github.com/trainstar/synchro/actions/runs/38254380399.