[zackees]

Fixes #624. Refs #635 and #674.

Changes

• Derive canonical AppImage names from the actual executable version, including the complete Rust beta version. Copy the AppImage and zsync unchanged into the beta while retaining both originals for continuous publication.
• Check the actual executable identity, embedded update target and zsync Filename, URL, payload length and SHA-1. SHA-1 is the zsync protocol checksum, not a signature. Standalone builds may omit updater metadata; release candidates must contain the correct continuous update target.
• Provision host GPU runtime libraries before the actual metadata launch and retain bounded loader diagnostics. Keep all four distro scenarios, saved-profile capture and recording checks.
• Integrate merged ci: Drop the previous build's assets from continuous #678 with the canonical keep-list. Delete only obsolete legacy/canonical x86_64 AppImage pairs; preserve the current pair and unrelated release attachments. Gated in-place publication remains intact.
• Preserve C-only oracle builds and merged macos: The DMG is ad-hoc signed and not notarized #630 signing, runtime and release-note fixes.

RED → GREEN

• Naming/metadata RED 0714432b8: stub helpers and old workflows produce one failure and two errors; GREEN 1b0a7c475 checks real naming and metadata with malformed-payload mutations.
• Host-runtime RED 1ecfd79b6, GREEN 28abf3103: require libraries before real frontend launch and preserve stderr on a failed launch.
• Pruning RED ddb1e431b: executing the real selector with mocked GitHub I/O deletes two unrelated attachments. GREEN 17a398af9: deletes exactly the four superseded legacy/canonical files and retains current/unrelated assets.

Final integrated local validation

Exact pushed head 17a398af9cbddd7ac8b090724ec810147e18999c, tree 8104c33c58c68d13df4a7a277f060ca0b8d06be5, based on master 739fb7677.

Fresh ./lint and ./unittest pass: OFF/ON each pass 193 unchanged C tests; 1766 exported symbols are identical. Full local-gate attestation passes all four lanes in 424 seconds. The full CI Python suite passes 171 tests with one existing environment skip. Final integration review is clean. No existing C tests/public headers or new workflow files were changed.

Actual package evidence and remaining gate

Previously pushed exact head 16d05b40dc50d2072da4b4561da06210c7d0fc9b passed both standalone AppImage 38512932873 and full verify-only 38512929127. Standalone checks the actual canonical 0.1.0 artifact with optional empty updater data. Full verification checks the actual 0.1.0-beta.20261014 artifact and zsync/update target, all four distro scenarios, saved-profile startup, recording movement/tone and negative recording-verifier mutations; all five desktop packages, native Windows ARM startup and the release gate passed. Hosted runners do not prove physical camera/microphone frames or real GPU hardware capture.

The integrated final head passed standalone AppImage 38516984180 and complete verify-only 38517032562, both at exact 17a398af9cbddd7ac8b090724ec810147e18999c. All five desktop builds, the full release gate, all four AppImage distros, Windows ARM native saved-profile/negative-plugin validation, and both actual macOS DMG native startup jobs succeeded. The release-candidate AppImage verifies the full beta filename, embedded updater target and zsync metadata; saved-profile recording checks exercise screen/camera movement and microphone tone, with negative verifier mutations.

Both native macOS apps reached real frontend readiness, loaded all saved capture input kinds, returned PNG/JPEG screenshots, and exited normally. Intel logged one tracked allocation at its shutdown checkpoint; ARM logged zero. This is retained as an observation and is not attributed to this naming change or claimed resolved. Hosted native runners do not prove physical capture frames or Apple permission grants. Verify-only intentionally skipped release publication.

Preserved actual failures

Initial AppImage 38510812090 built the canonical artifact, then all four host metadata launches failed with exit 127 before distro scenarios. Captured stderr was hidden by the old exception, so no specific missing library is asserted. Full run 38510810928 likewise failed the four AppImage checks and was explicitly cancelled after identifying that defect. Neither is counted as success. The host-runtime correction above produced the later real package successes.

[zackees]

Actual AppImage run 38510812090 at e444f93cefd56b9800652994ca9228a8faf36f55 completed failure: package creation succeeded with canonical OBS-Studio-Rust-0.1.0-linux-x86_64.AppImage, then all four test jobs failed at the new host-side --version metadata check (exit 127), before entering the distro runtime scenarios. Captured stderr was not included in the old exception, so a specific missing library is not asserted from that log. The failure remains RED.

Local RED c8e695237 / GREEN 612d82a15 install the same host Mesa/GL/DRM/GBM/VA/Wayland/Vulkan libraries already used by the distro tests before running the actual frontend metadata check, preserve bounded subprocess diagnostics, and create cleanup directories before the precheck. All assertions remain intact. The 18 focused tests and single-reviewer follow-up pass; the full CI Python suite passes 157 tests with one retained environment skip. Fresh local gates run before push. The known-broken full verification run 38510810928 received an explicit cancellation request after its four AppImage jobs also failed; it is not counted as validation success or restarted on an observation timeout. Fresh package GREEN is still required.

[zackees]

Pushed unchanged stamped 16d05b40dc50d2072da4b4561da06210c7d0fc9b with host-check correction. Fresh lint/unit and all four attestation lanes pass (420 seconds), with 193 C tests OFF/ON and 1766 identical exports. 18 focused tests, 157 CI Python tests (one retained environment skip), and review pass.

Fresh actual PR AppImage validation and verify-only run 38512929127 must prove the actual canonical files/updater metadata and saved-profile scenarios. Old failed AppImage 38510812090 and cancelled known-broken verification 38510810928 are retained as RED evidence. This remains draft.

[zackees]

Rebased onto master 739fb7677, incorporating merged #630 and preserving the #678 canonical/pruning fix. Replaced head 16d05b40dc50d2072da4b4561da06210c7d0fc9b with attested 17a398af9cbddd7ac8b090724ec810147e18999c (tree 8104c33c58c68d13df4a7a277f060ca0b8d06be5).

Fresh lint/unit and full attestation pass; OFF/ON each pass 193 C tests with 1766 identical exports. Full CI suite: 171 tests, one existing environment skip. Integration review is clean.

Earlier head passed actual standalone/full package runs 38512932873 and 38512929127. Final-head standalone AppImage 38516984180 and full verify-only 38517032562 are now running; the PR stays draft until these finish successfully.