The 2026-09-04 batch is retained as draft PR #26. Do not merge until missing verification is supplied.
Frozen upstream: 09d13de4381925fa2a6dea74eff8185fa301e905
Previous upstream: 2b745efe57cddc1753d3007d081c64bd20e3ab79
Fork base: 4c7b4026adcdddce1f82593e520585ac2c1f2ff0
Integration: c38ca47049b8aa7e80ca43554f6f73a17408b1d4
Verified source tree: ebd14f9afa614aef66596c0f51f771162802fe07
Completed in credential-isolated Linux: full frozen install with lifecycle scripts, eight scoped typechecks, mandatory Riker tests, authored regressions, changed-area suites, formatting on 373 TS/TSX files, lint (0 errors/292 warnings). Commands and individual outcomes are in #26. Remote file list/counts match the local 422-file diff. Riker/Copilot boundary preserved; Actions remains disabled.
Outstanding:
- Rerun 12 Git cases with a suitable modern Git. Isolated Git 2.34.1 rejects
git worktree list --porcelain -z (exit 129); 11 GitManager worktree reuse/prep cases and one newline-listing case fail. Implementation/tests match frozen upstream. The separate permission/stat failure passed after namespace DAC overrides were dropped.
- Run the native Linux browser-secret helper suite with pkg-config and libsecret development libraries. Correct vite-plus runner currently fails beforeAll (pkg-config ENOENT), 10 tests skipped.
- Build/test Android markdown text selection and the iOS react-native-screens gesture patch at this integration head.
- Verify desktop cookie import, OS keychain access and native packaging on supported OS targets, using synthetic cookies/test keyrings. Include Windows Helium DPAPI behavior and macOS keyring/consent handling.
- Capture integrated client evidence for changed UI; no browser/computer-use pass was authorized or performed here.
Source Android evidence (pingdotgg#8779 upstream) and iOS EAS/device evidence (pingdotgg#9493 upstream) do not validate this combined fork head. Existing native backlog #22, #19, #17 remains open.
Keep Actions disabled and publication fork-local. Resume draft #26 on the next daily sync. If source/base changes, repeat affected checks and mandatory baselines before reconsidering merge.
Model/harness: OpenAI GPT in Codex desktop; exact primary model identifier unavailable. Cross-model audit gpt-5.4.
The 2026-09-04 batch is retained as draft PR #26. Do not merge until missing verification is supplied.
Frozen upstream:
09d13de4381925fa2a6dea74eff8185fa301e905Previous upstream:
2b745efe57cddc1753d3007d081c64bd20e3ab79Fork base:
4c7b4026adcdddce1f82593e520585ac2c1f2ff0Integration:
c38ca47049b8aa7e80ca43554f6f73a17408b1d4Verified source tree:
ebd14f9afa614aef66596c0f51f771162802fe07Completed in credential-isolated Linux: full frozen install with lifecycle scripts, eight scoped typechecks, mandatory Riker tests, authored regressions, changed-area suites, formatting on 373 TS/TSX files, lint (0 errors/292 warnings). Commands and individual outcomes are in #26. Remote file list/counts match the local 422-file diff. Riker/Copilot boundary preserved; Actions remains disabled.
Outstanding:
git worktree list --porcelain -z(exit 129); 11 GitManager worktree reuse/prep cases and one newline-listing case fail. Implementation/tests match frozen upstream. The separate permission/stat failure passed after namespace DAC overrides were dropped.Source Android evidence (pingdotgg#8779 upstream) and iOS EAS/device evidence (pingdotgg#9493 upstream) do not validate this combined fork head. Existing native backlog #22, #19, #17 remains open.
Keep Actions disabled and publication fork-local. Resume draft #26 on the next daily sync. If source/base changes, repeat affected checks and mandatory baselines before reconsidering merge.
Model/harness: OpenAI GPT in Codex desktop; exact primary model identifier unavailable. Cross-model audit gpt-5.4.