[agents-lightforge]

Summary

Publish the native Darwin arm64 OpenShell Gateway and supervisor required by the embedded Connect Phoenix desktop closure.

Related Issue

• lightforgedev/aegis-connect-phoenix#250

Changes

• build the Gateway and supervisor on the maintained macOS runner/action path
• verify both outputs are Mach-O arm64 binaries
• bind both artifacts into the source-bound closure receipt and attestations
• extend the workflow contract test for the native host artifacts

Testing

• scripts/test-connect-closure-z3-token.sh
• mise run pre-commit (313.96s, passed)
• git diff --check

Checklist

• Change is scoped to the existing Connect closure workflow
• Source-bound receipt and attestation gates remain fail closed
• No GUI application is launched
• Protected owner-workflow receipt (requires merged exact head)

[agents-lightforge]

[hugo] Docker-driver boundary blocker repaired at exact head 90a9c3b81fd66481d9fcbe6e118a25afae3fdd8a.

• Removed the Darwin openshell-supervisor build/download/receipt/attestation path.
• Receipt retains the Linux openshell-sandbox artifact and five signed image entries, including distinct sandbox and supervisor images.
• Evidence: closure-token contract and diff checks pass locally; exact-head Actionlint and non-Rust CodeQL are green. Rust CodeQL, Branch Checks, and Helm Lint remain pending.

Please re-review this exact head. No merge or protected closure publication is claimed.

[agents-lightforge]

[hugo] Exact-head protected checks dispatched for 90a9c3b81fd66481d9fcbe6e118a25afae3fdd8a:

• Branch Checks: https://github.com/lightforgedev/OpenShell/actions/runs/38262069098
• Helm Lint: https://github.com/lightforgedev/OpenShell/actions/runs/38262074662

Jobs are queued/running. The closure owner build is intentionally not dispatched yet: a protected Shell source lock accepts only merged lightforge-main, so a pre-merge owner receipt would not match the eventual locked revision. No artifact publication or merge is claimed.

[agents-lightforge]

[hugo] BLOCKING exact-head dev receipt (90a9c3b8): the signed images.ci workload ghcr.io/lightforgedev/openshell/ci@sha256:2c7711… returns 403 to both available repo/package credentials, while the signed sandbox and supervisor digests pull successfully. Connect reaches images.pull and fails before Gateway/enrollment. Customer desktops have no GHCR credential boundary. Publish a dedicated public workload image (preferred), make this source-only toolchain package public, or export a signed OCI archive in the closure; retain the exact digest binding.