ltcai 8.0.0 → 8.2.0

package/docs/V4_3_2_PRODUCT_POLISH_REPORT.md

@@ -1,57 +0,0 @@
-# Lattice AI v4.3.2 Product Polish Report
-
-Date: 2026-06-13
-
-## Scope
-
-v4.3.2 removes end-user polish debt from the React/Vite desktop SPA while
-preserving the v4.3.1 architecture and backend API contracts.
-
-## Implemented
-
-- Added structured render primitives for nested runtime data, operation
-  results, entity lists, and value previews.
-- Replaced normal product JSON dumps in Brain, Ask, Capture, Act, Library, and
-  System with readable status panels and result cards.
-- Kept technical identifiers visible when they matter, especially for agents,
-  storage, archive, and device identity records.
-- Added System archive import dry-run and confirmed import controls backed by
-  existing `.latticebrain` archive APIs.
-- Improved System status for health, storage mode, backup health, device
-  identity, Brain Network, hardening, security, admin, account, SSO, snapshots,
-  activity, and settings.
-- Preserved honest unavailable states for optional models, Postgres, Docker,
-  sqlite-vec, external integrations, and unavailable runtime actions.
-- Added app-level Tauri exit cleanup so the FastAPI sidecar is shut down on
-  normal macOS quit.
-
-## Files Touched
-
-- `frontend/src/components/primitives.tsx`
-- `frontend/src/pages/Brain.tsx`
-- `frontend/src/pages/Ask.tsx`
-- `frontend/src/pages/Capture.tsx`
-- `frontend/src/pages/Act.tsx`
-- `frontend/src/pages/Library.tsx`
-- `frontend/src/pages/System.tsx`
-- `src-tauri/src/main.rs`
-- `tests/visual/mock_server.cjs`
-- `tests/visual/v3.spec.js`
-
-## Evidence
-
-- First startup: `output/audits/v4.3.2-rc/screenshots/01-first-startup.png`
-- Brain portability and backup: `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png`
-- System archive flows: `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png`
-- System storage status: `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png`
-- Workflow create/run: `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png`
-- Agent runtime status: `output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png`
-- Brain Network and device identity: `output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png`
-- Library model status: `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png`
-- Desktop sidecar startup: `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
-
-## Result
-
-PASS. The visible product surfaces are now readable, API-backed, and explicit
-about unavailable optional capabilities. No fake controls or demo-only screens
-were added.

package/docs/V4_3_2_SELF_AUDIT_REPORT.md

@@ -1,63 +0,0 @@
-# Lattice AI v4.3.2 Self-Audit Report
-
-Date: 2026-06-13
-
-## Method
-
-The audit used the built v4.3.2 product, not source-code claims. It started a
-local FastAPI backend with an isolated data directory, seeded a real document
-through the upload API, opened the React SPA, exercised product flows, captured
-screenshots/GIF evidence, launched the rebuilt Tauri app, and verified desktop
-sidecar startup/shutdown.
-
-## Runtime Inputs
-
-- API base: `http://127.0.0.1:4932`
-- Audit data dir: `/tmp/lattice-v432-audit`
-- Desktop data dir: `/tmp/lattice-v432-desktop3`
-- Uploaded note: `/tmp/lattice-v432-files/v432-audit-note.md`
-- Archive path: `/tmp/lattice-v432-audit/self-audit.latticebrain`
-
-## Observed Results
-
-| Scenario | Result | Evidence |
-| --- | --- | --- |
-| First startup | PASS | `output/audits/v4.3.2-rc/screenshots/01-first-startup.png` |
-| Graph exploration baseline | PASS | `output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png` |
-| Graph search/collapse/focus | PASS | `output/audits/v4.3.2-rc/screenshots/03-graph-search.png`, `04-graph-collapse-group.png`, `05-graph-focus-neighborhood.png` |
-| Ask no-model honesty and graph context | PASS | `output/audits/v4.3.2-rc/screenshots/14-ask-context.png` |
-| Capture document ingestion | PASS | `output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png` |
-| Brain backup and graph portability | PASS | `output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png` |
-| System archive export/inspect/verify/import/restore dry-run | PASS | `output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png` |
-| Storage and Postgres optional status | PASS | `output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png` |
-| Workflow create/run surfaces | PASS | `output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png` |
-| Agent runtime availability | PASS | `output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png` |
-| Brain Network and device identity | PASS | `output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png` |
-| Library model unavailable honesty | PASS | `output/audits/v4.3.2-rc/screenshots/12-library-model-status.png` |
-| Desktop sidecar startup | PASS | `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png` |
-| Desktop sidecar shutdown | PASS | `output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt` |
-
-## Runtime Logs
-
-- Upload result: `output/audits/v4.3.2-rc/logs/upload-note.json`
-- README evidence upload: `output/audits/v4.3.2-rc/logs/readme-upload-note.json`
-- Graph after upload: `output/audits/v4.3.2-rc/logs/graph-after-upload.json`
-- Archive create: `output/audits/v4.3.2-rc/logs/archive-create.json`
-- Archive verify: `output/audits/v4.3.2-rc/logs/archive-verify.json`
-- Archive import dry-run: `output/audits/v4.3.2-rc/logs/archive-import-dry-run.json`
-- Storage: `output/audits/v4.3.2-rc/logs/storage.json`
-- Backup health: `output/audits/v4.3.2-rc/logs/backup-health-after-ui.json`
-- Workflow create: `output/audits/v4.3.2-rc/logs/workflow-create.json`
-- Browser automation results: `output/audits/v4.3.2-rc/logs/self-audit-browser-results.json`
-- Desktop health: `output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json`
-
-## Media
-
-- Graph walkthrough GIF: `output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif`
-- Graph walkthrough video: `output/audits/v4.3.2-rc/videos/graph-product-walkthrough.webm`
-
-## Result
-
-PASS. The observed product behavior supports the v4.3.2 RC claims. No placeholder
-or fake functionality was accepted as complete. Optional capabilities remain
-honestly unavailable unless their runtime dependencies and user consent exist.

package/docs/V4_3_2_VALIDATION_REPORT.md

@@ -1,97 +0,0 @@
-# Lattice AI v4.3.2 Validation Report
-
-Date: 2026-06-13
-
-## Summary
-
-v4.3.2 validation is green for the implemented product polish, graph UX, desktop
-shutdown, exact-version release artifacts, and the release-prep documentation /
-Vercel static-build fixes.
-
-## Release-Prep Fix Validation
-
-These checks were rerun after the README badge restore, diagram-first
-`ARCHITECTURE.md` rewrite, Vercel static-only configuration fix, and linked-doc
-cleanup.
-
-| Check | Result |
-| --- | --- |
-| `node -e "JSON.parse(require('fs').readFileSync('vercel.json','utf8'))"` | PASS |
-| `npm run vercel:build` | PASS, generated `vercel-static/index.html` |
-| `npm run docs:check-links` | PASS, README plus 15 README-linked Markdown files |
-| Mermaid structural sanity check for `ARCHITECTURE.md` | PASS, 13 Mermaid blocks; `mmdc` was not installed locally |
-| README badge link validation | PASS for PyPI, VS Code Marketplace, Open VSX, CI, license, and badge images; npm package page returned a CLI-only Cloudflare 403, so package identity was validated through `npm view ltcai` and `https://registry.npmjs.org/ltcai` |
-| Registry version check | PASS, PyPI/npm/VS Code Marketplace/Open VSX currently report `4.3.1`; README does not claim v4.3.2 external registry publication |
-| `node scripts/run_python.mjs -m pytest tests/unit/test_server_app_v14_decomposition.py::test_markdown_current_release_references_match_release tests/unit/test_truth_floor_t1_static.py::test_readme_does_not_overclaim_llm_driven_agents -v` | PASS, 2 passed |
-| `npm run lint` | PASS |
-| `npm pack --dry-run` | PASS, `ltcai-4.3.2.tgz`, 305 files, 2.9 MB |
-| `npx --yes vercel@54.12.2 build` | BLOCKED by local Vercel linkage only: `project_settings_required`; no `.vercel` project settings or credentials are present in this checkout. Static build/config validation above passed. |
-
-No product runtime code changed in this release-prep fix, and release artifacts
-were not rebuilt.
-
-## Commands
-
-| Check | Result |
-| --- | --- |
-| `npm run check:python` | PASS, compiled 691 modules |
-| `node scripts/run_python.mjs -m ruff check .` | PASS |
-| `npm run lint` | PASS |
-| `npm run typecheck` | PASS |
-| `npm run test:unit` | PASS, 602 passed, 2 warnings |
-| `LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration` | PASS, 9 passed, 1 skipped |
-| `npm run test:visual` | PASS, 12 Playwright tests |
-| `npm run desktop:tauri:check` | PASS |
-| `npm run release:artifacts` | PASS |
-| `npm run release:validate` | PASS |
-| `node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.2-py3-none-any.whl` | PASS |
-| `npm pack --dry-run` | PASS |
-| Rebuilt desktop app startup/shutdown verification | PASS |
-| `npm run vercel:build` | PASS |
-| Markdown link check for README-linked docs | PASS |
-
-## Artifact Validation
-
-Exact v4.3.2 artifacts were found:
-
-- `dist/ltcai-4.3.2-py3-none-any.whl`
-- `dist/ltcai-4.3.2.tar.gz`
-- `dist/ltcai-4.3.2.vsix`
-- `ltcai-4.3.2.tgz`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.2_aarch64.dmg`
-
-The release validator warned that `dist/` also contains older historical
-artifacts. This is not a v4.3.2 artifact failure, but release uploads must use
-only the exact filenames above and never a wildcard over the `dist/` directory.
-
-## Desktop Verification
-
-- The rebuilt Tauri app launched from
-  `src-tauri/target/release/bundle/macos/Lattice AI.app/Contents/MacOS/lattice-ai-desktop`.
-- `/health` responded on `127.0.0.1:8765` with version `4.3.2`, local mode, and
-  the isolated data dir `/tmp/lattice-v432-desktop3`.
-- Normal macOS quit released port 8765.
-- Evidence:
-  - `output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json`
-  - `output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt`
-  - `output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png`
-
-## Notes
-
-- The live Postgres migration test remained skipped because v4.3.2 did not
-  request fresh Docker consent. Postgres remains optional and was not changed by
-  this RC.
-- Wheel smoke emitted optional MLX warnings inside the isolated venv, then
-  passed imports and `/health`.
-- Rust reported a future-incompatibility warning from transitive crate
-  `block v0.1.6`; `cargo check` passed.
-- GitHub Actions for the v4.3.2 RC commit were green before release-prep doc
-  cleanup: `CI` and `Visual Smoke` both completed successfully for
-  `8f3d182ee81bb395722ebab792dfd70f35e19e96`.
-- Vercel config is intentionally documentation-only: it builds
-  `vercel-static/index.html`, pins the Framework Preset to "Other", and does
-  not attempt to auto-detect or host `server.py` / the desktop runtime.
-
-## Result
-
-PASS. v4.3.2 RC artifacts and runtime behavior are validated.

package/docs/V4_3_3_VALIDATION_REPORT.md

@@ -1,46 +0,0 @@
-# Lattice AI v4.3.3 Validation Report
-
-Date: 2026-06-13
-
-v4.3.3 validation is green for the post-cleanup release tree. The release
-rebuilds exact-current-main artifacts after the independent dead-code,
-architecture, and runtime audit cleanup; v4.3.2 artifacts are intentionally not
-reused.
-
-## Validation Results
-
-| Check | Result |
-| --- | --- |
-| `npm run check:python` | PASS, compiled 689 modules |
-| `node scripts/run_python.mjs -m ruff check .` | PASS |
-| `npm run lint` | PASS |
-| `npm run typecheck` | PASS, frontend TypeScript and VS Code extension build |
-| `npm run test:unit` | PASS, 602 tests |
-| `LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration` | PASS, 9 tests and 1 consent-gated Postgres migration test skipped |
-| `npm run test:visual` | PASS, 12 Playwright tests |
-| `npm run desktop:tauri:check` | PASS |
-| `npm run release:artifacts` | PASS |
-| `npm run release:validate` | PASS for exact v4.3.3 wheel, sdist, npm tgz, VSIX, and DMG |
-| `node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.3-py3-none-any.whl` | PASS, `/health` reported 4.3.3 |
-| `npm pack --dry-run` | PASS, `ltcai-4.3.3.tgz`, 292 files, 2.9 MB |
-| `node scripts/run_python.mjs -m twine check dist/ltcai-4.3.3-py3-none-any.whl dist/ltcai-4.3.3.tar.gz` | PASS |
-| `npm run docs:check-links` | PASS, README and 16 README-linked Markdown files |
-| `npm run vercel:build` | PASS, static placeholder generated for 4.3.3 |
-
-## Artifacts
-
-| Artifact | SHA-256 |
-| --- | --- |
-| `dist/ltcai-4.3.3-py3-none-any.whl` | `716d0029a6053edacde13cad978f38e41a9c67b458eba37421ae5594e7b99948` |
-| `dist/ltcai-4.3.3.tar.gz` | `77c19e9ad3e0cea757265b707b6414aef53a9d132f0456b7f0c36bcf09ece6b4` |
-| `ltcai-4.3.3.tgz` | `fb29c81152fe13854e6c3ba07f5ba8b8b14f25eedbb1920600d05ef768bec044` |
-| `dist/ltcai-4.3.3.vsix` | `28f243dbea1d0c49f78eb09176ae5c1f95d0d8530e49a103664dd338e53eac88` |
-| `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.3_aarch64.dmg` | `e717a53f83762799a32e2fa1e23c9a6fd5b2b2221bb503d12e7940e57a3455a2` |
-
-## Notes
-
-- `npm run release:validate` warned that historical artifacts remain in
-  `dist/`; uploads must use only the exact v4.3.3 filenames above.
-- The live Postgres migration test remains skipped unless the owner explicitly
-  sets Docker/Postgres consent for that destructive external dependency path.
-- External registry publishing was not attempted.

package/docs/V4_3_PORTABILITY_ARCHITECTURE.md

@@ -1,69 +0,0 @@
-# Lattice AI v4.3.0 Portability Architecture
-
-## Scope
-
-v4.3.0 hardens the v4.2 Brain Core/storage architecture without redesigning it.
-The primary portable brain format is the encrypted `.latticebrain` archive.
-FastAPI remains the only boundary consumed by the frontend and desktop shell.
-
-## `.latticebrain` Archive Format
-
-The archive is a JSON envelope with:
-
-- `format = latticebrain.encrypted`
-- `format_version = 2`
-- PBKDF2-HMAC-SHA256 key derivation metadata
-- AES-256-GCM cipher metadata
-- encrypted ZIP payload
-- payload SHA-256
-- non-secret manifest summary for inspection
-
-The encrypted payload contains:
-
-- `knowledge_graph.sqlite`
-- `blobs/` from the Knowledge Graph blob store
-- portable JSON state under `data/`
-- signed graph export bundles under `workspace_exports/`
-- `manifest.json` with entry hashes, section flags, storage metadata,
-  public device identity metadata, provenance, and version.
-
-Private key material such as `device_identity.key` is deliberately excluded.
-
-## Operations
-
-- Export: `POST /api/knowledge-graph/archive`
-- Inspect: `POST /api/knowledge-graph/archive/inspect`
-- Verify: `POST /api/knowledge-graph/archive/verify`
-- Import: `POST /api/knowledge-graph/archive/import`
-- Restore: `POST /api/knowledge-graph/archive/restore`
-- Backup health: `GET /api/knowledge-graph/backup-health`
-
-Restore/import fail closed unless the request is a dry run or includes
-`confirm: true`.
-
-## Compatibility
-
-- v1 `.latticebrain` payloads that contain only DB/blob data remain restorable.
-- SQLite remains the default source and target.
-- Postgres scale-mode brains export through safe logical/archive semantics; the
-  migration tooling still requires explicit DSN and does not silently fall back.
-- Existing Knowledge Graph JSON exports and ZIP backups remain supported.
-
-## Integrity Policy
-
-Archives fail closed on:
-
-- bad passphrase
-- corrupt envelope
-- corrupt ZIP payload
-- payload SHA mismatch
-- missing brain database
-- manifest hash mismatch
-- unsupported future archive version
-- unsafe ZIP member paths
-
-## User Safety
-
-Destructive restore operations require admin permission and explicit
-confirmation. Dry-run restore returns the target paths and payload sections
-without mutating user data.

package/docs/V4_3_PRIVACY_AUDIT.md

@@ -1,60 +0,0 @@
-# Lattice AI v4.3.0 Privacy And Local-First Audit
-
-## Default Startup
-
-Default local startup is loopback-only and local-first:
-
-- host: `127.0.0.1`
-- Telegram disabled
-- model autoload disabled in local mode
-- network CORS disabled
-- storage engine: SQLite
-- embedding provider: local hash fallback
-- Docker not auto-started
-- Postgres not required
-- updater checks disabled unless explicitly enabled
-
-## Token Presence Policy
-
-Credentials alone do not enable outbound communication. The product-hardening
-status distinguishes `credential_present` from `enabled`.
-
-Audited integrations:
-
-- Telegram: requires `LATTICEAI_ENABLE_TELEGRAM=true`
-- Brain Network: peer push is explicit user/admin action; no automatic sync
-- Update checks: require `LATTICEAI_ENABLE_UPDATES=true`
-- Model downloads: require explicit load/autoload/user action
-- Docker setup: requires runtime consent
-- Postgres: requires explicit storage engine and DSN
-- External connectors: credentials are inert until connector enablement and
-  invocation
-
-## Tests
-
-Unit coverage proves:
-
-- default config is local-only
-- Telegram is disabled by default
-- Telegram token presence alone does not enable Telegram
-- cloud/API-token presence alone does not enable external connectors
-- product hardening status reports opt-in egress honestly
-
-## Desktop Guardrails
-
-Tauri sidecar startup sets local-only environment overrides for the packaged
-backend. Desktop status commands expose missing backend/runtime failures as
-honest unavailable states.
-
-## CLI Guardrails
-
-The CLI startup notification path now requires `LATTICEAI_ENABLE_TELEGRAM=true`;
-Telegram bot token and chat ID presence alone no longer starts a notification
-thread.
-
-## Remaining Owner-Only Privacy Decisions
-
-- Package registry publication remains owner-only.
-- Production model downloads remain explicit user action or policy opt-in.
-- History rewrite for old binary assets remains owner-only because it requires a
-  force push.

package/docs/V4_3_PRODUCT_HARDENING_REPORT.md

@@ -1,53 +0,0 @@
-# Lattice AI v4.3.0 Product Hardening Report
-
-## Summary
-
-v4.3.0 turns the v4.2 Brain Core/storage release into a safer desktop product
-without changing the Brain Core, storage, frontend, agent, or workflow
-architecture.
-
-## Desktop Shell
-
-- Tauri sidecar startup now records command, PID, origin, running state, and
-  last error.
-- Tauri exposes `backend_status`, `restart_backend`, and `shutdown_backend`
-  commands.
-- Sidecar startup forces loopback host, disables Telegram, disables autoloaded
-  models, disables network CORS, and disables tunnels.
-- Missing Python or backend command failures are stored as actionable desktop
-  status instead of being hidden.
-
-## Backup And Restore
-
-- `.latticebrain` archive export/inspect/verify/import/restore is API-backed.
-- Backup health is exposed through FastAPI and the System settings view.
-- Restore dry-run verifies the archive and returns planned targets without
-  mutation.
-- Restore/import requires explicit confirmation for destructive execution.
-- SQLite-to-Postgres live migration now creates and verifies a pre-migration
-  SQLite backup before copying data.
-
-## Admin Status
-
-`GET /admin/product-hardening` reports:
-
-- local-only startup posture
-- storage mode
-- backup health
-- public device identity metadata
-- external integration opt-in state
-- admin import/export/restore permissions
-- fail-closed behavior for archive and restore errors
-
-## Release Packaging
-
-- Release artifact validation now checks the exact Tauri DMG path.
-- Release artifact build script cleans only target-version outputs before
-  rebuilding.
-- Historical artifacts remain visible so wildcard upload mistakes from `dist`
-  are still detectable.
-
-## Registry Policy
-
-v4.3.0 RC work builds and validates artifacts only. It does not publish to PyPI,
-npm Registry, VS Code Marketplace, Open VSX, or any other external registry.

package/docs/V4_3_VALIDATION_REPORT.md

@@ -1,58 +0,0 @@
-# Lattice AI v4.3.0 Validation Report
-
-> Status: passed for v4.3.0 RC artifacts on 2026-06-12. No package registry,
-> marketplace, GitHub Release, or tag publish was performed.
-
-## Target Artifacts
-
-- `dist/ltcai-4.3.0-py3-none-any.whl`
-- `dist/ltcai-4.3.0.tar.gz`
-- `ltcai-4.3.0.tgz`
-- `dist/ltcai-4.3.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.0_aarch64.dmg`
-
-## Validation Matrix
-
-| Gate | Command | Result |
-| --- | --- | --- |
-| Python compile check | `npm run check:python` | PASS — compiled 238 modules |
-| Ruff | `node scripts/run_python.mjs -m ruff check .` | PASS |
-| Unit tests | `npm run test:unit` | PASS — 598 passed, 2 warnings |
-| Integration tests | `LTCAI_TEST_BASE_URL=http://127.0.0.1:8899 npm run test:integration` | PASS — 9 passed, 1 skipped; backend was started on loopback with tunnel, Telegram, autoload, and network CORS disabled |
-| Frontend lint | `npm run lint:frontend` | PASS — frontend TS, no-CDN scan, OpenAPI path guard; 318 paths |
-| TypeScript typecheck | `npm run typecheck` | PASS — frontend and VS Code extension build |
-| Playwright visual/offline | `npm run test:visual` | PASS — 12 passed |
-| Tauri check | `npm run desktop:tauri:check` | PASS |
-| Tauri build | `npm run release:artifacts` | PASS — built app and DMG through `desktop:tauri:build` |
-| Archive export/import/restore | `tests/unit/test_v42_brain_storage.py`, `tests/unit/test_kg_portability.py` | PASS |
-| Backup/restore corruption | `tests/unit/test_kg_portability.py` | PASS |
-| Signature/version mismatch | `tests/unit/test_v42_brain_storage.py`, `tests/unit/test_t8_brain_network.py` | PASS |
-| Default startup no-network | `tests/unit/test_config.py`, `tests/unit/test_v43_product_hardening.py`, `tests/unit/test_v43_cli_privacy.py`, integration startup banner | PASS |
-| Release artifact validation | `npm run release:validate` | PASS — exact 4.3.0 files found; warning retained for historical artifacts in `dist/` |
-| Wheel smoke | `node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.3.0-py3-none-any.whl` | PASS |
-| npm pack dry-run | `npm pack --dry-run` | PASS |
-
-## Artifact Hashes
-
-| Artifact | SHA-256 |
-| --- | --- |
-| `dist/ltcai-4.3.0-py3-none-any.whl` | `c6fb5457bff312ebf694ccf83e53f82124de2b6d83f7f988a4f672b39475cf27` |
-| `dist/ltcai-4.3.0.tar.gz` | `c7830b7db62ea0e6e7de2107f3c0903d17546cf9bfa199596fdb930d372a0aaf` |
-| `dist/ltcai-4.3.0.vsix` | `939a2839f2b5551136df14321fbfe3da0460e35f76be3a1fea5306628c640df0` |
-| `ltcai-4.3.0.tgz` | `e4c94d6331482dd913525c24198d95fef693667a85df88b73548ec281ac1cb16` |
-| `src-tauri/target/release/bundle/dmg/Lattice AI_4.3.0_aarch64.dmg` | `bda5020dd556cd918cc3ef448468f175934e95ab4a7665a37db195faac7fc5fb` |
-
-## Notes
-
-- The v4.2 live Docker/pgvector integration test was skipped because no v4.3
-  Docker consent was requested for this release-candidate validation pass.
-- A direct `npm run test:integration` without a live server fails by design; the
-  passing run above used the documented `LTCAI_TEST_BASE_URL` against an
-  isolated loopback server.
-- Tauri/Cargo emitted a dependency future-incompatibility warning for `block
-  v0.1.6`; it did not fail `cargo check` or the release build.
-
-## Registry Policy
-
-No PyPI, npm Registry, VS Code Marketplace, Open VSX, or other external
-registry publish is part of this RC.