feat(authoring): connect public npm native evidence to packed installer gates

[777genius]

Public npm native evidence used a different terminal contract from the existing private packed installer gate, so the real public package journey could not feed the ten-project/thirty-plan checks. This adds explicit public intake, binds the executed tarballs and native evidence, and retains strict private intake and the mandatory native-plus-packed aggregate.

Stacked on #198 at 64cba1d. Includes the coherent packed gate imports from #172. Diff against the base: 13 files, 1,584 additions and 129 deletions.

Independent hosted review accepted cdf0aa4 with no blocking findings. Current focused validation passed: bridge 3/3, packed Python 14/14, native-results Python 17/17, public Node suites 62/62 without skips, matching CLI regression, workflow and syntax checks. Report SHA256: ac35715758fd9434c5e71d210eeee227fb48acc8dcbbfd35cda75d4d88f12a73.

Exact-head CI passed, including the native matrix, private packed Linux gate, source acquisition and polyglot checks. Run: https://github.com/777genius/universal-agent-plugins/actions/runs/34192695292. The archived private packed proof has 741 invocation records, ten projects and thirty plans; root verified its GitHub archive digest, all 7,652 indexed file hashes and successful phase exits. This is distinct from public npm acceptance.

Draft pending actual frozen-source public native E2E and the public ten-project/thirty-plan gate. Candidate compilation and actual public npm preparation passed. The public native E2E failed at the installer dry-run because Go attempted to acquire lintai over the network in an explicitly offline lane. No public native completion was emitted, and dependent packed/public lifecycle stages were stopped. A bounded source-owner correction is under investigation; no passing public E2E is claimed. Synthetic fixtures remain unqualified; no release, publication, or full-plan completion is claimed. Useful YAML functionality remains preserved.

Refs #172, #198

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}