[devnet82]

Candidate-aware QA repair addressing #2. Real application stage now proven in GitHub for historical full application v0.6.85 without rebuilding or altering the original ZIP. Router v0.2.4, Master QA v0.3.8 and the user's installed v0.4.4 restricted controller are untouched.

Exact source and evidence: GitHub Actions run 41143631600, source commit 64220c315ca44814c6855878499d3ffb6ceca219, immutable original ZIP SHA256 db9af6ff47f3abcf07cf452ddd91e91cbd75a10296c0c6050bb5c612980d9cf3. All 4 jobs SUCCESS: (1) Ubuntu GitHub exact-archive + 9/9 real isolated-HOME installer/reinstall/uninstall checks, (2) genuine hardware-accelerated CachyOS QEMU live guest: 9/9 native package/integrity/version checks + 8/8 real unprivileged installer/reinstall/uninstall checks, (3) separate GitHub job validates all 26/26 in-scope results and attests the ZIP and receipt, (4) independent signature/source verification succeeded with SIGNED_GITHUB_NATIVE_LIVEISO: VERIFIED_SCOPE_LIMITED. ZIP remained byte-identical.

Real bugs diagnosed and fixed in QA harness, not by repackaging application: (a) legacy guest harness wrongly required VERSION file absent from original v0.6.85, replaced with original GUI/CLI/tray version markers; (b) QA fixture created root-owned ~/.config, blocking its own unprivileged app install, corrected and retested.

FULL MASTER QA IS STILL BLOCKED intentionally, because a live ISO isn't an installed CachyOS KDE session, real GUI/tray visibility and pointer, transactional prior-version upgrade and rollback, physical VR host/Quest 3 tests and separately trusted user-local VM/host evidence have not been run. Current full v0.6.135 preview ZIP remains unavailable for exact-current-build tests. Signed 26/26 LIMITED scope does not warrant release approval. Keep draft, no merge, do not alter user installations. Existing qa/application/release_coordinator.py and stage_executor.py remain a not locally deployed path to finish genuine full acceptance.

[devnet82]

Devnet Safe AI v0.1.2 — GENUINE GITHUB-FIRST QA (PASS LIMITED; RELEASE BLOCKED)

Exact archive SHA256: fd227dfc54e26e10198ebc0623088aea7884fa62840b7999b32d8a2d0618a8ae.
GitHub Actions run: https://github.com/devnet82/vr-stack-control/actions/runs/41203076479 — 3/3 jobs SUCCESS.

1. Exact candidate archive SHA256, four ZIP members, internal checksums, Python compile and privacy preflight: PASS.
2. Real GitHub-hosted CachyOS QEMU/KVM guest boot, exact ZIP verification and all 30 fresh v0.1.2 Python tests: 30 PASS, 0 FAIL, guest evidence artifact https://github.com/devnet82/vr-stack-control/actions/runs/41203076479/artifacts/13043840440.
3. Independent evidence and scope gate: PASS LIMITED; signed candidate attestation https://github.com/devnet82/vr-stack-control/attestations/62112628 and signed scope attestation https://github.com/devnet82/vr-stack-control/attestations/62112634.

Not tested/blocked: live Ollama/OpenCode integration for THIS exact launcher, application installation/upgrade/rollback and GUI/host security in the user's own CachyOS VM/host, comprehensive Master QA, final user acceptance. The earlier v0.1.1 native VM failed 1/30 due to overbroad test assertion; v0.1.2 passed the full suite afresh. Existing v0.1.0 installation was not modified. Do NOT approve or publish a release.

[devnet82]

Additive Master QA runner-reality update — 2026-10-31 (QA LIMITED, no release)

The Devnet Safe AI r2 incident (opencode v2.2.4 valid native output wrongly rejected by a runner that only tested bare versions) is now a permanent mandatory policy regression on this draft QA branch.

Files:

• qa/master/QA_RUNNER_REALITY_RULE_v0.1.0.md: additive 100%-fresh GitHub→CachyOS VM→host real-tool validation, negative tests, runner/candidate provenance, independent evidence and signed checklist protections.
• qa/master/runner_reality_gate.py: scoped live OpenCode CLI capture and re-execution verification; cannot approve releases.
• qa/master/test_runner_reality_gate.py and qa/application/test_master_runner_reality.py: enforce fixture/negative regressions in existing coordinator CI.
• qa/application/README.md: permanent link to the new runner acceptance IDs and blocker semantics.

GitHub development regression execution run 41206750617: 51/51 PASS, including 10 new runner-output/negative-evidence tests. This is not actual live OpenCode in target CachyOS VM; no protected Master QA signature or host acceptance was created.

Remaining blockers: GitHub-hosted real CachyOS execution of this new runner checker and independent evidence, local target-VM full re-test, protected Master QA v0.3.8 baseline integration/upgrade, host checks and user acceptance. Existing baseline and Devnet Safe AI installation are preserved. release_approved=false.