Intersignal Braid Light Client v1.5.2 - Review Candidate Test Evidence
Generated: 2026-08-12

SCOPE
-----
This evidence covers the v1.5.2 review tree, including the complete retained
v1.4.x receiver/finality/transport behavior, v1.5.0 heterogeneous/Ollama/Legend
behavior, v1.5.2 signed Semantic Capsule routing, the exact-space fast path,
Ollama locality/capability hardening, and the hobbyist macOS front door contract.

AUTOMATED TEST RESULT
---------------------
PASS - 131/131 unique unittest cases in the native-signing-hardening split regression run.

Breakdown:
  PASS - 33 legacy group A tests (review-hardening run)
  PASS - 52 legacy group B tests (review-hardening run)
  PASS - 17 v1.5.0 heterogeneous/Ollama/Legend tests (review-hardening run)
  PASS - 29 v1.5.2 front-door/Semantic-Capsule/hobbyist-gate tests (native-signing-hardening run)

The v1.5.2 cases exercise, among other things:
  * signed inline capsule canonicalization and exact payload/source binding;
  * exact model-digest identity -> authenticated 384D exact-space fast path;
  * optional strict fast-path recomputation/coherence verification before Phase B;
  * different model digest -> receiver-local native-dimensional re-embedding;
  * missing capsule -> no heterogeneous semantic ingestion;
  * signed capsule self-tamper rejection before Phase B;
  * forged source model/digest rejection even after capsule digest recomputation;
  * receiver-created semantic vector + lineage atomic bundle publication;
  * generated completion output is labeled separately from bridge semantics;
  * post-commit local completion failure cannot rewrite committed finality;
  * explicit Ollama cloud-like names fail closed;
  * Ollama remote_model / remote_host metadata fail closed;
  * runtime responses carrying remote markers fail closed;
  * digest-only Ollama lookups use the same tags + /api/show locality inspection;
  * verification-key loading never falls back into private-key parsing;
  * private-key loading rejects symlink indirection and repairs permissions on the opened inode;
  * origin-less browser cross-site requests are rejected using Fetch Metadata while plain local API clients remain usable;
  * the visualizer explicitly labels receiver-local derived artifacts as not sender-signed;
  * model classification uses API-reported capabilities rather than name heuristics;
  * same-install Braid.app CLI command generation;
  * generated route calibration commands use the valid >=576 corpus size;
  * release packaging pins native build inputs and carries a native verifier;
  * standalone GUI/CLI use one frozen runtime via a relative CLI symlink;
  * macOS signing policy forbids `codesign --deep` signing and retains deep verification;
  * local-UAT ad-hoc signatures deliberately omit Hardened Runtime so embedded Python is loadable without a Developer Team ID; public Developer ID builds retain Hardened Runtime;
  * DMG assets/Quick Start/double-click builder are present in the source distribution;
  * public notarization captures the submission log and fails closed on issue entries unless explicitly overridden.

FIVE-MINUTE FRONT-DOOR INTEGRATION
----------------------------------
PASS - real loopback HTTP integration with no Ollama reachable:
  /api/health -> ready, semantic_capsule=true, exact_space_fast_path=true
  /api/environment -> autodetect_is_local_only=true
  /api/generate -> signed frame, 30 QR chunks, Phase A accepted
  /api/receive_frame -> accepted=true, finality=committed, post_commit_complete=true
  pipeline -> quarantine -> parse_384d -> phase_a -> phase_b_commit ->
              accepted_store -> emit_384d -> bind_derived_lineage

This is the no-model-required jack-in-the-box path behind the visualizer's
Generate state -> Commit locally interaction.

STATIC / PORTABILITY GATES
--------------------------
PASS - Python 3.10 grammar parse across 43 source/test/packaging Python files.
PASS - compileall for braid_client, tests, and packaging.
PASS - Bash syntax for all native macOS release/build/sign/icon/verification helpers and the double-click `.command` builder.
PASS - Bash syntax and executable mode for Braid.app launchers.
PASS - executable mode for BRAID_HETERO_LOCAL_RUN.sh and native macOS verifier.
PASS - macOS bootstrap Info.plist parse; ai.intersignal.braid / v1.5.2.
PASS - APFS/HFS+-style NFD Unicode-normalized, case-insensitive collision scan.
PASS - conservative archive path/component length scan.
PASS - LF-only release text/code scan.
PASS - visualizer JavaScript syntax gate with Node.
PASS - visualizer static page contains no external HTTP(S) URL.
PASS - 13-second scan animation retained and reduced-motion handling retained.

CLI / HOBBYIST CONTRACT
-----------------------
PASS - `braid-client --version` reports 1.5.2.
PASS - `braid-client doctor` remains ready with the finality invariant intact.
PASS - `braid-client environment` is bounded/local-only and reports the actual CLI.
PASS - the frozen Braid.app path resolves to Contents/MacOS/braid-client.
PASS - the visualizer surfaces machine/LAN/CLI/Ollama/camera/BLE/workspace facts.
PASS - Ollama embedding/completion candidates are capability-based.
PASS - remote/cloud model indicators are rejected rather than called "local".
PASS - cloud-disable configuration is evidence, not process attestation.
PASS - Semantic Capsule hetero ingestion keeps bridge_semantic_invention=false.
PASS - optional model-generated receiver output is marked generative_output=true.

PACKAGE / ARTIFACT GATES
------------------------
PASS - wheel metadata: braid-client 1.5.2, Requires-Python >=3.10, py3-none-any.
PASS - runtime metadata includes jsonschema>=4.18.0.
PASS - sdist contains the final macOS release gate, pinned native build inputs,
       same-install bootstrap CLI, native verifier, tests, visualizer, Braid icon,
       DMG background, Quick Start, and double-click Mac release builder.
PASS - wheel/sdist archive path safety: no absolute/traversal/device/symlink entries.
PASS - wheel clean-install CLI/version/doctor/environment smoke.
PASS - sdist rebuild/install CLI/version/doctor/environment smoke in the offline
       test host using its available build backend/dependency environment.
PASS - universal wheel selected for representative macOS CPython 3.12 arm64 and
       x86_64 targets.
PASS - bootstrap ZIP preserves executable GUI and sibling CLI launchers.

NATIVE MAC RELEASE BUILD CONTRACT
---------------------------------
IMPLEMENTED - exact CPython 3.12.10 release-builder requirement.
IMPLEMENTED - pinned direct release dependencies.
IMPLEMENTED - dependency wheelhouse pre-download, SHA-256 manifest, resolved runtime
              lock, pip inspection, Python version and architecture evidence.
IMPLEMENTED - one standalone Braid.app runtime plus relative same-runtime `braid-client` CLI symlink.
IMPLEMENTED - intentional packaged OpenCV camera fallback and BLE stack.
IMPLEMENTED - advertised minimum macOS version derived from actual frozen Mach-O deployment targets.
IMPLEMENTED - explicit inside-out nested Mach-O signing; `--deep` is reserved for recursive verification.
IMPLEMENTED - Developer ID public mode, `notarytool` Accepted/log evidence, warning/issue gate, stapling, and Gatekeeper checks.
IMPLEMENTED - arranged HFS+ UDZO DMG with Braid icon/background, Quick Start, Applications link, checksum, and native verification.
IMPLEMENTED - native verifier mounts the DMG, simulates drag-install, reruns doctor/environment from the copied app, checks path rebinding, and exercises LaunchServices.
IMPLEMENTED - the native builder verifies the reviewed source checksum manifest before freezing bytes and installs the project without build isolation using the pinned toolchain.

SECURITY / SEMANTIC AUTHORITY INVARIANT
---------------------------------------
The implementation does not infer semantic content from an opaque vector. A
different-space receiver-local re-embedding is allowed only when a valid signed
Semantic Capsule is present and all capsule/source/payload bindings validate. If
no capsule is present, heterogeneous semantic ingestion rejects rather than guessing.

A signature proves the sender asserted the capsule/vector relationship; it does not
prove a dishonest signer derived the vector faithfully from the text. Receivers that
need that extra assurance can enable strict same-model fast-path coherence verification.
Receiver-created embeddings and optional completion output remain receiver-local
artifacts and do not inherit sender signature authority or rewrite Phase B finality.

NOT EXECUTED IN THIS LINUX TEST ENVIRONMENT
-------------------------------------------
  * native Mach-O standalone Braid.app build;
  * hdiutil DMG creation/mount/Finder-layout verification;
  * Developer ID signing / Apple notarization / stapling;
  * normal Finder launch of the installed public app;
  * physical MacBook Air + MacBook Pro two-node semantic UAT;
  * real local Ollama model-to-model semantic transfer on those two Macs;
  * physical camera optical UAT.

RELEASE INTERPRETATION
----------------------
This tree incorporates the Glimmer review hardenings plus the final native macOS/DMG pipeline polish. It is not yet the public release. The packaging changes themselves require delta review of the new frozen bytes, and native/physical gates remain open. After review, run the exact tree on macOS, build/verify the real DMG, then run the Air+Pro semantic and camera gates. Only those frozen bytes may be promoted as the public v1.5.2 DMG.
