[rsasaki0109]

A camera or procedural sample could keep stale output visible forever while createImageBitmap never completed. Each bitmap request now owns a five-second application wait deadline and the session's abort signal. Timeout stops capture/worker ownership, clears output and offers explicit restart. Stop rejects the wait promptly; eventual late bitmaps close without submission and late native failures are consumed, protecting replacement capture state.

Validation: reproduce both parent failures with actual browser bitmap completions held; 66 JS tests, 6 asset tests and 69 full browser checks pass with the existing Rust WASM and pinned AI model. Exact timer boundaries, cleanup, listener removal, late completion/rejection, restart and explicit Stop are covered. All seven owned commands are terminal. Preserve 517 prior camera files, 493 scientific JSON and 42 frozen native artifacts; reuse the WASM and 41,087,603 shared vendor bytes with zero compiler-cache growth or new model/sensor acquisition.

The browser-native bitmap operation itself has no cancellation API. This bounds application waiting, not unfinished native work or physical memory across repeated restarts. Physical phone/Safari and the original operational 80% gates remain open.

Contract: benchmarks/camera-capture-plan.json (146AO). Evidence: docs/receipts/2026-10-21_camera_capture.json.

The first Ubuntu Visual conformance attempt terminated in the unchanged native rendering tests with SIGSEGV. The raw log and failed merge-guard records are preserved. The individual crashing test and root cause are unknown; a same-source retry and all 131 required checks are required before merge.