October 4, 2026

Keep source, CI, installed bytes and hardware proof separate. The topbar keeps its name and its device owners; fingerprint matching remains a measured acceptance step.

ViewTop is merged and the joint speech, cache and chooser candidate is pushed. Dictation still needs its trusted sealing path and HPFlip admission.

The retained phone log shows only 8–13% cache reuse before repair. USB health and unchanged configuration are verified; signed delivery remains pending.

The dormant Rust adapter counts cached prompt input as fresh spend and adds writes twice. Keep this separate from live cache-prefix repair.

Record the isolated principal repair and completed speech and overview CI. Live cache splits and seat delivery still need their own proof.

The arch=any shell was composed for x86_64 only, so the phone never got its ii-phone overlay. Each arch now ships its own, and CI rejects a package without it.

Superseding an arch=any file in one database deleted it while the next still served it. Deletion now waits until every database this run touched is verified.

LockContext never entered the manifest, so packages carried ii-base's copy and the hold and PAM wiring never reached glass. A test now fails on any unshipped shadow.

Wi-Fi pins ride NetworkManager's applied settings under a version check, and off retires only our route. Tunnel health is asked through the tunnel, off the lock clock.

The installed font turns the old failure name into a lock and four letters. Use the crossed key and keep the failure reason visible.

A settled decision cannot stand in for a successful route change.\nKeep failed actions visible and retry them through the same owner.

The touch lock never started fingerprint PAM. Follow secure-lock acknowledgement, keep PIN available, and require fresh matching through PAM before fingerprint unlock.

Keep links, bearer decisions and zones with their owners. The bar stays a manually launched candidate until the remaining controls and motion pass on glass.

Record real tool rounds and keep their text intact, so replay preserves what the provider saw. Legacy history retains its existing projection.

Keep living ledger context with its own pass. Fresh counts no longer rewrite the system prefix above every earlier observation.

Recheck authority on every request; keep its clock in health metadata. Unchanged facts can retain the cached conversation prefix.

Same producer, shelf and digest proofs as dictation and fingerprint. The package binds the dialer to the Souveraine session so calls ring with the app closed.

Keep package builds off the archive key. Check the green producer, its shelf receipt and the selected digest before sealing those bytes.

Gitea refused the workflow on the repeated mapping key, so b049f66 never ran.

Test, laptop and phone builds each get their own runner budget; run 8095 died in the one combined job. The phone build links against a declared Arch Linux ARM sysroot.

Pin the patched Axios floor at 1.20.0. Production audit now reports zero high or critical findings; moderate router debt remains under its owner.

Use pinned Debian with available makepkg tools and assemble Arch output as an unprivileged user. Keep structural package proof separate from native acceptance.

Select x86_64 or aarch64 inputs and check package metadata against every ELF. Refuse mixed or incomplete payloads before they reach testers.

Use the retained master pin with stable selected explicitly. Keep release and nightly from failing before Rust builds start.

Pin the toolchain action to retained master history and select stable explicitly. Preserve the Arch candidate while restoring its blocked Gitea checks.

Keep links, bearer decisions and zones with their owners. The bar stays a manually launched candidate until the remaining controls and motion pass on glass.