fix: harden Phase 1 real-authority conformance

.gitattributes

@@ -0,0 +1,2 @@
+scripts/phase1-conformance-launcher.sh text eol=lf
+scripts/phase1-conformance-launcher.ps1 text eol=lf

README.md

@@ -52,11 +52,10 @@ write-oriented design exploration.
 The native host now uses the reviewed `hpke-bound-v1` request and response
 binding, and production Coven health uses the producer-backed native adapter.
 The immutable runtime gate is documented in
-[`docs/phase1-conformance.md`](docs/phase1-conformance.md). It deliberately
-reports `blocked` rather than substituting mocks when a locked producer does
-not expose a required compatibility or real-keychain fault fixture. Release
-evidence still requires complete real-authority runs on the frozen platform
-matrix.
+[`docs/phase1-conformance.md`](docs/phase1-conformance.md). It emits only
+complete SDK #38 platform records and never substitutes mocks for missing
+release assertions. Release evidence still requires complete real-authority
+runs on the frozen three-platform matrix.
 
 ## Prerequisites
 
@@ -89,9 +88,10 @@ pnpm exec playwright install chromium
 | `pnpm test:e2e` | Run Playwright smoke coverage against a dedicated local preview server on `127.0.0.1:4174` |
 | `pnpm test:native-e2e` | Run the feature-gated native RPC subprocess integration tests |
 | `pnpm test:contract-canary -- --sdk-root <sdk-root> --cave-root <cave-root>` | Verify reviewed clean checkouts, frozen SDK artifact digests, isolated packed imports, and the Cave authority fixture |
-| `pnpm test:phase1-conformance` | Package the revisions in `phase1-conformance.lock.json`, run the real Cave/native/Coven matrix, and retain one secret-scanned JSON report |
+| `/bin/sh scripts/phase1-conformance-launcher.sh "$(command -v node)"` | Exercise the exact locked release through the trusted non-Node launcher and retain one SDK-compatible platform record |
 | `pnpm cargo:fmt` | Verify Rust formatting |
 | `pnpm cargo:check` | Run Rust compile checks |
+| `pnpm cargo:check:windows-gnu` | Check all Rust targets for `x86_64-pc-windows-gnu` |
 | `pnpm cargo:clippy` | Run Rust lint checks with warnings denied |
 | `pnpm cargo:test` | Run Rust smoke tests |
 | `pnpm app:dev` | Start the Tauri desktop scaffold in development |
@@ -172,8 +172,9 @@ Local explicit-root canary runs still use
 and the script rejects staged, unstaged, or untracked changes before it
 verifies that the checked-out HEADs match the tracked lock.
 
-`phase1-conformance.lock.json` independently pins Chat, SDK, Cave, and Coven
-for the packaged real-authority gate. It does not replace or loosen the Phase 0
+`phase1-conformance.lock.json` independently pins Chat, the SDK package
+candidate and evidence authority, Cave, Coven, and the canonical package
+metadata for the real-authority gate. It does not replace or loosen the Phase 0
 canary lock.
 
 ## CI coverage
@@ -189,7 +190,7 @@ canary lock.
 - the cross-repository packed-tarball contract canary with explicit SDK and Cave checkouts pinned by `contract-canary.lock.json`
 - the macOS packaged real-authority matrix with exact counterpart checkouts
   pinned by `phase1-conformance.lock.json`, an isolated keychain, and a
-  secret-scanned JSON report
+  secret-scanned SDK platform record
 - Rust `fmt`, `check`, `clippy`, and `test`
 
 The Tauri capability schema at `src-tauri/gen/schemas/desktop-schema.json` is

docs/developer-toolchains.md

@@ -77,10 +77,11 @@
   dependency.
 - Run the local canary with
   `pnpm test:contract-canary -- --sdk-root <sdk-root> --cave-root <cave-root>`.
-- Run the packaged real-authority matrix with
-  `pnpm test:phase1-conformance`. Its independent
-  `phase1-conformance.lock.json` pins Chat, SDK, Cave, and Coven; the harness
-  creates exact clean detached clones rather than trusting the source
+- Run the packaged real-authority matrix through the trusted outer launcher:
+  `/bin/sh scripts/phase1-conformance-launcher.sh "$(command -v node)"`. Its independent
+  `phase1-conformance.lock.json` pins Chat, the SDK package candidate, Cave,
+  Coven, all four frozen SDK artifacts, and the SDK evidence authority; the
+  harness creates exact clean detached clones rather than trusting source
   repositories' current branches.
 - CI reads `contract-canary.lock.json`, checks out those exact reviewed SDK and
   Cave revisions, rejects dirty SDK or Cave checkouts, and verifies the
@@ -98,18 +99,22 @@
   permissions for the `main` window.
 - No shell, filesystem, opener, or network plugin permissions are configured.
 - The feature-gated `phase1-native-rpc` binary is a headless conformance-only
-  NDJSON bridge. It is excluded from default Cargo and Tauri builds, uses an
-  in-memory test custody instead of the operator keyring, and accepts Cave
-  launch paths only through its two explicit
+  NDJSON bridge. It is excluded from default Cargo and Tauri builds. Unit
+  scenarios default to in-memory custody, while the real-authority runner
+  explicitly selects the production `NativeKeyring`, restarts the RPC process,
+  and verifies credential reuse and deletion. Cave launch paths are accepted
+  only through its two explicit
   `OPENCOVEN_PHASE1_CONFORMANCE_NODE_PATH` and
   `OPENCOVEN_PHASE1_CONFORMANCE_CAVE_SERVER_PATH` environment variables.
 - Run its subprocess integration gate with `pnpm test:native-e2e`; normal
   `pnpm app:dev` selects the `opencoven-chat` desktop binary by default.
-- CI compiles every Rust target on a native Windows runner in addition to the
-  macOS Rust checks, so Tauri's Windows resource build is validated with the
-  platform toolchain it requires.
+- Run the persisted Windows GNU cross-target compile gate with
+  `pnpm cargo:check:windows-gnu`.
 - The Phase 1 harness creates mode-`0700` process-owned roots under the real OS
   temporary directory, reaps only tracked child processes, scans the completed
-  report for secrets and private content, and retains only
+  SDK platform record for secrets and private content, and retains only
   `test-results/phase1-conformance/report.json`. See
   [`phase1-conformance.md`](phase1-conformance.md).
+- Coven conformance starts the real locked daemon and invokes Chat
+  `phase1-native-rpc` command `coven_health`; it never uses `coven daemon
+  status` or reimplements producer-owned peer/pipe identity checks.