App 2.19.1: Foreground apps diagnostic on the Logs tab

Read-only: recent foreground apps (usage events), open tasks,
policy_control and the status bar height, for finding the CarPlay
package before a full-screen experiment.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

SPECS.md

@@ -118,6 +118,15 @@ tyre pressures, GPS (lat, lon, elevation, heading) and the is_* flags. It does *
   confirmed car facts, app structure, UI conventions, build/test/ship, documents. It replaces
   upstream's EVABRPUploader text. The test emulator is now in the flake: `nix run .#car-emulator`
   (Android 9 AOSP at 1920×720, 160 dpi; the car build installs as the system user — checked).
+- 2026-10-23 — App 2.19.1: "Foreground apps" card on the Logs tab, step 1 of the CarPlay
+  full-screen experiment. It reads which apps came to the front in the last 30 minutes (usage
+  events, open to the system user without a declared permission), the open tasks, the
+  `policy_control` global setting and the status bar height — on opening the tab, on returning to
+  it and on Refresh, never in the background. It changes nothing. On the emulator (car build,
+  system user) it named Settings, the clock, the calculator and the launcher with times, and the
+  page still fits 1778×640 with every line filled. The stable build says it cannot read them. Not
+  tried on the car; the CarPlay package name is what this is for. Next: a switch that sets
+  `policy_control` to `immersive.full=<that package>`, on approval.
 - 2026-10-19 — `k8s/agent-access/`: a service account `mg4-agent` for a coding agent, limited to
   the `mg4` namespace. Read-only role by default; an optional deploy role. Neither may touch
   Secrets, exec, port-forward or RBAC; the deploy role cannot delete PVCs. `make-kubeconfig.sh`