runtime: ship repaired v4.5.1 activation bundle

README.md

@@ -145,6 +145,14 @@ Contributors need no access to the private build/sign system. See
   Authentication, protocol/output, timeout, provider, teardown, and cleanup
   failures remain orthogonal. Managed execution does not use output/stderr
   heuristics or routine direct CLI fallbacks.
+- **The repaired runtime is co-packaged again.** The darwin-arm64 standalone
+  runtime was rebuilt from final workspace `1.0.823` commit
+  `d08b6382710d6d5910d64cf011bcac873a2e1c03`, Developer-ID signed, and Apple
+  notarized as submission `c6d29dec-5351-467d-883e-0b862734567d`. The closed
+  activation manifest pins bundle SHA-256
+  `2cea10cff2030d0238661667cf8d1b83cf9885dc6f4a03b0db4365e891b04f47`;
+  release verification rejects any byte, member, signature, contract, or
+  notarization drift.
 
 ## What's new - v4.5.0
 

changelog.d/2026-07-26-004-v451-runtime-release.md

@@ -0,0 +1,21 @@
+<!-- release: agent-collab 4.5.1 -->
+### Changed
+
+- Rebuild the darwin-arm64 provider runtime from final workspace `1.0.823`
+  commit `d08b6382710d6d5910d64cf011bcac873a2e1c03`, Developer-ID sign it, and
+  notarize it through Apple submission
+  `c6d29dec-5351-467d-883e-0b862734567d`.
+- Replace the policy-only placeholder with a closed activation manifest that
+  pins the complete standalone bundle at SHA-256
+  `2cea10cff2030d0238661667cf8d1b83cf9885dc6f4a03b0db4365e891b04f47`.
+  The rebuilt runtime includes the v4.5.1 provider-agnostic containment,
+  canonical-user-HOME authentication, private request workspace, bounded
+  execution/teardown/cleanup, OpenCode Go, output conformance, and lifecycle
+  continuity repairs from the final merged workspace.
+
+### Tests
+
+- Verify the imported handoff byte-for-byte, re-run the Developer ID,
+  hardened-runtime, secure-timestamp, Apple-notarization, Mach-O, contract,
+  member-inventory, and whole-bundle gates, then build and reopen the canonical
+  activation archive.

plugins/agent-collab/README.md

@@ -172,21 +172,23 @@ retained-lane rollback continuity; any received v2 discriminator selects only
 v2. Dual-version callers use `GEMINI_GOVERNANCE_PROOF_KEYSETS`; the legacy
 `GEMINI_GOVERNANCE_PROOF_KEYS` alias remains v1-only.
 
-No signed artifact is present in this source tree yet. Native **Gemini
-advisory/governance/long-context**, **Codex advisory**, **OpenCode plan/build**,
-and **Grok 4.5 read-only architecture consultation, governance review,
-huge-context ingestion, and output-only code/patch generation through the
-`composer/codegen` compatibility route**
-roles are therefore **temporarily unavailable**. Policy-only safe mode keeps
-all native model routes unavailable. A host inbox is eligible only after a
-current availability observation, and the public coordinator exposes readiness
-only rather than a send primitive.
-This package may still be distributed as a policy-only release: its manifest
-has no artifact rows, its archive has no runtime bundle, and invocation
-continues to return typed unavailable until an activation release is verified.
-An activation archive must add the complete digest-pinned third-party legal
-tree and component-aware SPDX evidence alongside the signed runtime.
-Reinstalling a retired plugin is never a rollback.
+This 4.5.1 source tree carries the rebuilt darwin-arm64 activation artifact
+from final workspace `1.0.823` commit
+`d08b6382710d6d5910d64cf011bcac873a2e1c03`. Its manifest pins the complete
+standalone bundle at SHA-256
+`2cea10cff2030d0238661667cf8d1b83cf9885dc6f4a03b0db4365e891b04f47`;
+the bundle is Developer-ID signed and Apple-notarized under submission
+`c6d29dec-5351-467d-883e-0b862734567d`. Native **Gemini
+advisory/governance/long-context**, **Codex advisory/governance**,
+**OpenCode plan/build**, and **Grok 4.5 read-only architecture consultation,
+governance review, huge-context ingestion, and output-only code/patch
+generation through the `composer/codegen` compatibility route** become
+available only after the installed lifecycle has positively proven the exact
+artifact, manifest, dispatcher, broker, and provider tuple. Safe mode or an
+unproven host still returns typed unavailable. A host inbox is eligible only
+after a current availability observation, and the public coordinator exposes
+readiness only rather than a send primitive. Reinstalling a retired plugin is
+never a rollback.
 
 To enter rollback mode, set `AGENT_COLLAB_SAFE_MODE=1` in the active host
 runtime environment and restart the host. Unset it and restart only after the

plugins/agent-collab/runtime-manifest.json

@@ -1,8 +1 @@
-{
-  "schema_version": 3,
-  "protocol_version": 2,
-  "contract_version": 3,
-  "broker_protocol_version": 2,
-  "channel": "production",
-  "artifacts": []
-}
+{"artifacts":[{"arch":"arm64","contracts":[{"action":"codegen","route":"composer"},{"action":"advisory","route":"codex"},{"action":"governance","route":"codex"},{"action":"advisory","route":"gemini"},{"action":"governance","route":"gemini"},{"action":"long_context","route":"gemini"},{"action":"architecture","route":"grok"},{"action":"governance","route":"grok"},{"action":"huge_context","route":"grok"},{"action":"build","route":"opencode"},{"action":"plan","route":"opencode"}],"entrypoint":"agent-collab-runtime","files":[{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_asyncio.so","role":"runtime_library","sha256":"f4ba9d34086d4e1b091d63a78b8a3e479cb36f060db15010ef2e4ad12ca75925","signing_profile":"production_developer_id","size":116528},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_blake2.so","role":"runtime_library","sha256":"b4209154ad78fab832aa42a789fe59fadfccc3001862ec1356e8aac99059afd0","signing_profile":"production_developer_id","size":89456},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_bz2.so","role":"runtime_library","sha256":"1835a43ab566e07bbd33a0f54ae089059cc1568856eec63c8fb30e68dc4c93ef","signing_profile":"production_developer_id","size":72784},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_cn.so","role":"runtime_library","sha256":"ed28ec13c7d3e6ba3455cacd9312608543aba634cc4863890ca40a7dca3f663c","signing_profile":"production_developer_id","size":185264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_hk.so","role":"runtime_library","sha256":"e187c9543de3827bcacf0f83db09806c4717b18cf58e92c30e1ec2e15af4edea","signing_profile":"production_developer_id","size":185328},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_iso2022.so","role":"runtime_library","sha256":"c5434829221dd39a99135084d93e22dd501022a4979d4554f64dee976c90aa64","signing_profile":"production_developer_id","size":71936},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_jp.so","role":"runtime_library","sha256":"6ec8629aaa14eae3161b74eaf94164f75f7da4fad2fccc786391b2094b085729","signing_profile":"production_developer_id","size":301120},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_kr.so","role":"runtime_library","sha256":"f84dfdbafde81854a664b363228adf421a18bb94eab9251e3cf0f944c963764b","signing_profile":"production_developer_id","size":168928},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_tw.so","role":"runtime_library","sha256":"563d6dd200ecab7fb4da3adb3c0bb9a9ef6d6468daeb3b3b0e9c9fc34ff33273","signing_profile":"production_developer_id","size":168432},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_contextvars.so","role":"runtime_library","sha256":"faf2cf23d829c9074dab50e6c56bc85bf9eaeb6008f0f6b4d5347a31b678143f","signing_profile":"production_developer_id","size":68576},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_ctypes.so","role":"runtime_library","sha256":"e7a7c1769591a51ce4be55a6e620fd0b26079190d5cdc369f738847b63a805cd","signing_profile":"production_developer_id","size":175840},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_datetime.so","role":"runtime_library","sha256":"6d79fd14d941250238cbc047cf3dd050e719029fc776633cb9d0443736f3afb7","signing_profile":"production_developer_id","size":150144},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_decimal.so","role":"runtime_library","sha256":"c22a0540a6faff481efe774501527cfe5a0b00dee69bd6bd8385384266fb036e","signing_profile":"production_developer_id","size":364640},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_heapq.so","role":"runtime_library","sha256":"f7abf8afeb61af908ea4b96bf6644d7e803fe0a4d6b54c6069c7d60c3033c952","signing_profile":"production_developer_id","size":69728},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_md5.so","role":"runtime_library","sha256":"1ca03c410c684df311515b734a3a2d2651924bf435d893f28179b139f36aca4a","signing_profile":"production_developer_id","size":71728},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multibytecodec.so","role":"runtime_library","sha256":"d6ec5d5959ad6e3a4ce4ee83683ca43835c3cd9e9f6806acbd5109ce7acf2136","signing_profile":"production_developer_id","size":95808},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multiprocessing.so","role":"runtime_library","sha256":"ada39ceded9c1ed2925798463fa9b4bd20558f3e0adedc6570ae10aee00fbb79","signing_profile":"production_developer_id","size":73472},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_opcode.so","role":"runtime_library","sha256":"f7039b75afcfb16336c1da640bed64106d1046b7519f9882352108bbba17e440","signing_profile":"production_developer_id","size":72448},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_pickle.so","role":"runtime_library","sha256":"bcc9b8883b005c6b9fabc8dba365b7338c92120dd259e20db59db984194a78c5","signing_profile":"production_developer_id","size":168032},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixshmem.so","role":"runtime_library","sha256":"497831552e634d4e684c1bf0e0465779f8e5e4d70be2b561c9245fe61c1158ae","signing_profile":"production_developer_id","size":69408},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixsubprocess.so","role":"runtime_library","sha256":"82a5a150dea059dd460a33ccb14aeb82d7b3d01c257ee2faf3937a82f75f2223","signing_profile":"production_developer_id","size":72496},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_queue.so","role":"runtime_library","sha256":"b0ca5f1926a797685da54e3b94cbc2c97e674c9c8a9b4593349782cc7e86db41","signing_profile":"production_developer_id","size":71840},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_random.so","role":"runtime_library","sha256":"1aea89c0f631e56d921fe6666d49d10f00c054f0440b969c22edd800b06e8528","signing_profile":"production_developer_id","size":71680},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha1.so","role":"runtime_library","sha256":"8b004e7080fe5e1863f11a0478a56b641ca7ffc6b0554adc3f6ff7e936788a9e","signing_profile":"production_developer_id","size":71760},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha2.so","role":"runtime_library","sha256":"5270db68f1b8b23f3447df7a58f04dae9fd4f4daf48cf26fb0654e50054f877c","signing_profile":"production_developer_id","size":107264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha3.so","role":"runtime_library","sha256":"1194703a3ec33e86c1b44cc3ccc470f5db2e8a8dc8652919f1c8b312c8ac7aa4","signing_profile":"production_developer_id","size":91008},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_socket.so","role":"runtime_library","sha256":"012dfba4bc004768cb07383bf471b3f45222bae83a28aa98da092d92e090d1ea","signing_profile":"production_developer_id","size":132288},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_ssl.so","role":"runtime_library","sha256":"3f6c875dfbe06763a6cee279d6e3fa617fd35adf589b3730a8a779c4405b9bea","signing_profile":"production_developer_id","size":218384},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_statistics.so","role":"runtime_library","sha256":"7f56ea2aa1fc78fd75d2f2d1f53dc316bf335d2ba7e25d8c30195541062fce30","signing_profile":"production_developer_id","size":68704},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_struct.so","role":"runtime_library","sha256":"98e4b055e6bbfa4b3595ef161c1efac34296087751b63988a10ca0d4ff9c57b8","signing_profile":"production_developer_id","size":94528},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_uuid.so","role":"runtime_library","sha256":"bc1fd560c795bc3740212156f00361d483f04779b5c8fa2c71edc0e0972a230a","signing_profile":"production_developer_id","size":68528},{"architecture":"arm64","install_mode":320,"macho_type":"executable","minimum_macos":"14.0","path":"agent-collab-runtime","role":"entrypoint","sha256":"f641b9d8476b75a948f5d69e32b52b002e578b1a33c87c759e769804092c44e2","signing_profile":"production_developer_id","size":16465824},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"array.so","role":"runtime_library","sha256":"fb8154f17094831e37beee7456e25469aca91a5c9f507608e229be90a112915d","signing_profile":"production_developer_id","size":113760},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"binascii.so","role":"runtime_library","sha256":"a3763725e429b4bf7be5d20405eef3e631860d7955ad665a81dc9ba27380fd5c","signing_profile":"production_developer_id","size":72224},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"fcntl.so","role":"runtime_library","sha256":"c5b7c0a9baddf6fd32b76a148049d5ae58c16f0c26067e0f8e1b41f9d780f6d8","signing_profile":"production_developer_id","size":70368},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"grp.so","role":"runtime_library","sha256":"9a6ccaa657eae1c118c972202dc2f280ffef1da213985c020c0fc6a54275cf73","signing_profile":"production_developer_id","size":71024},{"architecture":"arm64","install_mode":320,"macho_type":"dylib","minimum_macos":"14.0","path":"libcrypto.3.dylib","role":"runtime_library","sha256":"327ea506a7acd15329a446f705c19bdd47b918016ea9ea9003768fd3dfde63f5","signing_profile":"production_developer_id","size":5027648},{"architecture":"arm64","install_mode":320,"macho_type":"dylib","minimum_macos":"14.0","path":"libpython3.13.dylib","role":"runtime_library","sha256":"233492d7c5e19b598c0b713c1ad8a2de5786575c8f45c3547e3aa6d909bbd3c3","signing_profile":"production_developer_id","size":4973360},{"architecture":"arm64","install_mode":320,"macho_type":"dylib","minimum_macos":"14.0","path":"libssl.3.dylib","role":"runtime_library","sha256":"4e70a0e723879b4bb041689c69f87427f05225c098bb47818c2846692d0d2c17","signing_profile":"production_developer_id","size":948576},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"math.so","role":"runtime_library","sha256":"d356a4a2c355be9f827d363d5a5de2b0462021ea03461c5a2c9cbde332d9622c","signing_profile":"production_developer_id","size":111216},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"mmap.so","role":"runtime_library","sha256":"77da961a0358e04b65c20aabc6b3782e52800203b07421634cfc4b745a767978","signing_profile":"production_developer_id","size":73776},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"pyexpat.so","role":"runtime_library","sha256":"6d7b9f86acbdc90b43de361a43f0fa3c0eb5ef9b513e4cebfed1e07eb5ff6fa0","signing_profile":"production_developer_id","size":259232},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"select.so","role":"runtime_library","sha256":"25b7504ce9d2112ff9e8c330c3f16ceff58f62c71882983cb35bfd2afd73940a","signing_profile":"production_developer_id","size":92160},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"termios.so","role":"runtime_library","sha256":"4037f2581507cb116e051dbf9918d809c0ada2f18a1787a5465e876f384246c0","signing_profile":"production_developer_id","size":71744},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"unicodedata.so","role":"runtime_library","sha256":"b61cb008168926fcdf1911a5273a18a956520c14436b4459d6cd731f13c10615","signing_profile":"production_developer_id","size":746848},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"zlib.so","role":"runtime_library","sha256":"1ea283a469da75117142b556f8aa3b40c896c40d3998ab23e8aab19ee9cfcc57","signing_profile":"production_developer_id","size":92896}],"kind":"standalone_bundle","minimum_macos":"14.0","path":"runtime/darwin-arm64/agent-collab-runtime.bundle","platform":"darwin","provider_runtime_version":"2.0.0","route_contract_version":2,"sha256":"2cea10cff2030d0238661667cf8d1b83cf9885dc6f4a03b0db4365e891b04f47","signing":{"hardened_runtime":true,"identity":"Developer ID Application: OSUMI CONSULTING LLC (36UFP9KY4T)","mode":"developer_id","require_notarization":true,"secure_timestamp":true,"team_id":"36UFP9KY4T"},"size":32998736}],"broker_protocol_version":2,"channel":"production","contract_version":3,"protocol_version":2,"schema_version":3}