fix(release): carry native Intel DMG inspection evidence

[nullStack65]

Fork candidate run 37619216463 built the Intel DMG but failed qualification because Linux could not read its packaged provenance. The Intel Mac build now emits inspection evidence bound to the exact DMG digest and carries it through the existing desktop artifact into qualification. Failed nonnative extraction leaves inspection unavailable so matching native evidence can supply it; missing/stale evidence, invalid metadata and authoritative native inspection failures still block.

The reusable workflow defaults this opt-in off. Native acceptance, promotion, signing and checksum gates remain intact. This repairs the required Intel x64 path; ARM64 remains unqualified by this repair and stays disabled for the planned release.

Validation: 30 focused workflow/inspector/manifest tests, scoped scripts typecheck, formatting, targeted lint, whitespace and YAML parsing passed. Distinct Luna technical review found no Intel x64 blocker. Final exact-head normal CI 37633977181 and fingerprint 37633977169 passed on 47e9cc1. Conditional native-analysis/preview skips are not native acceptance.

Successor source repair for merged PR #20, which remains the shared release/operational record. Based on main 404501a, containing merged #7/#10/#11/#13/#21/#22. Hosted candidate execution and installed acceptance remain separate; no provisional install or release publication.

Model/harness: native Codex delivery owner with GPT-6 Luna implementation and distinct independent technical review.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Repository: nullStack65/t3code/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: cbca6328-e9cd-4ea7-90ad-0c09de22c18c

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[nullStack65]

Independent technical review — non-voting

Reviewed the Intel x64 workflow/evidence path and focused inspector/manifest regression. Native runner emission binds exact repository/source/version and DMG digest; existing artifact upload/download consumes the evidence; missing or stale proof and authoritative native unreadable metadata remain failures. Generic callers default off. No blocking Intel x64 defect found; ARM64 remains unqualified/out of scope and disabled for this candidate. No formal vote or reviewer request.

Validation: 30 focused tests passed, scoped format/lint and whitespace passed. Normal exact-head CI 37633379236 is running on 7a0c6139fd5806379b399b8899d460cfa35aa120. Five remote files are published on exact current-base tree 404501a; local release/verifier files were checked against that remote base before publication. Full integration evidence is pending hosted CI, not claimed from the older local checkout.

Separate native GPT-6 Luna implementation and read-only review; Codex delivery owner retains merge and release gates.

[nullStack65]

CI repair published nonforce at 47e9cc1d00929a7ad18cc3001ddd80592e827b11: the new synchronous Node fixture test now declares the established file-local nodeBuiltinImport boundary with a precise fixture rationale. No assertions, production code or CI/provenance gates changed. Scoped scripts typecheck, file format, targeted lint and whitespace passed; distinct Luna review of this minimal delta found no blocker. The earlier head's Check failed on the two TS377057 fs/path diagnostics; it is superseded, not waived. Normal CI on the new exact head will supply full integration evidence.

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	13.6 KiB	13.5 KiB	−7 B (−0.1%)	15.1 KiB	✅
Codex	Thread snapshot wire	7.1 KiB	7.1 KiB	+4 B (+0.1%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.4 KiB	6.4 KiB	−11 B (−0.2%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	56.2 KiB	56.2 KiB	0 B (0.0%)	66.4 KiB	✅
Codex	Live turn messages	9	9	0 (0.0%)	21	✅
Claude	Total thread wire	13.6 KiB	13.6 KiB	−1 B (−0.0%)	15.1 KiB	✅
Claude	Thread snapshot wire	7.1 KiB	7.1 KiB	−3 B (−0.0%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.5 KiB	6.5 KiB	+2 B (+0.0%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	57.0 KiB	57.0 KiB	0 B (0.0%)	66.4 KiB	✅
Claude	Live turn messages	9	9	0 (0.0%)	21	✅

Baseline: 404501a · PR result: 47e9cc1 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 114.1 KiB
• Claude decoded thread snapshot: 114.8 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[nullStack65]

Final source delivery RESULT — PR24 merged by ordinary exact-head guarded squash as cb9636bfede88938f4b2358ba439884c52760b4e, single parent 404501a06b52fe7cc06d93ec5879ee72e3bf3bfc. Landed tree 4b6973cd81a58ec85ec93938c072f31243377889 equals the final tested/reviewed head tree; all five changed files verified byte-for-byte after landing.

Final-head normal CI37633977181/fingerprint37633977169 and postmerge CI37635278267 SUCCESS. Postmerge Check, general Test, all three server shards, Rust, Release Smoke and mobile-change detection passed. Conditional mobile native analysis skipped; no native artifact acceptance is inferred. Thirty focused tests, scoped scripts typecheck, lint/format/whitespace and YAML parsing passed; distinct Luna implementation/review found no Intel x64 blocker. Initial new-test typecheck diagnostic repaired/reviewed and superseded without waiver.

Shared release/operational acceptance remains owned on PR20. Required Intel DMG evidence source gap is repaired; ARM64 remains disabled/unqualified. No workflow dispatch, provisional install, native host worker, release publication, credential/grant changes, backup, force push, bypass, branch deletion or human reviewer vote/request. Exact final candidate and remaining host/receipt/rollback actions are on PR20 and the durable cloud task. Source complete; release remains incomplete.