Merge branch 'main' into codex/ci-failure-locations-20261013

Author: huangruiteng

.github/workflows/desktop-release-artifacts.yml

@@ -17,6 +17,11 @@ on:
         description: "Existing GitHub Release tag to attach desktop artifacts to"
         required: false
         type: string
+      publication_probe:
+        description: "Read-only builder publication preflight; never attaches Release assets"
+        required: false
+        type: boolean
+        default: false
 
 permissions:
   contents: read
@@ -79,6 +84,22 @@ jobs:
             apps/desktop/loopx-control-plane/package-lock.json
             apps/presentation/dashboard/package-lock.json
 
+      - name: Check out immutable preflight tooling
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ github.workflow_sha }}
+          path: .release-tooling
+          persist-credentials: false
+
+      - name: Capture read-only release source
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true
+        timeout-minutes: 2
+        env:
+          PUBLICATION_PROBE: "true"
+          RELEASE_TAG: ${{ steps.identity.outputs.release-tag }}
+        run: node .release-tooling/scripts/ci/desktop_release_preflight.ts capture
+
       - name: Set up Rust
         uses: dtolnay/rust-toolchain@stable
 
@@ -168,11 +189,47 @@ jobs:
           Copy-Item apps/desktop/loopx-control-plane/src-tauri/target/release/bundle/nsis/*.exe dist/desktop/
 
       - name: Attest desktop artifacts
+        id: binary-attestation
         if: github.event_name != 'pull_request'
         uses: actions/attest@v4
         with:
           subject-path: ${{ matrix.artifact-path }}
 
+      - name: Record preflight source subjects
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true
+        timeout-minutes: 2
+        env:
+          PUBLICATION_PROBE: "true"
+          RELEASE_TAG: ${{ steps.identity.outputs.release-tag }}
+        run: node .release-tooling/scripts/ci/desktop_release_preflight.ts record
+
+      - name: Attest preflight source record
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true
+        id: source-attestation
+        timeout-minutes: 2
+        uses: actions/attest@v4
+        with:
+          subject-path: .desktop-preflight/source/source.json
+
+      - name: Preserve preflight attestation bundles
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true
+        env:
+          PUBLICATION_PROBE: "true"
+          RELEASE_TAG: ${{ steps.identity.outputs.release-tag }}
+          SOURCE_BUNDLE: ${{ steps.source-attestation.outputs.bundle-path }}
+          BINARY_BUNDLE: ${{ steps.binary-attestation.outputs.bundle-path }}
+        run: node .release-tooling/scripts/ci/desktop_release_preflight.ts bundles
+
+      - name: Upload isolated preflight source
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true
+        uses: actions/upload-artifact@v7
+        with:
+          name: desktop-source-${{ runner.os == 'macOS' && 'macos' || 'windows' }}-${{ github.run_attempt }}
+          path: .desktop-preflight/source
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 30
+
       - name: Upload desktop artifact
         uses: actions/upload-artifact@v7
         with:
@@ -181,8 +238,56 @@ jobs:
           if-no-files-found: error
           retention-days: 30
 
+      - name: Check peer success and publication budget
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true && runner.os == 'Windows'
+        id: preflight
+        timeout-minutes: 2
+        env:
+          PUBLICATION_PROBE: "true"
+          RELEASE_TAG: ${{ steps.identity.outputs.release-tag }}
+        run: node .release-tooling/scripts/ci/desktop_release_preflight.ts admit
+
+      - name: Download same-run Mac desktop artifact
+        id: mac-desktop
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true && runner.os == 'Windows' && steps.preflight.outputs.eligible == 'true'
+        timeout-minutes: 2
+        uses: actions/download-artifact@v7
+        with:
+          name: loopx-macos-${{ steps.identity.outputs.release-tag }}
+          path: dist/desktop
+
+      - name: Download same-run Mac source proof
+        id: mac-source
+        if: github.event_name == 'workflow_dispatch' && inputs.publication_probe == true && runner.os == 'Windows' && steps.preflight.outputs.eligible == 'true'
+        timeout-minutes: 2
+        uses: actions/download-artifact@v7
+        with:
+          name: ${{ steps.preflight.outputs.mac-source }}
+          path: .desktop-preflight/mac-source
+
+      - name: Verify read-only publication preflight
+        if: always() && github.event_name == 'workflow_dispatch' && inputs.publication_probe == true && runner.os == 'Windows' && steps.preflight.outputs.eligible == 'true'
+        timeout-minutes: 5
+        env:
+          PUBLICATION_PROBE: "true"
+          RELEASE_TAG: ${{ steps.identity.outputs.release-tag }}
+          GH_TOKEN: ${{ github.token }}
+          PEER_ARTIFACT_DOWNLOAD: ${{ steps.mac-desktop.outcome }}
+          PEER_SOURCE_DOWNLOAD: ${{ steps.mac-source.outcome }}
+        run: node .release-tooling/scripts/ci/desktop_release_preflight.ts verify
+
+      - name: Preserve read-only preflight result
+        if: always() && github.event_name == 'workflow_dispatch' && inputs.publication_probe == true && runner.os == 'Windows'
+        uses: actions/upload-artifact@v7
+        with:
+          name: desktop-publication-preflight-${{ github.run_attempt }}
+          path: .desktop-preflight/report.json
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 30
+
   upload-release:
-    if: github.event_name != 'pull_request'
+    if: github.event_name != 'pull_request' && !(github.event_name == 'workflow_dispatch' && inputs.publication_probe == true)
     needs: build
     runs-on: ubuntu-latest
     timeout-minutes: 10

docs/architecture/rfcs/STATUS.md

@@ -61,7 +61,7 @@ appendix may keep dated history, but no dated log heading may precede it.
 | [RFC: Provider-Neutral Post-Writeback Capability Hooks v0](provider-neutral-post-writeback-capability-hooks-v0.md) | Accepted | none | — |
 | [RFC: Provider-Neutral Turn-Start Inbox Hook v0](provider-neutral-turn-start-inbox-hook-v0.md) | Accepted | none | — |
 | [RFC: Research Exploration Control Plane v0](research-exploration-control-plane-v0.md) | Accepted | none | — |
-| [RFC: Semantic Vocabulary Convergence and Commit-Time Drift Checks (v0)](semantic-vocabulary-convergence-v0.md) | Accepted | none | [6 entries](ledger/semantic-vocabulary-convergence-v0/) |
+| [RFC: Semantic Vocabulary Convergence and Commit-Time Drift Checks (v0)](semantic-vocabulary-convergence-v0.md) | Accepted | none | [7 entries](ledger/semantic-vocabulary-convergence-v0/) |
 | [RFC: Shared Goal Alignment and Governed Amendment Protocol (v0)](shared-goal-alignment-and-governed-amendment-v0.md) | Accepted | none | [2 entries](ledger/shared-goal-alignment-and-governed-amendment-v0/) |
 | [RFC: LoopX Shared Control-Plane Authority and Pluggable State Providers (v0)](shared-goal-authority-state-provider-v0.md) | Accepted | none | [24 entries](ledger/shared-goal-authority-state-provider-v0/) |
 | [RFC: Single-Owner Local Daemon (v0)](single-owner-local-daemon-v0.md) | Accepted | none | — |

docs/architecture/rfcs/STATUS.zh-CN.md

@@ -58,7 +58,7 @@
 | [RFC：Provider-Neutral Post-Writeback Capability Hooks v0](provider-neutral-post-writeback-capability-hooks-v0.zh-CN.md) | 已接受 | 无 | — |
 | [RFC: Provider-Neutral Turn-Start Inbox Hook v0](provider-neutral-turn-start-inbox-hook-v0.md) | 已接受 | none | — |
 | [RFC：研究型探索控制面 v0](research-exploration-control-plane-v0.zh-CN.md) | 已接受 | 无 | — |
-| [RFC：语义词表收敛与提交期漂移检查（v0）](semantic-vocabulary-convergence-v0.zh-CN.md) | 已接受 | 无 | [6 条](ledger/semantic-vocabulary-convergence-v0/) |
+| [RFC：语义词表收敛与提交期漂移检查（v0）](semantic-vocabulary-convergence-v0.zh-CN.md) | 已接受 | 无 | [7 条](ledger/semantic-vocabulary-convergence-v0/) |
 | [RFC：共享 Goal 对齐与受治理 Amendment 协议（v0）](shared-goal-alignment-and-governed-amendment-v0.zh-CN.md) | 已接受 | 无 | [2 条](ledger/shared-goal-alignment-and-governed-amendment-v0/) |
 | [RFC：LoopX 共享控制面权威与可插拔状态 Provider（v0）](shared-goal-authority-state-provider-v0.zh-CN.md) | 已接受 | 无 | [24 条](ledger/shared-goal-authority-state-provider-v0/) |
 | [RFC: Single-Owner Local Daemon (v0)](single-owner-local-daemon-v0.md) | 已接受 | none | — |

docs/architecture/rfcs/ledger/semantic-vocabulary-convergence-v0/2026-09-20-settlement-receipt-source-boundaries.md

@@ -1,5 +1,8 @@
 # Executed settlement and receipt source boundaries
 
+Current readback: [registered source treatment](2026-10-12-registered-source-treatment.md). The observations below retain their original baseline; they are not current PR status.
+
+
 Measured from `36134771355f05c9bcc5657ce739bb86426383dc`, for #4447 Stage 2a.
 The scope revision in #4789 remains a proposal. This entry changes neither RFC
 acceptance nor the F1/F2 production domain: **7/26**, with these four entries

docs/architecture/rfcs/ledger/semantic-vocabulary-convergence-v0/2026-09-20-settlement-receipt-source-boundaries.zh-CN.md

@@ -1,5 +1,8 @@
 # Settlement 与 receipt 的可执行来源边界
 
+当前读回见[登记来源处理](2026-10-12-registered-source-treatment.zh-CN.md)。下文保留原基线观测，不代表当前 PR 状态。
+
+
 基线 `36134771355f05c9bcc5657ce739bb86426383dc`，对应 #4447 Stage 2a。
 #4789 的范围修订仍是提案。本条不改变 RFC 验收或 F1/F2 生产域：仍为
 **7/26**，本组四项仍在域外。来源处理与生产扫描纳入是不同结论。

docs/architecture/rfcs/ledger/semantic-vocabulary-convergence-v0/2026-09-20-staged-tracker-acceptance.md

@@ -1,5 +1,8 @@
 # Staged tracker acceptance and conditional field retirement
 
+Current readback: [registered source treatment](2026-10-12-registered-source-treatment.md). The observations below retain their original baseline; they are not current PR status.
+
+
 Status: **proposal**, not a completed migration or approval record. Baseline:
 `36134771355f05c9bcc5657ce739bb86426383dc`. Delivery status and the ordered
 work plan belong to [#4447](https://github.com/loopx-project/loopx/issues/4447);

docs/architecture/rfcs/ledger/semantic-vocabulary-convergence-v0/2026-09-20-staged-tracker-acceptance.zh-CN.md

@@ -1,5 +1,8 @@
 # Tracker 阶段验收与有条件字段退役
 
+当前读回见[登记来源处理](2026-10-12-registered-source-treatment.zh-CN.md)。下文保留原基线观测，不代表当前 PR 状态。
+
+
 状态：**提案**，不是迁移完成或批准记录。基线：
 `36134771355f05c9bcc5657ce739bb86426383dc`。
 交付状态与有序工作计划归 [#4447](https://github.com/loopx-project/loopx/issues/4447)