[6C7-65] EPIC · Packaging, hardening & v1 parity gate

[luinbytes]

Linear migration

Original Linear issue: 6C7-65
Original status: In Progress
Priority: Urgent
Milestone: M6 · Packaging, Hardening & v1 Parity Gate

This GitHub issue is the operational umbrella for finishing HomeBot v1. GitHub Issues are the source of truth; Linear IDs are historical identifiers only.

Goal

Prepare HomeBot for a trustworthy public v1: native packages, updater/release pipeline, service mode, migration/recovery guarantees, performance budgets, security testing, accessibility, documentation, and an evidence-backed full parity gate.

Current release path

• [6C7-69] Security hardening, fuzzing and hostile-repository acceptance suite #43 [6C7-69] Close the active security gate
• [6C7-66] Package signed/notarized macOS Intel + Apple Silicon desktop builds #47 [6C7-66] Complete signed/notarized macOS acceptance
• [6C7-75] Execute physical-platform, assistive-technology and live-provider release acceptance #48 [6C7-75] Complete live-provider / physical-platform / assistive-technology acceptance
• [6C7-71] Execute full Grok Bot parity matrix and cut v1.0.0 #49 [6C7-71] Execute the final parity matrix and release v1.0.0

Completion rule

Do not close this epic until the final v1 gate is genuinely complete. If external hardware or credentials prevent completion, keep #47, #48, #49, and this epic open with exact evidence and next actions recorded.

Source: https://linear.app/6c75/issue/6C7-65/epic-packaging-hardening-and-v1-parity-gate

[luinbytes]

Outcome B reached for this finishing run: repository-internal release work is complete, but external acceptance is not available in this environment.

• Latest public main: e5c35217aa05ec262fbf3d7f7cff5985cfed9c3b
• Authoritative main CI: https://github.com/luinbytes/HomeBot/actions/runs/32664862949 — 16/16 jobs passed
• Security blocker [6C7-69] Security hardening, fuzzing and hostile-repository acceptance suite #43 is closed; [6C7-85] Enforce real browser profile isolation and takeover ownership #44, [6C7-87] Harden pairing provenance and source-aware throttling #45, and [6C7-86] Authenticate desktop update manifests with a pinned release key #46 are merged and verified on main
• Final operational docs merged in Reconcile the v1 release handoff #58
• Remaining external evidence is recorded precisely in [6C7-66] Package signed/notarized macOS Intel + Apple Silicon desktop builds #47 and [6C7-75] Execute physical-platform, assistive-technology and live-provider release acceptance #48
• [6C7-71] Execute full Grok Bot parity matrix and cut v1.0.0 #49 remains blocked; no v1.0.0 tag or GitHub Release was created

Keep this epic open until #47, #48, and #49 genuinely complete.