[masarray]

Goal

Prepare an operator-visible M3.H.2 RC1 public prerelease from the already-tested Studio + ESP32-P4 firmware preview; do not change or supersede M3.H.1 Public Stable, and do not falsely certify SV reception by ARSAS/DigSubAnalyzer.

Exact source/artifact

• Runtime source: PR P0 UI: suppress historical SV fault alarms on startup; add true-color COM board indicator #328 exact reviewed/tested head fb81c247fb24cd6b5ac6aad6b3fb27486d620b96, now merged in main at c8d351f1.
• Run 40145602361: Windows portable, Inno preview installer, paired ESP32-P4 preview firmware and recorded SHA256SUMS. This run completed successfully. Existing M3.H.1 stable release ID 422727082 remains immutable.

Changes

• One-shot GitHub Actions release publication workflow: PR validates ancestry, run/head success, stable ID and open external RX P0 issue. Once this PR merges to main, build download validates exact ZIP and setup hashes, embedded GUI/firmware commit, physical-claim flags and firmware image hash, then publishes a prerelease=true tag only. Never overwrite existing release tags/assets or use --clobber.
• Release notes spell out what operator screenshots prove (COM15 READY/RUNNING, snapshot ~3999 fps with 0 missed/0 TX fail), and what they do not (3600 s endurance, recipient NIC PCAP, real DigSubAnalyzer/ARSAS acceptance, real external GM/PTP traceability).
• Governance issue Release governance: activate and verify main branch protection ruleset #322 and independent physical acceptance Community feedback: SV receiver visibility, VLAN and APPID/svID setup in lab analyzers #324 remain OPEN; no stable promotion until those gates are evidenced. No firmware/runtime/CMake changes in this PR.

Manual review focus

1. Confirm release job is PR-gated, main-only, prerelease-only, and has minimum write permissions.
2. Confirm all identity/digest checks fail closed and latest Public Stable remains release ID 422727082.
3. Confirm no new Linux AppImage is represented as firmware-paired (current PR Linux GUI artifact is not).

Only merge after release-workflow validation and required CI succeed.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-10-25T01:23:58.725026Z	324b467	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.