ARCADIA-Studio/harness/release-authoring-prerelease-review-20260911.md

Independent authoring prerelease review — 2026-09-11

Codex-9e8r6t /root/behavior_audit. PASS within the agreed archive/provenance/notices and packaged-server scope; no material finding. Root owns packaged GUI acceptance and publication. This review does not establish completion of the full OA/SA release goal.

Frozen artifact

Reviewed the completed ZIP independently from a new extraction under .local/authoring-prerelease-review-20260911/extracted/. The producer's staging directory and ZIP were not modified.

• Version: 0.2.0-preview.authoring.20260911, target x86_64-pc-windows-gnullvm.
• ZIP: .local/authoring-prerelease-20260911/packages/ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm.zip.
• Size: 32,618,262 bytes; 559 files.
• ZIP SHA256: 664f30b6217689aca1492eb263b3d15777067d732fa890eeb028f435209dadfa.
• GUI SHA256: d4d9c2bd937e301ff1009d7cb93a34ee5aa6dfc837ff7e87d468c85371b20c31.
• Server SHA256: efeeb89c0d2e0f93df4472cb3e9f48b2b722a37ae1043c90a5a56f2e845fe665.
• libunwind.dll SHA256: f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4.

The first independent artifact gate passed at 12:33:36–12:34:20 UTC, with 3,643 assertions, including per-file checks. ZIP CRCs, safe ordinary members, case uniqueness, fixed timestamps, complete extracted membership and bytes all passed. SHA256SUMS.txt covers exactly the other 558 files. The 553 package.json input hashes match; the remaining six files are the explicit generated checksum, start instructions, third-party notice index, dependency inventory, documentation check and package metadata.

The only directory payloads are deployment, docs, examples and licenses; the root files are the declared executables/runtime, public license/readme and generated package records. Every shipped source document/example/deployment file and public license matched the isolated source. No harness, profile, store, credentials directory or source checkout was bundled. Local build paths appear in Cargo package identifiers and development-binary provenance; that is distinct from copying private files. This review does not claim a universal secret scan of binary strings.

Source and notice correspondence

Independently read the original GUI manifest, Git blobs, retained server tar and packaged notice inventory, rather than adopting the producer's comparison booleans.

• All 253 original GUI input hashes match auxiliary commit 234e01e27d6935d213097b345d91d369f808af82 and its isolated checkout. Base 2ec72d4241fa8971fa6fe9f626937de9dfd7c7eb differs at exactly the seven documented LF/CRLF inputs. Each LF-to-CRLF conversion reproduces its original input hash; beyond those bytes the auxiliary diff is only .gitattributes.
• All 120 originally recorded core/server files match the preserved source tar, base Git blobs and isolated source bytes. Shared Cargo manifest/lock, three build files and raw OpenAPI bytes match the original GUI inputs and tar manifest. The tar SHA256 is cbb371a93a562e1e641d7629fe351e016d63e66fc9112499b3fed6d5cd171f78.
• The inventory names 266 dependency packages, with roots exactly oa-desktop and oa-server. Every reported package identity/registry checksum occurs in the historical lock. Every local crate's complete file set/hashes and every recorded common build input match the isolated source. Lock SHA256 remains a6e070ed59b0ba19f18d60e8104494b777b470bd0268ae348cbe2b229790449f.
• All 484 distinct notice-reference files match their inventory hashes, including Fira Sans, Iced Icons, Rust and libunwind notices. The one additional license is the LLVM-MinGW distribution license, SHA256 8d85c1057d742e597985c7d4e6320b015a9139385cff4cbae06ffc0ebe89afee, matching the recorded original. All 58 recorded compiler target-library hashes match the retained toolchain files.

The package correctly describes its source snapshot as reconstructed input preservation, its executables as debug/development builds, and the original build records separately. Its metadata binds the exact executable hashes without claiming that packaging proves the caller's compiler/source/profile assertions. This reviewer did not rebuild the dependency graph or binaries; the producer's strict locked/offline metadata execution remains separately attributed. No reproducible-build, release-profile, universal-license-audit or Linux runtime claim is made. CLI is absent from this desktop/server package and is not advertised as included.

Packaged server execution

The first runtime gate passed at 12:34:35–12:34:48 UTC, with 1,800 assertions including complete pre/post package inventories. The executable ran only from the independent extraction. Its child environment contained SystemRoot, WINDIR, PATH=C:\Windows\System32;C:\Windows, and private TEMP/TMP; no toolchain path, token or proxy environment was inherited. All HTTP requests used a proxy-free loopback client. Data lived outside the package in .local/authoring-prerelease-review-20260911/server-run/data.

1. --version and --help exited successfully with empty stderr; the underlying application version is correctly arcadia-server 0.2.0.
2. /health and /health/ready returned the exact expected success object. /api/v1/openapi.json matched the complete packaged OpenAPI bytes, including their recorded line endings.
3. Exactly one POST created Independent package persistence — 救助 20260911. Complete response summary, distinct fresh resource/model UUIDs, Location and ETag matched the contract. Before execution, the checker predicted all empty-project fields and the full one-file SourceBundle from the published constructors/formatter. The subsequent GET and persisted disk envelope matched that complete expectation, allowing only the two freshly generated UUIDs.
4. After the acknowledged durable create, the checker explicitly terminated its owned server process, started a second process on another private port using the same data directory, and repeated readiness/GET. Complete model/source, revision, ETag and every persisted envelope byte were unchanged. This is process-stop/restart persistence, not graceful-drain acceptance. Both owned processes were terminated and awaited.
5. All 559 extracted package files and the original ZIP were unchanged afterward.

The private listeners were 127.0.0.1:56455 (PID 8248) and 127.0.0.1:56463 (PID 1692). Resource 0517cc0a-c519-4e46-a1d5-2f385361552e retained revision 1 and ETag "p-0517cc0a-c519-4e46-a1d5-2f385361552e-r1". Durable envelope SHA256: cf68e095e70717c7b86ec9e54c39f3a4b0effd331d748e1f4311592c7b8feb11.

Preserved evidence and limits

Private evidence remains under .local/authoring-prerelease-review-20260911/:

Evidence	SHA256
review.py	af9eb20946dfcec78bf8959f1d5dc175e82ebb9fabba9f94cefe590fea516b92
artifact-result.json	8b20e9d294338754ddc9b3320b59f55fc19ab979b8da18819fb47a8036db0bba
server-result.json	086bf21e79f3bc7deddfd3278c8ade9b470b11031f7fb278ca0ead3a75b6cfb1

server-run/ retains every HTTP response/body/header record, process stdout/stderr, original expected envelope and the private store. No artifact or runtime gate failed or required a retry. Earlier read-only schema inspection included a harmless list/dictionary inspection error; no executable had been launched and no artifact/evidence was overwritten.

No production/script changes, Cargo/rustc, GUI/native input, publication or credential access occurred in this review. Root's separate packaged GUI report and original named-creation native evidence must accompany any combined milestone acceptance. Current contextual-source, lifecycle, chooser and numerical work, full product parity and Linux verification retain their separate outstanding acceptance boundaries.