feat(runtime): add native installer qualification receipts

[ericksoa]

Summary

• derive exact linux/amd64 and linux/arm64, rootless, Docker-unavailable installer targets from the provider activation declaration
• normalize a bounded, secret-free release-installer and provider-preflight receipt
• bind source revision, script and invocation hashes, provider authority, engine identity, architecture, and successful exit status
• require each protected native-runtime case to use an installer receipt from the same exact head, runtime authority, engine, and version
• prove the same receipt contract with Podman and an MXC-style provider without central provider switches

Stack

• Depends on feat(runtime): define the native activation candidate contract #8064.
• This contract is dormant: it does not expose a Podman installer option, select or register Podman, dispatch protected E2E, or advertise support.

Validation

• focused installer qualification, native evidence, and source-boundary tests: 20/20 passed
• CLI build and typecheck passed on the exact restacked implementation
• repository pre-commit checks passed for every commit
• feat(runtime): route host-local inference #8066 source-inventory repair has been cascaded append-only through this exact head

Signed-off-by: Aaron Erickson aerickson@nvidia.com

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 625a1b00-eee6-4db8-83f9-a7509707a16b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage in commit ae2957a in the feat/native-runtime-... branch remains at 96%, unchanged from commit 5cd29cc in the feat/native-runtime-... branch.

---

_{Updated August 01, 2026 15:35 UTC}

[github-actions]

PR Review Advisor — No blocking findings reported

Advisor assessment: No blocking advisor findings reported
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions

Model lanes

• GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 2 warnings · 0 suggestions
• Model comparison: normalized findings differ; normalized E2E selections differ; Nemotron reported the same number of blockers, 2 more warnings, the same number of suggestions.

5 additional E2E selections from the second opinion

Advisory only. The primary lane did not select these E2E jobs or targets.

• full-e2e: The completed second-opinion lane identified E2E coverage that the primary lane omitted.
• gpu-e2e: The completed second-opinion lane identified E2E coverage that the primary lane omitted.
• double-onboard: The completed second-opinion lane identified E2E coverage that the primary lane omitted.
• sandbox-survival: The completed second-opinion lane identified E2E coverage that the primary lane omitted.
• state-backup-restore: The completed second-opinion lane identified E2E coverage that the primary lane omitted.

Second-opinion E2E selections are advisory. They do not change the primary assessment or E2E / PR Gate.

Since last review: 0 prior items resolved · 0 still apply · 0 new items found

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: cloud-inference, cloud-onboard, security-posture, onboard-repair, onboard-resume

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.

[cv]

Reviewed commit ae2957aea1 in bottom-up stack order. This PR depends on #8064, which is not approval-ready. Installer qualification receipts are the final layer and inherit the unresolved catalog, candidate, CLI, and E2E gates. Review remains blocked until the parent is reconstructed or repaired, this branch is restacked on the accepted parent commit, and current CI, security, and documentation evidence passes for the resulting commit. No approval is granted for the current branch.

[cv]

Approval is blocked by the stacked parent and failing E2E / PR Gate, coordination, CLI shard, and aggregate checks. This receipt contract also has no independent production activation consumer; keep it with the accepted consumer that verifies trusted installer and runtime identities rather than as a dormant future contract. Restack onto a passing parent and rerun the complete required check set.