[rabii-chaarani]

User-approved qualification amendment

User decision2026-10-27: “well then just drop it and keep only current”. Canonical spec rev0.11, fullSHA8a410c7a22f5291f06a1cece5cd9e7c0be255e72, and exact amendment approval replace only D05a with current stable macOS on Apple Silicon only. Drop13.3 execution/older-version support qualification; keep actual current-release final-archive/runtime/failure evidence. Hosted CI may supply it when its actual OS/build and no-external-Homebrew/OpenSSL runtime conditions are demonstrated. Existing13.3 deployment target remains build metadata; productsource855c7e282a27de4afbad2d4252d7692de4b42ecb and previous reviews/archive hashes stay unchanged. Earlier minimum/current limitations are preserved as historical scope. No Windows/otherissueapproval, passingCIclaim, merge/publish/deploy/restart or aggregate closure.

Summary

• Deliver approved COD-54 / CBG-PLAT-01/S03, R03/A05–A06 only: bundle OpenSSL3.6.2 from verified upstream source in macOS ARM64 archives, with relative runtime paths, source license and complete checksums.
• Build compatible dylibs for target13.3, audit direct/transitive imports/minimum metadata, renew and verify ad-hoc signatures before hashing.
• Install the complete verified payload together; real relocated smoke plus missing/corrupt/incompatible-runtime negatives preserve installed bytes. Keep Windows/Cargo/ABI/extension/workflow behavior unchanged.
• One cfg-only import fixes a pre-existing release warning; no materialization or containment logic change.

Authority and source

• COD-54 — do not auto-close.
• Canonical spec rev0.10, full approved SHA1a9db7b558b60248888408daa6268a3b45f2f0df; R03 / A05–A06 only.
• Exact user approval.
• Tested/reviewed product source 855c7e282a27de4afbad2d4252d7692de4b42ecb; subsequent evidence-only commits do not replace that identity.
• Scryer chg-h7rgh8/chg-metn5v, existing claims restored; model instance is older-root orientation, not target-SHA evidence.

Executed local verification

• Final-source release-tool nextest/JUnit: 55/55 passed, 0 skipped.
• cargo fmt --check: passed.
• Strict workspace/all-target/all-feature Clippy -D warnings: passed.
• Exact-source actual optimized macOS archive pipeline: passed (exit0), including official source verification/build, 4 Mach-O audits/signatures, 8 archive files/5 checksums, real installed graph/JSON/reopen/search/wiki/HTTP/MCP and both-mode runtime failure preservation.
• Archive SHA256 e5f32abbf8124584d5f6f2df403091c3323d16a1359a70f387fc99eeeb6e4282, schema1 provenance exactly 855c7e282a27de4afbad2d4252d7692de4b42ecb. Independent Sol/Max reviewer also verified final archive bytes, imports/IDs/minOS13.3/noRPATH/signatures and clean-env installed help/version.
• Fresh Sol/High proposal review GREEN; fresh Sol/Max final review GREEN for bounded implementation/local artifact handoff, no unresolved confirmed P0–P3 defect.
• Full local native suite passed: 1,356 passed,0 failed,4 declared ignored. Head-bound hosted native CI failed in existing macOS quiescence-confirmation and Windows numeric-PID tests; both artifact jobs skipped. Earlier failed build/lint attempts are preserved, not counted as passing.

Qualification and limits

COD-54 remains open. Only current stable Apple Silicon macOS requires qualification under the amendment above; no13.3 execution is required. Actual current-release runtime isolation remains to be reconciled with head-bound CI evidence. Local producer-host metadata/smoke is not consumer execution. Hosted CI has not qualified the archive: both artifact jobs were skipped after native test failures.

Normal graph build/reopen/populated search exercises JSON + disk-BM25; legacy fixture executes real LOAD fts using official bytes, not a populated native-FTS-index query. Ad-hoc signatures are not Developer ID/notarization. Installer uses per-file temp/rename, not an all-file rollback transaction. Other issues, merge, package/release publication, deployment, restart and aggregate closure are excluded.

Durable execution, exact-source archive/JUnit and final independent review evidence at docs-only commit55a54ec5a120849a8fd6fcf433ade6b4d5eb0567. Tested product source remains855c7e282a27de4afbad2d4252d7692de4b42ecb; consumer/full-native/CI gates stay open.

Completed native execution and blockers

Exact full native report, ignored-case accounting and hosted failed-job evidence at docs-only commit1c8d6a3c445620897ed153ebea9842244f94ea2e. Local execution uses captured native-test CLIde3930c3c3daa63b54b6fae59a8e287ce1f929b0e877a6c2bc24814a3157345a, product source855c7e282a27de4afbad2d4252d7692de4b42ecb. Hosted failure run40474966274 does not establish a COD-54 runtime defect, but remains a real blocker: Mac quiescence-confirmation assertion root cause unestablished; Windows numericPID oracle is separately addressed in COD-98/PR157, not included here. No unrelated fix or new consumer qualification job has been implemented. COD-54 remains In Review.