[ORESoftware]

Scope

Independent three-platform certification for the first frozen, offline native zed-tool profile slice in zed-pkg/zed-cli#236.

Current immutable pins:

• product: zed-pkg/zed-cli@fdaf48d0ee0e132820b8fd69e0d114a365c07745;
• shared interfaces: zed-pkg/zed-interfaces@a23cdd2ac509a39ca6fd6d21a3774fdd3a0f7660;
• certification head: b9598815e005eb46cf58b8c389afd8aeea9a6a91.

Contract

The harness constructs its own deterministic archive and portable JSON EnvironmentLock; it imports no product implementation code. Ubuntu 24.04, macOS 15, and Windows 2025 require:

• portable verification and exact-target listing;
• authenticated cache-only installation with unreachable registry/proxy configuration and malformed saved credentials;
• real execution of the installed command and alias;
• byte-stable unchanged replay;
• shared cache and content-addressed store reuse;
• failure-atomic rejection of missing, tampered, wrong-size, collision, online-mode, plan-digest, and unsafe-target inputs;
• project-relative, secret-free profile state;
• immutable harness, product, and interfaces checkouts.

Defects found and repaired

This independent gate found three product issues and one harness issue:

1. failed installs left newly created empty .zed/tools/v1 parents;
2. Windows copied an executable successfully but called sync_all() through a read-only File::open handle, producing OS error 5;
3. strict Clippy rejected a test fixture that mutated EnvironmentLock::default() after construction;
4. the Windows canary passed literal quote characters inside the cmd.exe /C argv element.

The exact repair was first materialized and proven in workflow 31264325401:

• focused library tests: green;
• compiled CLI tests: green;
• strict all-target Clippy: green;
• complete Windows black-box profile contract: green;
• exact formatted src/tool_profile.rs SHA-256: 2749b999c67cf2fc609db22b8cb784ce6b1db2284df376225fedbec56a41c442.

A self-removing product workflow then applied those exact bytes, reran the Windows product contracts, pushed product head fdaf48d…, and deleted itself. The temporary test-org materializer has also been removed from this branch.

Promotion rule

The only final evidence is the current exact-head matrix on b9598815… pinned to fdaf48d…. Prior runs are diagnostic and superseded. Keep draft until product quality plus Ubuntu, macOS, Windows, and the generated-harness contract are terminal-green.

Merge this independent certification first. Merge zed-cli#236 only after its own required exact-head workflows are terminal-successful and review threads are resolved.

Linear: DEN-2923, DEN-1437, DEN-1482, DEN-1442

Product PR: zed-pkg/zed-cli#236

[linear-code]

DEN-2923

[ORESoftware]

Superseding Windows evidence run — August 8, 2026

Run 31263879376 established that the product write-handle repair works: installation and unchanged replay succeeded on Windows. Its remaining failure was the canary's own cmd.exe quoting, which supplied literal quote characters inside one argv element.

Current test head f25d26a72d0ad79050967bcafef0ccd6090f1424 corrects that harness boundary and starts exact runs 31264325390 (full quality/Linux/macOS/Windows matrix) and 31264325401 (constrained Windows product materializer). The materializer also checks strict all-target Clippy, the Windows copied-command unit regression, focused CLI tests, and the full black-box contract before uploading exact product bytes.

The temporary materializer workflow will be deleted before this PR is promoted. Older Windows runs are superseded and will not be counted as final evidence.