- **udp-loss-shim** body: tokio UDP loopback that drops a
configurable fraction of datagrams. Single-tenant (one client
at a time) — moq-lite is connection-multiplexed by source port,
so 1:1 forwarding is enough.
- **I9** (`packet_loss_1pct_does_not_kill_audio`): routes the
Kotlin speaker through the shim with `--loss-rate 0.01`;
asserts the decoded PCM has ≥ 80% expected sample count and
the 440 Hz tone survives. moq-lite groups are reliable streams
so retransmits absorb the loss.
- **I5** (`speaker_hot_swap_does_not_crash`): drives the
reconnecting-speaker with `tokenRefreshAfterMs = 2_500` to
force a hot-swap mid-broadcast. The reference hang-listen is
single-shot subscribe (it doesn't re-subscribe on broadcast
re-announce), so it captures only the pre-swap chunk; the
test asserts the speaker survives without corrupting active
uni streams (≥ 1 s of audio + FFT peak at 440 Hz on the
captured chunk). The "no audible gap" property the spec
calls for is an Amethyst-listener concern (handles re-announce
transparently); a Phase 3 follow-up would exercise that path
end-to-end through `connectNestsListener`.
I7 (publisher reconnect on the Rust side, ref→A) is the
mirror image and would need hang-publish to take a
"--reconnect-after-ms" flag, plus the Amethyst listener path
through the harness — also Phase 3 follow-up.
https://claude.ai/code/session_01ERJPUYfdLPwZ99pr5EcEcV
Claude
a32b6d6248