[MrScripty]

Build both native desktop executables from an exact clean committed tracked-source export, with a declared controlled recipe and trusted tools. Record material before compilation and actual binary hashes in a sidecar. A shared compiled declaration reaches native Session identities and the diagnostic execution guard; ordinary or malformed declarations remain independently unspecified.

The wrapper uses exact Git blobs and modes, fresh external export/target/home/temp, Rust1.92.0, locked release desktop builds, disabled defaults, one job and no incremental compilation. It refuses dirty/untracked source, unsafe/nonregular material, Cargo configuration and declared external Cargo paths, then rechecks source/export/tools/material after compilation. Trusted tools/dependency/system state and external reads by committed code remain outside the tracked-source claim. No hermeticity, authentication, complete compiler-read closure or reproducibility promise.

Validation on clean source dfde6dcb889e561ad0e3e4d7fd7f00bbffde21bb, tree dcda9b837cfe5d629af595f04734b356617e1581:

• Independent source reviews approve the Rust consumers and wrapper. Wrapper contracts passed8 normal/8 optimized for both author and independent executions, using explicitly fake compiler fixtures.
• A real controlled release build then compiled both native binaries from1,213 exact committed files/14,061,263bytes. Independent audit checked every exported blob/hash/mode, actual fresh Cargo artifacts, material/recipe/controller/tool bindings and both binaries. Material SHA256 9e99d78b18f4edd7ef38b02619b63a893d8583d86caeb6e3b38a7b93ffe1cd7d; completed sidecar 867394d410b8e24f4af20de9c80c7b6b8ab5efa55bc0944421667f68c74adb4f.
• Actual desktop SHA256 2d5c0df4a372633bf30f105d8e9d8c4342ac330d85b5f29494eb29a56a53d8a9; AI comparison binary 257af94d14d465cbe35fb590fa375ce17f0509a6e8d44293ca20f57dfab49afe. Both contain the exact source/material declarations. The wrapper does not execute the GUI applications.
• Four separately compiled real native consumers execute the actual shared formatter and desktop identity sources for absent, malformed, independently valid-source/invalid-material and fully qualified declarations. All passed; independent review replayed all four ELF consumers successfully.
• Complete107-path reviewed conservative admission;18 fresh native/rational qualification commands,26 normal and26 optimized real-packet contracts passed, zero skips. Lean checking was not run. Precommit51 AI contracts passed with one unchanged measured-deployment ignore, plus9 configured/17 native saved-set contracts; strict affected Clippy/formatting passed.

Small durable sidecar/consumer receipts and independent actual-build review are committed under docs/plans/configurable-solver-components/reports/qualified-desktop-*. Full external artifacts remain /tmp/rheon-qualified-desktop-controlled; qualification /tmp/rheon-qualified-desktop-qualified and packet /tmp/rheon-qualified-desktop-packet. Follow-through changes only evidence/parent ledgers, preserving all107 selected source hashes; compiled artifacts and whole-source receipts remain pinned todfde6dc.

Stacked on #105, retaining #102 portable Session dependency. This bounded build-custody slice does not close configured worker/UI, native-window, measured-model or complete A1–A8 acceptance. Exact pushed-head hosted gates and lead serial integration remain mandatory; keep draft until ready.

Integration disposition: exact head c02a6cd495dc7c67fe5c406da990223f5cfc9e5f is retained in main through reviewed lead PR113, merge c1916e5a32ed8e5170344a3fac7f5e7ca8976620. Its source/contracts and retained evidence were validated in that combined acceptance unit. Closing this standalone proposal as fully included; no separate leaf merge or history rewrite. The original head remains reachable from main; open dependent proposals are retained. Standalone historical admission epochs are not substituted for final union qualification.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}