[mikigraf]

A single hashed JSON file could previously satisfy every 1.0 release gate. This PR requires distinct, typed evidence for each platform and gate; checks commit, platform, job, task, calibration, and pilot contents; and authenticates CI and subscription acceptance origins against GitHub before publishing. The acceptance workflow uploads a redacted receipt whose bytes must match the protected run’s artifact. Raw transcripts stay on the runner.

The RC version is now 1.0.0-rc.1. The 1.0 gate verifies the actual RC Git tag, all four native archives, checksums, installation receipts, signed provenance, embedded build identity, and native executable format. The archive workflow refuses a preexisting tag at a different commit. Release evidence and the Codex sandbox capability diagnostic are documented. The Windows orphan-cleanup test allows cold process startup without weakening its descendant termination check.

Validation at commit c48a921: all seven CI jobs passed on Linux, macOS, and Windows; 40/40 real local Linux task attempts passed across Claude Code and Codex subscriptions with both cross-harness replay directions; both harnesses passed real checkpoint fork and interrupted-resume workflows; source checkouts stayed unchanged. Full AB/BA judge predictions covered the frozen 40-pair corpus with no call failures or required-check violations; they are not human review. A Linux RC archive extracted and passed installation verification, and real CI reliability evidence passed online GitHub provenance verification.

Native authenticated macOS/Windows tests, two independent reviewers and adjudication, three independent pilots, protected release infrastructure, and a published release candidate remain release blockers. Local Linux evidence does not claim a protected GitHub acceptance origin.