# Modular Runtime — Scoped Portable Release 01

Date: 2026-08-01

Status: accepted local release candidate; a clean recoverable source commit, verified portable archive, standalone manager, exact file inventory, explicit authority health, and rollback provenance are sealed. The real runtime pointer, launchd service, port, selector, and databases remain untouched.

## Source scope

The dirty working checkout was not staged or committed. Instead, an isolated local clone began at repository HEAD `6505fc1d0e21f68076258c99c29e7858735ecd14` and received only the audited runtime/package surface:

- legacy and modular moderator source plus focused tests;
- modular builder source, schemas, and deterministic tests;
- package manifests, lockfile, workspace and TypeScript/Vitest configuration;
- portable builder, standalone manager, isolated test runner, service template, installer, and one-service control script.

The source snapshot contains 311 archive entries and 282 regular files:

```text
.nyx/evidence/transition-prep-vnext-03/nyx-runtime-source-vnext-03.tar
SHA-256 9a951703df442562b03bd82e21e1f372927dca0f92b4cf0eb9172162c5f8cf43
```

The isolated clone staged only those named paths, passed `git diff --cached --check`, committed them, and remained clean before and after dependency installation. The resulting exact source identity is:

```text
c10d9f6bb8ac79efc94a9bd212e7be5d69531065
```

A complete Git bundle preserves that commit and history independently of the disposable clone:

```text
.nyx/evidence/transition-release-vnext-02/scoped-release-c10d9f6bb8ac79efc94a9bd212e7be5d69531065.git.bundle
SHA-256 2480419f08c64e3c8d5e85a2ef193fb14d38bda490925b2d86eda615b174ed71
```

`git bundle verify` succeeds. A fresh detached checkout matched all 282 audited files byte-for-byte against the source snapshot and remained clean.

## Portable artifact

The official clean-source builder produced:

```text
.nyx/evidence/transition-release-vnext-02/c10d9f6bb8ac79efc94a9bd212e7be5d69531065-darwin-arm64-node22.tar.gz
SHA-256 6c56717fc5304ed627f9debea49d832e28c05ad0d24699b96911166c32d0c250

.nyx/evidence/transition-release-vnext-02/nyx-portable-manager.mjs
SHA-256 6064494e80e6761c1793c27a6012f2959f84c7e9c79933a19c82f9a28d71536d
```

The manifest pins macOS arm64, Node 22 ABI 127, the exact source commit, launcher, compiled runtime, native SQLite files, standalone manager, and SHA-256 for every shipped file. The generated checksum file succeeds from the artifact directory.

## Build and verification gates

The clean scoped commit passed the official `pnpm portable:build` path, including:

- TypeScript release build;
- 239 moderator/runtime tests across 42 active files with one gated live test skipped;
- two process-cleanup contract tests with no leaked descendants;
- ten portable-runtime tests, including exact activation/rollback and validated explicit launchd authority;
- ambient nondeterminism standards check;
- compiled Node 22 runtime and installed-launcher self-tests;
- source-free install/verify/rollback-manager checks;
- native `better-sqlite3` load probe and complete file inventory.

The final archive was then installed and activated under a temporary isolated install root. Both selectors ran through the shipped launcher and returned:

```text
status=ok
database=ok
runtime.buildSha=c10d9f6bb8ac79efc94a9bd212e7be5d69531065
runtime.authority=legacy | modular
```

The earlier `371379e9…` candidate is superseded because its legacy health payload did not identify authority explicitly. It was never activated outside an isolated temporary root.

## Authority boundary

No command changed `~/.nyx/runtime/current`, `~/.nyx/runtime/previous`, `~/Library/LaunchAgents`, launchd state, port `8787`, `moderator.db`, `modular-builder.sqlite`, or the main repository's Git history. The release and Git bundle remain local and are intentionally not published on the Studio.

The clean-artifact blocker is closed. The only remaining Phase 5 action is an explicitly authorized critical section against `gui/$(id -u)/com.nyx.moderator`: install/activate this exact archive, select modular, run one direct and one graph request through the selected service, and automatically restore the prior bundle plus explicit-legacy plist on any failed condition.