Verify priority agents against complete installation identity

[bigboateng]

Change contract

When: CI verifies an installed Codex, Qwen or DeepSeek release.
Before: An unchanged launcher and version banner could conceal changes to delegated package code or the Node runtime.
After: Verification records the complete owned installation tree and selected Node binary, then invokes the recorded Node/JavaScript pair and rechecks identity around execution. Qwen's managed-update selection is pinned to the recorded package, with an unpinned positive control to validate the test.

Boundaries preserved

• Other adapters retain their explicit entrypoint-only identity scope.
• Existing action-control and protocol checks remain required on macOS, Linux and Windows.
• Full package content and supported filesystem metadata remain checked; Qwen's bundled search permissions are initialized before the receipt is recorded.

Evidence

Scenario or check	Expected result	Observed result
Delegate, runtime and receipt mutation tests	Reject changed or malformed identity	Local focused tests pass
Qwen managed-update control	Unpinned update runs; pinned session stays in recorded package	Passed on macOS, Linux and Windows
Qwen first-use bundled search setup	Installation identity remains stable after initialization	Pinned upstream reproduction and regression tests pass
Formatting, static checks and Go suite	Pass	Pass locally
Maintenance suite and capture contract	Pass with current captures	225 tests passed (three platform skips); all 11 adapter contracts pass
Native captures	Complete current-source evidence on all three platforms	All 33 agent and three runtime cells passed
Ordinary PR CI	Pass on the final PR head	All 49 checks passed; 33 agent and three runtime results

Failure and recovery

Changed installation identity rejects verification. Failed probes retain bounded streams locally and publish only diagnostic metadata. A capture refresh must come from a complete successful workflow run for the reviewed source commit; partial or stale results cannot authorize it. Revert this PR to restore the previous verification contract.

Remaining limits

These are observations on trusted runners, not publisher authentication or an atomic filesystem snapshot. Windows ACLs, operating-system libraries and changes between observations remain outside the identity scope.

[github-actions]

Pitot coding-agent E2E

Intelligence Flow is the verification source; Pitot's public README carries the latest main status.

Agent	Ubuntu	macOS	Windows	Result	Evidence
Claude	✅ Pass · real CLI 2.1.296 · native · binary-observed anthropic messages	✅ Pass · real CLI 2.1.296 · native · binary-observed anthropic messages	✅ Pass · real CLI 2.1.296 · native · binary-observed anthropic messages	✅ Passing	All platforms are required
Cursor	✅ Pass · real CLI 2026.10.01-e373342 · native · binary-observed cursor connect proto	✅ Pass · real CLI 2026.10.01-e373342 · native · binary-observed cursor connect proto	✅ Pass · real CLI 2026.10.01-e373342 · native · binary-observed cursor connect proto	✅ Passing	All platforms are required
Codex	✅ Pass · real CLI 0.162.1 · native · binary-observed openai responses	✅ Pass · real CLI 0.162.1 · native · binary-observed openai responses	✅ Pass · real CLI 0.162.1 · native · binary-observed openai responses	✅ Passing	All platforms are required
Devin	✅ Pass · real CLI 3000.11.3 · native · binary-observed devin connect proto	✅ Pass · real CLI 3000.11.3 · native · binary-observed devin connect proto	✅ Pass · real CLI 3000.11.3 · native · binary-observed devin connect proto	✅ Passing	All platforms are required
DeepSeek Harness	✅ Pass · real CLI 0.2.0-rc.2 · native · binary-observed openai chat	✅ Pass · real CLI 0.2.0-rc.2 · native · binary-observed openai chat	✅ Pass · real CLI 0.2.0-rc.2 · native · binary-observed openai chat	✅ Passing	All platforms are required
GitHub Copilot CLI	✅ Pass · real CLI 1.0.95 · native · binary-observed openai chat	✅ Pass · real CLI 1.0.95 · native · binary-observed openai chat	✅ Pass · real CLI 1.0.95 · native · binary-observed openai chat	✅ Passing	All platforms are required
Gemini	✅ Pass · real CLI 0.63.0 · native · binary-observed gemini generate content	✅ Pass · real CLI 0.63.0 · native · binary-observed gemini generate content	✅ Pass · real CLI 0.63.0 · native · binary-observed gemini generate content	✅ Passing	All platforms are required
Kimi Code	✅ Pass · real CLI 2.1.1 · native · binary-observed openai chat	✅ Pass · real CLI 2.1.1 · native · binary-observed openai chat	✅ Pass · real CLI 2.1.1 · native · binary-observed openai chat	✅ Passing	All platforms are required
OpenCode	✅ Pass · real CLI 2.0.27 · native · binary-observed openai responses	✅ Pass · real CLI 2.0.27 · native · binary-observed openai responses	✅ Pass · real CLI 2.0.27 · native · binary-observed openai responses	✅ Passing	All platforms are required
Pi	✅ Pass · real CLI 1.1.0 · native · binary-observed openai chat	✅ Pass · real CLI 1.1.0 · native · binary-observed openai chat	✅ Pass · real CLI 1.1.0 · native · binary-observed openai chat	✅ Passing	All platforms are required
Qwen Code	✅ Pass · real CLI 0.25.1 · native · binary-observed openai chat	✅ Pass · real CLI 0.25.1 · native · binary-observed openai chat	✅ Pass · real CLI 0.25.1 · native · binary-observed openai chat	✅ Passing	All platforms are required

Runtime capabilities

Capability	Ubuntu	macOS	Windows	Result
pitot request	✅ Pass · real runtime allow/deny	✅ Pass · real runtime allow/deny	✅ Pass · real runtime allow/deny	✅ Passing

Source commit: 82e318be2e35