Release readiness — 2026-09-10

Codex-9e8r6t /root/release_audit (distinct host from Codex-956atf). Original audit inspected 1797516; later application integration and native Windows work are root-owned. Reports: harness/release-readiness-audit-20260910.md, harness/release-wsl-readiness-20260910.md, harness/release-packaging-implementation-20260910.md and the independent packaging review.

Packaging corrections

The original packaging absence/link/context findings are superseded by the implemented Windows/Linux packagers and package-local documentation closure. scripts/package-linux.ps1 accepts prebuilt x86_64-unknown-linux-gnu inputs, validates ELF imports and emits a deterministic tar.gz without building or downloading. package-common.ps1 and Python 3.11 stdlib package-artifacts.py share document/checksum/provenance checks. Strict existing notices now select desktop/server or server-only roots. Docker uses an allowlisted repository context plus an explicit server_notices named context, verifies compiler/target/lock/shared-input/local-source/notice hashes before compiling, and retains notices in the image. See docs/linux-packaging.md and docs/windows-packaging.md for exact runner-independent commands and limits.

Independent review reproduced four defects, all fixed/reverified: stale shared/added local build inputs, HTML attribute syntax bypass, ancestor Windows junction escape, and stage additions during tar readback. Python 11/11 and PowerShell notice/parser contracts pass. A later Linux Rustdoc-font false positive was fixed with comment-only exclusion; actual embedded font path/mapping refusals remain tested and independently reviewed.

Final frozen historical Windows-input packaging check: 557 files, archive SHA256 bc27e398d7268a4ee6e6c52ccc89f32bb0a4a970020ca198963501c49146e8c8. Actual Linux server-only notice collection: 102 packages/178 files; source-snapshot verifier passed. These establish packaging behavior, not current-tree native application acceptance. Current source changes require notice regeneration. Logs reside in .local/packaging-20260910; portable handoff is the tracked implementation report. No application compile, Docker build or native launch by this packaging worker.

Supported Linux probe: failed

Host rebooted 2026-09-10 05:07:04 -07:00. WSL 2.7.13, kernel 6.18.33.2-2, WSLg 1.0.73.2 are installed. Root authorized one isolated supported import into ArcadiaStudio-Release1-20260910 under .local/linux-wsl/release1-20260910 after checking 9,648,353,280 bytes free disk and 4,208,900 KiB free RAM. Canonical archive: 391,541,571 bytes, SHA256 9b2f7730dc68227dd04a9f3e5eab86ad85caf556b8606ad94f1f29ff5c4fd3f5, matched retained official HTTPS checksum (no OpenPGP claim).

Import failed once at 17:38:44 UTC in 1.177 seconds, exit -1: Wsl/Service/RegisterDistro/CreateVm/HCS/HCS_E_HYPERV_NOT_INSTALLED. Windows feature versus VMware nested-virtualization cause was not determined. Postcheck: no distro and no task install directory. No guest shell, apt, build, service or GUI ran; no settings/restart/QEMU/shutdown/unregister workaround occurred. Logs: .local/linux-wsl/readiness-20260910/.

A viable Linux runner or externally corrected virtualization prerequisite is still needed. Real matching current optimized desktop/server archives, extracted native Windows/Linux acceptance, actual container build/runtime and final independent release review remain separate gates. Preserved historical ELF inspection or an inert packaging fixture cannot satisfy them.