@timurproko/a1 0.2.7-dev.767 → 0.2.7-dev.772

package/dist/native/win32-x64/terminal-host.manifest.json

@@ -0,0 +1,44 @@
+{
+  "schema": "a1-terminal-host-artifact-v1",
+  "protocolVersion": 1,
+  "generation": 1,
+  "crateVersion": "0.1.0-dev",
+  "platform": "win32",
+  "architecture": "x64",
+  "target": "x86_64-pc-windows-msvc",
+  "capability": "supported",
+  "builtAt": "2026-10-15T16:41:35.484Z",
+  "artifact": {
+    "filename": "terminal-host.exe",
+    "sha256": "cbcda1f0a7234ac3a2938fbedecaa71e93c0a9b18bfcc52afb434fc5c8c3e038",
+    "size": 5114368
+  },
+  "sessionLock": {
+    "filename": "a1_session_lock.node",
+    "sha256": "9eb9f269336acd2955640c1044df2bcfceabbe43bdbc441f2b41e08072ffbd29",
+    "size": 1996288
+  },
+  "notices": {
+    "filename": "terminal-host-THIRD-PARTY-NOTICES.txt",
+    "sha256": "9e80136b62106ac672162dacbd0d6eb2a94b3318e597e40dfcf70c4920c34b00",
+    "size": 555140
+  },
+  "provenance": {
+    "language": "Rust",
+    "sourceRoot": "native/terminal-host",
+    "cargoLock": "native/terminal-host/Cargo.lock",
+    "cargoLockSha256": "f8a60ecf67ce276d8f668ed09805f3b869e3e9058eac152dc197c1fbbf855220",
+    "libghosttyVtCommit": "c5a21edfcbc2d5b46540ad91b7980aca31f5f1f3",
+    "zigTarget": "x86_64-windows-msvc",
+    "zigCpu": "baseline",
+    "zigVersion": "0.15.2",
+    "rustVersion": "rustc 1.99.0 (b940084d7 2026-09-28)",
+    "features": {
+      "executable": [],
+      "sessionLock": [
+        "node-addon"
+      ]
+    },
+    "signatureStatus": "ci-attestation-required"
+  }
+}

package/dist/ui/settings/declarations.d.ts

@@ -1,4 +1,4 @@
-export declare const OWNED_UI_SETTINGS_VERSION = 15;
+export declare const OWNED_UI_SETTINGS_VERSION = 16;
 export type OwnedUiSettingValue = string | number | boolean;
 export type OwnedUiSettingApplication = "live" | "restart";
 export interface OwnedUiSettingDeclaration {
@@ -164,53 +164,29 @@ export declare const OWNED_SETTING_DECLARATIONS: Readonly<{
         defaultValue: 8;
         allowedValues: readonly [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16];
     }>;
-    readonly residentTabs: Readonly<{
-        id: "residentTabs";
-        label: "Resident tabs";
+    readonly tabsMax: Readonly<{
+        id: "tabsMax";
+        label: "Maximum tabs";
         section: Readonly<{
-            id: "generic";
-            title: "Generic";
-        }>;
-        description: "Keep bare A1 running when its terminal closes and reattach on the next launch. Turning this off prevents new resident launches but does not stop existing tabs.";
-        application: "restart";
-        defaultValue: false;
-        allowedValues: readonly [true, false];
-    }>;
-    readonly tabsMaxConcurrentStarts: Readonly<{
-        id: "tabsMaxConcurrentStarts";
-        label: "Concurrent tab starts";
-        section: Readonly<{
-            id: "generic";
-            title: "Generic";
+            id: "tabs";
+            title: "Tabs";
         }>;
-        description: "Maximum A1 tabs started together. Starts remain spaced to protect shared profile files.";
-        application: "restart";
-        defaultValue: 2;
-        allowedValues: readonly [1, 2, 3, 4, 5, 6, 7, 8];
-    }>;
-    readonly tabsUnresponsiveRestartSeconds: Readonly<{
-        id: "tabsUnresponsiveRestartSeconds";
-        label: "Unresponsive tab restart";
-        section: Readonly<{
-            id: "generic";
-            title: "Generic";
-        }>;
-        description: "Seconds of continuously healthy supervision without a tab heartbeat before A1 restarts that tab.";
-        application: "restart";
-        defaultValue: 120;
-        allowedValues: readonly [60, 120, 300, 600];
+        description: "Maximum resident A1 tabs kept in the shared strip.";
+        application: "live";
+        defaultValue: 10;
+        allowedValues: readonly number[];
     }>;
-    readonly tabsStallNoticeSeconds: Readonly<{
-        id: "tabsStallNoticeSeconds";
-        label: "Tab stall notice";
+    readonly tabsAutoName: Readonly<{
+        id: "tabsAutoName";
+        label: "Auto name";
         section: Readonly<{
-            id: "generic";
-            title: "Generic";
+            id: "tabs";
+            title: "Tabs";
         }>;
-        description: "Seconds without model or tool progress before a working tab shows a stall notice; A1 never kills a stalled tab automatically.";
-        application: "restart";
-        defaultValue: 300;
-        allowedValues: readonly [120, 300, 600, 1800];
+        description: "Automatically name a new tab from its first completed turn with the tab's current model.";
+        application: "live";
+        defaultValue: true;
+        allowedValues: readonly [true, false];
     }>;
 }>;
 export type OwnedSettingId = keyof typeof OWNED_SETTING_DECLARATIONS;

package/dist/ui/settings/declarations.js

@@ -1,4 +1,4 @@
-export const OWNED_UI_SETTINGS_VERSION = 15;
+export const OWNED_UI_SETTINGS_VERSION = 16;
 const UI_ACCENT_COLOR_CHOICES = Object.freeze([
     "purple", "blue", "cyan", "green", "orange", "pink",
 ]);
@@ -9,6 +9,8 @@ const GENERIC_SECTION = Object.freeze({ id: "generic", title: "Generic" });
 const APPEARANCE_SECTION = Object.freeze({ id: "appearance", title: "Appearance" });
 const SCROLL_SECTION = Object.freeze({ id: "scroll", title: "Scroll" });
 const AGENT_SECTION = Object.freeze({ id: "agent", title: "Agent" });
+const TABS_SECTION = Object.freeze({ id: "tabs", title: "Tabs" });
+const TABS_MAX_CHOICES = Object.freeze(Array.from({ length: 50 }, (_, index) => index + 1));
 /**
  * Every A1 setting, keyed by its id. The table is the one declaration: ids, defaults, and allowed
  * values are read from it, and `OwnedSettingValueOf` derives each getter's type from it.
@@ -124,42 +126,24 @@ export const OWNED_SETTING_DECLARATIONS = Object.freeze({
         defaultValue: 8,
         allowedValues: Object.freeze([1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16]),
     }),
-    residentTabs: Object.freeze({
-        id: "residentTabs",
-        label: "Resident tabs",
-        section: GENERIC_SECTION,
-        description: "Keep bare A1 running when its terminal closes and reattach on the next launch. Turning this off prevents new resident launches but does not stop existing tabs.",
-        application: "restart",
-        defaultValue: false,
+    tabsMax: Object.freeze({
+        id: "tabsMax",
+        label: "Maximum tabs",
+        section: TABS_SECTION,
+        description: "Maximum resident A1 tabs kept in the shared strip.",
+        application: "live",
+        defaultValue: 10,
+        allowedValues: TABS_MAX_CHOICES,
+    }),
+    tabsAutoName: Object.freeze({
+        id: "tabsAutoName",
+        label: "Auto name",
+        section: TABS_SECTION,
+        description: "Automatically name a new tab from its first completed turn with the tab's current model.",
+        application: "live",
+        defaultValue: true,
         allowedValues: Object.freeze([true, false]),
     }),
-    tabsMaxConcurrentStarts: Object.freeze({
-        id: "tabsMaxConcurrentStarts",
-        label: "Concurrent tab starts",
-        section: GENERIC_SECTION,
-        description: "Maximum A1 tabs started together. Starts remain spaced to protect shared profile files.",
-        application: "restart",
-        defaultValue: 2,
-        allowedValues: Object.freeze([1, 2, 3, 4, 5, 6, 7, 8]),
-    }),
-    tabsUnresponsiveRestartSeconds: Object.freeze({
-        id: "tabsUnresponsiveRestartSeconds",
-        label: "Unresponsive tab restart",
-        section: GENERIC_SECTION,
-        description: "Seconds of continuously healthy supervision without a tab heartbeat before A1 restarts that tab.",
-        application: "restart",
-        defaultValue: 120,
-        allowedValues: Object.freeze([60, 120, 300, 600]),
-    }),
-    tabsStallNoticeSeconds: Object.freeze({
-        id: "tabsStallNoticeSeconds",
-        label: "Tab stall notice",
-        section: GENERIC_SECTION,
-        description: "Seconds without model or tool progress before a working tab shows a stall notice; A1 never kills a stalled tab automatically.",
-        application: "restart",
-        defaultValue: 300,
-        allowedValues: Object.freeze([120, 300, 600, 1800]),
-    }),
 });
 /** The declarations in declaration order, for resolution, persistence, and the settings screen. */
 export const OWNED_UI_SETTING_DECLARATIONS = Object.freeze(Object.values(OWNED_SETTING_DECLARATIONS));

package/dist/ui/settings/index.d.ts

@@ -2,7 +2,7 @@ export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING
 export type { OwnedSettingId, OwnedSettingValueOf, OwnedUiSettingApplication, OwnedUiSettingDeclaration, OwnedUiSettingValue } from "./declarations.js";
 export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom, normalizeOwnedUiSettingsValues, } from "./migrations.js";
 export type { OwnedUiSettingsCompatibilityResult, OwnedUiSettingsMigration } from "./migrations.js";
-export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, resolveResidentTabsSetting, settingValue } from "./resolution.js";
+export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, settingValue } from "./resolution.js";
 export type { OwnedUiResolvedSetting, OwnedUiSettingSource, OwnedUiSettingsDocument, OwnedUiSettingsNotice, OwnedUiSettingsNoticeCode, OwnedUiSettingsResolution, ResolveOwnedUiSettingsInput, } from "./resolution.js";
 export { AGENT_SECTION_ID, buildOwnedUiSettingsSections, findOwnedUiSettingsEntry } from "./sections.js";
 export type { AgentSettingsSnapshot, BuildOwnedUiSettingsSectionsInput, OwnedUiSettingsBackend, OwnedUiSettingsEntry, OwnedUiSettingsSection, } from "./sections.js";

package/dist/ui/settings/index.js

@@ -1,6 +1,6 @@
 export { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, OWNED_UI_SETTING_DECLARATIONS, assertOwnedUiSettingDeclarations, findOwnedUiSettingDeclaration, isOwnedSettingId, } from "./declarations.js";
 export { OWNED_UI_SETTINGS_MIGRATIONS, assertOwnedUiSettingsMigrations, migrationsFrom, normalizeOwnedUiSettingsValues, } from "./migrations.js";
-export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, resolveResidentTabsSetting, settingValue } from "./resolution.js";
+export { documentFrom, parseOwnedUiSettingsDocument, resolveOwnedUiSettings, settingValue } from "./resolution.js";
 export { AGENT_SECTION_ID, buildOwnedUiSettingsSections, findOwnedUiSettingsEntry } from "./sections.js";
 export { OwnedSettingsManager } from "./manager.js";
 export { assertProfileSettingsNamespaceAvailable, readProfileSettingsNamespace, repairProfileSettingsDocument, updateProfileSettingsNamespace, } from "./profile-document.js";

package/dist/ui/settings/manager.d.ts

@@ -17,6 +17,7 @@ export interface OwnedSettingsManagerOptions {
     readonly migrations?: readonly OwnedUiSettingsMigration[];
     readonly agent?: AgentSettingsPort | null;
     readonly agentProvider?: () => AgentSettingsPort | null;
+    readonly hiddenOwnedSettingIds?: readonly string[];
     readonly hiddenAgentSettingIds?: readonly string[];
     readonly agentSettingLabelOverrides?: Readonly<Record<string, string>>;
 }

package/dist/ui/settings/manager.js

@@ -23,6 +23,7 @@ export class OwnedSettingsManager {
     #agent;
     #agentProvider;
     #listeners = new Set();
+    #hiddenOwnedSettingIds;
     #hiddenAgentSettingIds;
     #agentSettingLabelOverrides;
     #resolution;
@@ -45,6 +46,7 @@ export class OwnedSettingsManager {
         this.#migrations = options.migrations ?? OWNED_UI_SETTINGS_MIGRATIONS;
         this.#agent = options.agent ?? null;
         this.#agentProvider = options.agentProvider ?? null;
+        this.#hiddenOwnedSettingIds = new Set(options.hiddenOwnedSettingIds ?? []);
         this.#hiddenAgentSettingIds = new Set(options.hiddenAgentSettingIds ?? []);
         this.#agentSettingLabelOverrides = { ...(options.agentSettingLabelOverrides ?? {}) };
         this.#resolution = this.read();
@@ -128,7 +130,13 @@ export class OwnedSettingsManager {
         this.#notify();
     }
     sections() {
-        return buildOwnedUiSettingsSections({ resolution: this.#resolution, agent: this.#agentSnapshot }).map(section => ({
+        const resolution = this.#hiddenOwnedSettingIds.size === 0
+            ? this.#resolution
+            : {
+                ...this.#resolution,
+                settings: this.#resolution.settings.filter(setting => !this.#hiddenOwnedSettingIds.has(setting.declaration.id)),
+            };
+        return buildOwnedUiSettingsSections({ resolution, agent: this.#agentSnapshot }).map(section => ({
             ...section,
             entries: section.entries.map(entry => {
                 if (entry.backend === "a1" && this.#restartEffective.has(entry.id)) {

package/dist/ui/settings/migrations.js

@@ -118,6 +118,18 @@ export const OWNED_UI_SETTINGS_MIGRATIONS = Object.freeze([
             return { ...values };
         },
     }),
+    Object.freeze({
+        to: 16,
+        description: "Make bare A1 tabs unconditional and keep only tab UX controls.",
+        migrate(values) {
+            const migrated = { ...values };
+            delete migrated.residentTabs;
+            delete migrated.tabsMaxConcurrentStarts;
+            delete migrated.tabsUnresponsiveRestartSeconds;
+            delete migrated.tabsStallNoticeSeconds;
+            return migrated;
+        },
+    }),
 ]);
 /** Shape-selected compatibility for the metadata-free product object. */
 export function normalizeOwnedUiSettingsValues(source) {

package/dist/ui/settings/resolution.d.ts

@@ -42,6 +42,4 @@ export interface ResolveOwnedUiSettingsInput {
  */
 export declare function resolveOwnedUiSettings(input: ResolveOwnedUiSettingsInput): OwnedUiSettingsResolution;
 export declare function settingValue(resolution: OwnedUiSettingsResolution, id: string): OwnedUiSettingValue | null;
-/** Resolve the launch-routing flag without constructing the UI settings manager. */
-export declare function resolveResidentTabsSetting(document: OwnedUiSettingsDocument | null): boolean;
 export declare function documentFrom(resolution: OwnedUiSettingsResolution): OwnedUiSettingsDocument;

package/dist/ui/settings/resolution.js

@@ -1,4 +1,4 @@
-import { OWNED_SETTING_DECLARATIONS, OWNED_UI_SETTINGS_VERSION, findOwnedUiSettingDeclaration, } from "./declarations.js";
+import { OWNED_UI_SETTINGS_VERSION, findOwnedUiSettingDeclaration, } from "./declarations.js";
 import { migrationsFrom } from "./migrations.js";
 export function parseOwnedUiSettingsDocument(raw) {
     let parsed;
@@ -122,18 +122,6 @@ export function resolveOwnedUiSettings(input) {
 export function settingValue(resolution, id) {
     return resolution.settings.find(setting => setting.declaration.id === id)?.value ?? null;
 }
-/** Resolve the launch-routing flag without constructing the UI settings manager. */
-export function resolveResidentTabsSetting(document) {
-    if (document === null || document.version !== OWNED_UI_SETTINGS_VERSION)
-        return false;
-    const resolution = resolveOwnedUiSettings({
-        declarations: [OWNED_SETTING_DECLARATIONS.residentTabs],
-        migrations: [],
-        document,
-        currentVersion: OWNED_UI_SETTINGS_VERSION,
-    });
-    return settingValue(resolution, "residentTabs") === true;
-}
 export function documentFrom(resolution) {
     const values = { ...resolution.preserved };
     for (const setting of resolution.settings) {

package/dist/ui/settings/sections.js

@@ -2,11 +2,7 @@ export const AGENT_SECTION_ID = "agent";
 const BOOLEAN_CHOICES = Object.freeze([true, false]);
 export function buildOwnedUiSettingsSections(input) {
     const grouped = new Map();
-    const residentTabsEnabled = input.resolution.settings
-        .find(setting => setting.declaration.id === "residentTabs")?.value === true;
     for (const setting of input.resolution.settings) {
-        if (!residentTabsEnabled && ["tabsUnresponsiveRestartSeconds", "tabsStallNoticeSeconds"].includes(setting.declaration.id))
-            continue;
         const section = setting.declaration.section ?? { id: "a1", title: "A1" };
         const group = grouped.get(section.id) ?? { title: section.title, entries: [] };
         group.entries.push({

package/docs/architecture/evidence/resident-tabs/linux-x64.md

@@ -0,0 +1,37 @@
+# Resident tabs acceptance: Linux x64
+
+State: CI-verified
+
+Physical acceptance against a published candidate package is pending; the operator runs [the checklist](../../../manual-resident-tabs-acceptance.md) and fills in this record. Until every item passes, resident tabs on this platform are CI-verified, not certified.
+
+| Field | Value |
+|---|---|
+| Package version | pending (first published candidate carrying the terminal host) |
+| terminal-host SHA-256 | pending (from that package's `terminal-host.manifest.json`) |
+| OS build | pending |
+| Terminal | pending |
+| Operator or worker | pending |
+| Date | pending |
+
+## Automated evidence
+
+- Pull-request `terminal-host` lane on `ubuntu-24.04`: native unit and role-integration suites, every named crash point recovering to a clean start, the 10,000-schedule simulation corpus, `a1 tabs` maintenance end to end, and the release build of the terminal host with its manifest, session lock, and notices.
+- Pull-request `resident-chaos` lane on `ubuntu-24.04`: bounded randomized kills of servers, holders, and agents against the release-built host, with no duplicate tabs or holders and no orphaned processes.
+- Publication `terminal_hosts` job on `ubuntu-24.04`: the release artifact is rebuilt, its `--version` identity checked, and packing refuses a missing or altered artifact.
+- Bounded fuzzing of every decoder and parser runs on this lane; it proves parser robustness, not platform behavior.
+
+## Physical verdicts
+
+| # | Item | Verdict | Notes |
+|---|---|---|---|
+| 1 | Terminal close mid-turn | pending |  |
+| 2 | SSH or remote-session loss | pending |  |
+| 3 | Forced attach-client kill | pending |  |
+| 4 | Reattach fidelity | pending |  |
+| 5 | Input and render smoothness | pending |  |
+| 6 | Extension text UI | pending |  |
+| 7 | Two clients and controller transfer | pending |  |
+| 8 | Server, holder, and child failure | pending |  |
+| 9 | Sensitive-data separation | pending |  |
+| 10 | Conflict-safe direct rollback | pending |  |
+| 11 | Logout (Linux) | pending |  |

package/docs/architecture/evidence/resident-tabs/macos-arm64.md

@@ -0,0 +1,36 @@
+# Resident tabs acceptance: macOS arm64
+
+State: CI-verified
+
+Physical acceptance against a published candidate package is pending; the operator runs [the checklist](../../../manual-resident-tabs-acceptance.md) and fills in this record. Until every item passes, resident tabs on this platform are CI-verified, not certified.
+
+| Field | Value |
+|---|---|
+| Package version | pending (first published candidate carrying the terminal host) |
+| terminal-host SHA-256 | pending (from that package's `terminal-host.manifest.json`) |
+| OS build | pending |
+| Terminal | pending |
+| Operator or worker | pending |
+| Date | pending |
+
+## Automated evidence
+
+- Pull-request `terminal-host` lane on `macos-15`: native unit and role-integration suites, every named crash point recovering to a clean start, the 10,000-schedule simulation corpus, `a1 tabs` maintenance end to end, and the release build of the terminal host with its manifest, session lock, and notices.
+- Pull-request `resident-chaos` lane on `macos-15`: bounded randomized kills of servers, holders, and agents against the release-built host, with no duplicate tabs or holders and no orphaned processes.
+- Publication `terminal_hosts` job on `macos-15`: the release artifact is rebuilt, its `--version` identity checked, and packing refuses a missing or altered artifact.
+
+## Physical verdicts
+
+| # | Item | Verdict | Notes |
+|---|---|---|---|
+| 1 | Terminal close mid-turn | pending |  |
+| 2 | SSH or remote-session loss | pending |  |
+| 3 | Forced attach-client kill | pending |  |
+| 4 | Reattach fidelity | pending |  |
+| 5 | Input and render smoothness | pending |  |
+| 6 | Extension text UI | pending |  |
+| 7 | Two clients and controller transfer | pending |  |
+| 8 | Server, holder, and child failure | pending |  |
+| 9 | Sensitive-data separation | pending |  |
+| 10 | Conflict-safe direct rollback | pending |  |
+| 11 | Logout (Linux) | not applicable | Linux-only item. |

package/docs/architecture/evidence/resident-tabs/macos-x64.md

@@ -0,0 +1,35 @@
+# Resident tabs acceptance: macOS x64
+
+State: CI-verified
+
+Physical acceptance against a published candidate package is pending; the operator runs [the checklist](../../../manual-resident-tabs-acceptance.md) and fills in this record. Until every item passes, resident tabs on this platform are CI-verified, not certified.
+
+| Field | Value |
+|---|---|
+| Package version | pending (first published candidate carrying the terminal host) |
+| terminal-host SHA-256 | pending (from that package's `terminal-host.manifest.json`) |
+| OS build | pending |
+| Terminal | pending |
+| Operator or worker | pending |
+| Date | pending |
+
+## Automated evidence
+
+- Publication `terminal_hosts` and `guardians` jobs on `macos-15-intel`: the release terminal host and process guardian are built for Intel macOS, the host's `--version` identity is checked, and packing refuses a missing or altered artifact.
+- Known gap: the pull-request `terminal-host` and `resident-chaos` suites run on macOS arm64 only, because modular validation outcomes are keyed by platform without architecture. Intel macOS has build and identity evidence but no automated behavior suite of its own.
+
+## Physical verdicts
+
+| # | Item | Verdict | Notes |
+|---|---|---|---|
+| 1 | Terminal close mid-turn | pending |  |
+| 2 | SSH or remote-session loss | pending |  |
+| 3 | Forced attach-client kill | pending |  |
+| 4 | Reattach fidelity | pending |  |
+| 5 | Input and render smoothness | pending |  |
+| 6 | Extension text UI | pending |  |
+| 7 | Two clients and controller transfer | pending |  |
+| 8 | Server, holder, and child failure | pending |  |
+| 9 | Sensitive-data separation | pending |  |
+| 10 | Conflict-safe direct rollback | pending |  |
+| 11 | Logout (Linux) | not applicable | Linux-only item. |

package/docs/architecture/evidence/resident-tabs/windows-x64.md

@@ -0,0 +1,36 @@
+# Resident tabs acceptance: Windows x64
+
+State: CI-verified
+
+Physical acceptance against a published candidate package is pending; the operator runs [the checklist](../../../manual-resident-tabs-acceptance.md) and fills in this record. Until every item passes, resident tabs on this platform are CI-verified, not certified.
+
+| Field | Value |
+|---|---|
+| Package version | pending (first published candidate carrying the terminal host) |
+| terminal-host SHA-256 | pending (from that package's `terminal-host.manifest.json`) |
+| OS build | pending |
+| Terminal | pending |
+| Operator or worker | pending |
+| Date | pending |
+
+## Automated evidence
+
+- Pull-request `terminal-host` lane on `windows-2025`: native unit and role-integration suites, every named crash point recovering to a clean start, the 10,000-schedule simulation corpus, `a1 tabs` maintenance end to end, and the release build of the terminal host with its manifest, session lock, and notices.
+- Pull-request `resident-chaos` lane on `windows-2025`: bounded randomized kills of servers, holders, and agents against the release-built host, with no duplicate tabs or holders and no orphaned processes.
+- Publication `terminal_hosts` job on `windows-2025`: the release artifact is rebuilt, its `--version` identity checked, and packing refuses a missing or altered artifact.
+
+## Physical verdicts
+
+| # | Item | Verdict | Notes |
+|---|---|---|---|
+| 1 | Terminal close mid-turn | pending | Milestone 2 passed this item against development build `09028be5` (run 38159593912); that evidence is for that build, not this package. |
+| 2 | SSH or remote-session loss | pending | Milestone 2 passed Windows OpenSSH loss against development build `09028be5`; it is not evidence for this package. |
+| 3 | Forced attach-client kill | pending |  |
+| 4 | Reattach fidelity | pending |  |
+| 5 | Input and render smoothness | pending |  |
+| 6 | Extension text UI | pending |  |
+| 7 | Two clients and controller transfer | pending |  |
+| 8 | Server, holder, and child failure | pending |  |
+| 9 | Sensitive-data separation | pending |  |
+| 10 | Conflict-safe direct rollback | pending |  |
+| 11 | Logout (Linux) | not applicable | Linux-only item. |

package/docs/architecture/internal-naming.md

@@ -47,6 +47,8 @@ Pending review preserves a possible external interface, not an obsolete private
 | `RELEASE_RUNNER_LABEL` | Release/full-regression workflows supply certification-runner provenance to `run-release-gates.mjs`. |
 | `TERMINAL_FIXTURE_INPUT`, `TERMINAL_FIXTURE_TOKEN` | Native terminal probe producer/consumer in `native/terminal-host/src/main.rs`; expected input and fixture token. |
 | `TERMINAL_HOST_LOCAL_BUILD` | Developer shell sets exactly `1`; `native/terminal-host/build.rs` then permits a Windows build outside CI. |
+| `TERMINAL_HOST_EXPORT_VT` | Native validation lanes in `.github/workflows/ci.yml` name a directory; `build.rs` copies the linked terminal library, headers, and manifest there for upload. |
+| `TERMINAL_HOST_PREBUILT_VT` | Developer shell names a fetched library directory; with `TERMINAL_HOST_LOCAL_BUILD=1` and no `CI`, `build.rs` verifies its manifest and links it instead of running Zig. |
 | `DOCS_AUTO_MERGE_POLL_ATTEMPTS`, `DOCS_AUTO_MERGE_POLL_MS` | Documentation automation polling controls, produced by governance tests and consumed by `manage-documentation-auto-merge.mjs`. |
 | `VALIDATION_JOB_STARTED_MS`, `RENDERING_JOB_STARTED_MS` | CI timing handoffs within `.github/workflows/ci.yml`; epoch milliseconds. |
 | `RUN_PROCESS_CONTAINMENT_INTEGRATION` | CI enables the real containment fixture with exactly `1`; platform containment tests consume it. |

package/docs/architecture/process-guardian-provenance.md

@@ -21,6 +21,8 @@ dist/native/darwin-x64/process-guardian
 dist/native/darwin-arm64/process-guardian
 ```
 
+The publication `guardians` job builds them on `windows-2025`, `ubuntu-24.04`, `macos-15` (arm64), and `macos-15-intel` (x64).
+
 Each supported artifact must be named in the release integrity manifest with target triple, crate version, guardian protocol version, SHA-256, byte size, build provenance, and signature/attestation status. The build marks a platform supported only after its native containment integration runs on that platform. A missing, altered, incompatible, unsupported, or wrong-platform artifact is a concise containment launch error; A1 never silently falls back to PID-only cleanup.
 
 ## Licensing