Reproducibility

scripts/reproducible-build.sh exports the committed tree into two different directories, fixes SOURCE_DATE_EPOCH, remaps build paths, performs frozen optimized builds, and requires byte-identical executables. It prints SHA-256 evidence for both outputs.

Package staging

scripts/stage-package.sh recreates the Arch install layout in an isolated destination, validates the desktop and AppStream records, executes the staged binary, and inventories every installed file.

Clean-session soak

The acceptance binary runs with isolated HOME and XDG directories. It applies and undoes a multi-file profile, inspects legacy configuration without mutation, checks versioned JSON output, and proves rejected input creates no Helm state. The native GUI additionally launches in the target Hyprland 0.56.2 session.

Release gate

scripts/release-gate.sh is the single local entry point for formatting, linting, tests, dependency policy, optimized compilation, fuzz-target compilation, desktop metadata, Arch template syntax, and local HTML-link integrity.