Part of #840 · successor to the execution-proof scope of #457 (Option-A rescope, owner-ratified 2026-07-18).
The beta.11 wave shipped the complete native-first thin-client stack (#452 generator, #841 SDK update seam, #842 bindings, #456 packaging + release server, #843 components) and the honest deploy-e2e suite (#457): install from native formats, HTTPS signed-manifest fetch, staged-detection UX, and remote-services discovery are all proven. The apply/rollback execution proof cannot run on any platform because Deno 2.9.3's bootstrap deletes op_desktop_verify_ed25519 from the op table (keep-list omission in denoland/deno#33441 — upstream bug filed as denoland/deno#36150; one-line fix, needs a Deno release).
Scope of this issue:
Labels/milestone rationale: the work is a re-run + un-tolerating of existing gates once upstream ships.
Evidence trail: .llm/runs/beta11-cli--orchestrator/upstream-op-verify-decision.md + upstream-op-verify-history.md + the G6 investigation (slices/g6-456-packaging/op-verify-investigation.md).
Part of #840 · successor to the execution-proof scope of #457 (Option-A rescope, owner-ratified 2026-07-18).
The beta.11 wave shipped the complete native-first thin-client stack (#452 generator, #841 SDK update seam, #842 bindings, #456 packaging + release server, #843 components) and the honest deploy-e2e suite (#457): install from native formats, HTTPS signed-manifest fetch, staged-detection UX, and remote-services discovery are all proven. The apply/rollback execution proof cannot run on any platform because Deno 2.9.3's bootstrap deletes
op_desktop_verify_ed25519from the op table (keep-list omission in denoland/deno#33441 — upstream bug filed as denoland/deno#36150; one-line fix, needs a Deno release).Scope of this issue:
op_desktop_verify_ed25519missing fromNOT_IMPORTED_OPS— packaged apps cannot verify auto-update manifests (op_desktop_verify_ed25519 is not a function) denoland/deno#36150 fix, bump the pinned Deno version and rundeno task e2e:cli run deploy.desktop-native --cleanup --format pretty— Linux apply + failed-launch rollback must go green (the suite already exists and fail-closes; zero new code expected).desktop-native-linuxCI job back to blocking (revert the step-levelcontinue-on-error— see the marked TEMPORARY comment in.github/workflows/e2e-cli.yml).Labels/milestone rationale: the work is a re-run + un-tolerating of existing gates once upstream ships.
Evidence trail:
.llm/runs/beta11-cli--orchestrator/upstream-op-verify-decision.md+upstream-op-verify-history.md+ the G6 investigation (slices/g6-456-packaging/op-verify-investigation.md).