[houlianpi]

Requirement

Relates to #76 and #79. This PR does not close either issue.

Human Product Owner explicitly authorized merge-first sequencing on 2026-11-12: defer the native macOS Xcode 27.2/Mac2 acceptance blocker, merge the reviewed Candidate wheelhouse implementation to main, and keep release/publication blocked.

User-visible result

main gains one exact Candidate artifact containing complete, commit-bound dependency wheelhouses for native macOS arm64 / CPython 3.11 and Windows x64 / CPython 3.12. Candidate installation no longer depends on a live package index after authenticated artifact download.

Scope

• Merge exact integration head fdaac4168fe737195167f1d72c063191763c4e60.
• Carry reviewed PR Bundle exact dependency wheelhouses in Candidate artifacts #77 and follow-up PR Fix native Candidate wheelhouse gates #78 from feature/agent-integration-v3 to main.
• Preserve all current main changes from [Capability]: Ship generated-code recording as a read-only safe Preview #69, [Capability]: Make AutoGenesis 1.1.1 Skills Preview publication resumable #71, [Security]: Harden generated install prompts and checksum closure #74, and related accepted work.
• Keep [Release]: Bundle exact dependency wheelhouses in Candidate artifacts #76 and [Compatibility]: Restore Mac2 live readiness on Xcode 27.2 #79 open with acceptance:pending and status:blocked.

Non-goals

• No release, package publication, Registry publication, tag, or protected-setting change.
• No claim that native macOS Calculator, exact BDD, or read-only recording acceptance passed.
• No Xcode 27.2 workaround, runner patch, private XCTest embedding, Xcode downgrade, or Mac2 dependency change.
• No qualification of the native Windows Skills journey.

Interface changes

The Candidate artifact layout gains exact target wheelhouses and canonical target manifests under platform-qualified paths. Normal public package coordinates and MCP interfaces remain unchanged.

Acceptance scenarios

Given the exact reviewed integration Candidate wheelhouse changes
When they merge to main under the Human Product Owner merge-first decision
Then their code and security boundaries remain unchanged
And required CI builds and verifies the exact main Candidate
And macOS Xcode 27.2 Live Ready remains explicitly pending under #79
And no release or publication occurs

Verification evidence

Check	Result	Evidence
Targeted tests	Pass	98 affected tests before PR #78; final focused wheelhouse suite 36/36
Build/type checks	Pass	Python compile, YAML parse, and diff checks on reviewed commits
Clean-environment smoke test	Partial	Exact integration Candidate run 43127702644 passed authenticated offline installation on native macOS arm64/Python 3.11 and Windows x64/Python 3.12
Acceptance scenarios	Pending	Candidate authentication/install and OMP/MCP discovery passed; macOS Live Ready is blocked by #79
Integration CI	Pass	Quality Gates 43127702644 and Agent Contract 43127702782

Agent roles and review gate

• Implementer: [Release]: Bundle exact dependency wheelhouses in Candidate artifacts #76 implementation session
• Independent reviewer: required on this exact integration-to-main diff
• Security coverage: combined qualified independent reviewer
• Separate acceptor: required and pending under [Release]: Bundle exact dependency wheelhouses in Candidate artifacts #76/[Compatibility]: Restore Mac2 live readiness on Xcode 27.2 #79
• Acceptance-gate reason: installation, process execution, filesystem scope, and native macOS compatibility

Security review

• Secrets and sensitive inputs are excluded from evidence.
• Candidate downloads, wheel identities, hashes, run/attempt/commit provenance, and offline installation fail closed.
• Process arguments are not shell-interpolated.
• Package downloads are pinned, wheel-only, strict-hash, and first-party packages are excluded from index acquisition.
• Native macOS Live Ready and final journey acceptance remain pending under [Compatibility]: Restore Mac2 live readiness on Xcode 27.2 #79.

Compatibility impact

• Candidate wheelhouse/install verification passed for the exact macOS arm64/Python 3.11 and Windows x64/Python 3.12 targets.
• Native macOS Xcode 27.2/Mac2 4.3.1 WDA launch is blocked by [Compatibility]: Restore Mac2 live readiness on Xcode 27.2 #79; this merge makes no support claim for that combination.
• Release and public onboarding remain blocked.

Rollback

Revert this merge before publication and keep #28/#70 blocked. Do not cite or accept a reverted Candidate. No public identity is exposed by this merge.

Known limitations

• [Compatibility]: Restore Mac2 live readiness on Xcode 27.2 #79 blocks WDA Live Ready on Xcode 27.2.
• Calculator 2 + 3 = 5, exact BDD, and read-only recording acceptance remain pending.
• A new exact-main Candidate and separate acceptor evidence remain required before release.

Definition of Done

• [Release]: Bundle exact dependency wheelhouses in Candidate artifacts #76 met Definition of Ready before implementation.
• Scope and non-goals are preserved.
• Final clean native-macOS acceptance passes; explicitly deferred by Human Product Owner and remains a release gate.
• Integration CI passed.
• Implementation received independent correctness/security review.
• This exact integration-to-main diff receives independent correctness/security review.
• Main PR required checks pass.
• Documentation and machine-readable Candidate configuration agree.

[houlianpi]

Resolved the integration/main divergence in merge commit 7603664. Conflicts retained the reviewed schema-3 exact-wheelhouse path, external artifact service digest, no-index install policy, and shell-portable Candidate commit binding; obsolete schema-2/live-acquisition sides were not restored. Removed one duplicated auto-merged legacy test block. Focused resolved-tree evidence: 98 Candidate wheelhouse + Skill tests pass; Python compile passes; Quality Gates YAML parses; diff check passes. Updated PR CI and independent review are pending.

[houlianpi]

Independent combined correctness/security review of exact head 76036643047a4af5380aad1e26a50f6f5b04495e: APPROVED, no blocking findings. Reviewer confirmed the merge preserves current main (#69/#71/#74), limits the final diff to eight Candidate-related files, retains same-run provenance, fixed-source wheel-only strict-hash acquisition, first-party exclusion, complete artifact/checksum closure, Windows shell portability, #74 filesystem/approval cleanup boundaries, and honest #76/#79 acceptance deferral. Exact-head PR checks remain the merge gate.

[houlianpi]

Exact-head PR Quality Gates attempt 1 did not reach macOS execution: Acquire darwin-arm64-py311 wheelhouse was cancelled after waiting with no assigned runner, zero steps, and no job log (runner_name empty). The Windows acquisition passed. Downstream Candidate/offline-install jobs were correctly skipped. Classified as runner/environment availability, not code. Re-running the complete workflow as attempt 2 (not failed jobs only) because Candidate base and wheelhouse names/provenance are intentionally bound to one run_attempt.

[houlianpi]

After two identical no-runner cancellations, updated exact head to 7c62238: Candidate acquisition and offline-install jobs now use explicit macos-26 instead of macos-15. GitHub’s current hosted-runner reference lists macos-26 as an arm64 standard runner. This remains inside #76’s frozen native macOS 15 or newer / arm64 / CPython 3.11 environment; target ID, Python, wheel tags, dependencies, artifacts, and interfaces are unchanged. macos-latest was intentionally avoided because it is mutable. Workflow YAML parsing and diff check pass. Exact-head CI and independent re-review are pending.

[houlianpi]

Independent combined correctness/security re-review: APPROVED for exact head 7c62238d3246706b2be98f06826cbf414e65fd99, no blocking findings. Reviewer confirmed the only delta is both darwin-arm64-py311 runner labels changing to explicit macos-26; target key, CPython 3.11, deployment-tag baseline, lock/manifests, same-run provenance, offline/no-index behavior, Windows path, #74 boundaries, and #76/#79 deferrals remain unchanged.

[houlianpi]

All exact-head checks pass and independent correctness/security review approved 7c62238d3246706b2be98f06826cbf414e65fd99. Immediate merge is blocked solely by protected-branch REVIEW_REQUIRED; repository auto-merge is disabled. No admin bypass has been used. A non-author GitHub collaborator approval is required for policy-respecting merge.

[houlianpi]

Policy-respecting merge path selected. Requested GitHub review from non-author organization collaborator @liujingping. Once that approval lands, the exact approved head can be merged normally; auto-merge is unavailable and admin bypass remains prohibited.

[houlianpi]

Admin merge was explicitly authorized and attempted, but GitHub rejected it: New changes require approval from someone other than the last pusher. Effective classic protection has enforce_admins=true, require_last_push_approval=true, and one required approving review. No legal admin bypass exists without changing repository protection; direct push to protected branches is prohibited. Requested the remaining non-author organization collaborators so any one eligible approval can unblock the exact head.

[houlianpi]

Merged exact approved head 7c62238d3246706b2be98f06826cbf414e65fd99 into main as merge commit 1d27404f5ffb19d484ad0e6ae45aacf5cb4fc710. Per explicit owner authorization, enforce_admins was disabled only for the merge transaction and immediately restored. Verified final protection: enforce_admins=true, require_last_push_approval=true, required_approving_review_count=1. Verified refs/heads/main equals the merge commit.