Gate v1.15 on one installed end-to-end operator-desk proof

[clintecker]

Problem

Unit, headless UI, and wheel tests can each pass while the assembled operator workflow is broken. v1.15 needs one repeatable active-signal proof that crosses installation, book discovery, dashboard evidence, command selection, child execution, and refreshed evidence.

Direction

Create a release-gating scenario from a clean installed wheel plus [tui]: scaffold a neutral book, launch the real desk headlessly, assert initial honest states, select a safe real command through the generated picker, observe structured and raw child output, assert the exact verdict, and refresh the DESK model from resulting digest/receipt evidence.

Dependencies

• Command catalog Define one typed command catalog for CLI and desk surface parity #100: Define one typed command catalog for CLI and desk surface parity #100
• Artifact evidence Project artifact status from digest evidence and trust receipts, never mtimes #101: Project artifact status from digest evidence and trust receipts, never mtimes #101
• Event protocol Define a versioned structured event protocol for child press commands #102: Define a versioned structured event protocol for child press commands #102
• Doctor findings Extract deterministic typed doctor findings from terminal rendering #103: Extract deterministic typed doctor findings from terminal rendering #103
• Packaging boundary Package an optional Textual desk with one canonical press desk entry #104: Package an optional Textual desk with one canonical press desk entry #104
• Process controller Build an injected single-child process controller with exact verdict semantics #105: Build an injected single-child process controller with exact verdict semantics #105
• DESK model Build the deterministic DESK read model from authoritative registries #106: Build the deterministic DESK read model from authoritative registries #106
• App shell Implement the composable Textual app shell and press house theme #107 and harness Establish the deterministic headless desk test harness before feature screens #108: Implement the composable Textual app shell and press house theme #107
• RUN view Implement the streamed RUN view with exact exit, refusal, and cancellation states #109: Implement the streamed RUN view with exact exit, refusal, and cancellation states #109
• Installed wheel proof Prove bare and tui installed wheels across the supported CI matrix #110: Prove bare and tui installed wheels across the supported CI matrix #110
• Target picker Generate the target picker and command palette from the command catalog #111: Generate the target picker and command palette from the command catalog #111
• DESK screen Render the DESK dashboard with evidence states and capability gating #112: Render the DESK dashboard with evidence states and capability gating #112
• Accumulated release gate Require releases to consume a complete accumulated-trust receipt chain #97: Require releases to consume a complete accumulated-trust receipt chain #97

Invariants

• The scenario uses an installed wheel, a neutral scaffold, and the real CLI child boundary.
• Assertions observe return codes, typed states, events, files, digests, and receipts; no sleeps or screenshot-only claims.
• The scenario is bounded, replayable, and produces evidence on failure.
• No book-specific identity or private fixture enters the package.
• The v1.15 release cannot proceed without this proof in its trust receipt chain.

Acceptance

• The scenario fails under seeded sabotage: missing extra, wrong book root, malformed event, child nonzero, changed artifact bytes, stale/wrong receipt, and concurrent launch attempt.
• The clean path passes on the supported release environment.
• Failure artifacts include normalized UI state, raw child streams, structured events, and evidence diagnostics.
• The release workflow consumes the proof as a named accumulated-trust receipt.
• The milestone cannot close until this issue and all P1 dependencies are complete.

Links

• Architecture: https://github.com/clintecker/press/blob/main/docs/ARCHITECTURE.md
• Trust receipt issue: Emit chained trust receipts from test collection through release candidates #93
• Release gate issue: Require releases to consume a complete accumulated-trust receipt chain #97
• Milestone: https://github.com/clintecker/press/milestone/11