Qualify v1.2 on macOS Docker Desktop

[BrettKinny]

This was generated by AI during triage.

Type: HITL

Parent

• Release v1.2.1 from one qualified Candidate #125

What to build

Qualify the v1.2 lifecycle and retained-home upgrade path on a real macOS host
using Docker Desktop, including paths with spaces, SSH forwarding and fallback,
timezone fallback, Install identity reuse, and safe purge behavior.

Record the Candidate version, source SHA, image digest, macOS version and
architecture, Docker Desktop version, shell, install paths, and pass/fail
evidence.

Acceptance criteria

• Fresh install, launch, setup, rebuild, uninstall, and purge succeed from a path containing spaces.
• A retained v1.1 Managed home upgrades without losing authentication, history, or selected tools.
• SSH-agent forwarding works and the private-key fallback remains read-only.
• A host without a bindable /etc/localtime uses the documented timezone fallback without blocking package setup.
• Portable hash and exact Sigstore identity verification commands work with documented prerequisites.
• Managed configuration refresh preserves user edits and rejects unsafe symlink destinations visibly.
• Rebuild and purge preserve or remove only resources recorded by the Install identity, including custom names.
• Results and failures are attached here and reflected in the v1.2 UAT checklist.

Blocked by

• Release v1.2.1 from one qualified Candidate #125