Local Package Shape and Platform Gates

Packaging and platform readiness

Latticra has package-shape records for Linux ecosystems and no-effect macOS writer dry-runs. It does not have official distribution packages, published release artifacts, production installer readiness, or daily-driver install eligibility.

Packaging Rule

Package shape is not release readiness.

The current packaging work is useful because it names platform expectations early. Static validation, fixture archives, notice reviews, and dry-run writers stay separate from build artifacts, app bundles, package publication, host mutation, and endorsement claims.

01

Record platform scope

Each lane states the packaging target, local inputs, and the phrases that must not be used yet.

02

Validate static shape

Spec, deb, changes, and ports metadata checks run before any package build or host install claim.

03

Keep notices blocked

License, notice, trademark, and generated-artifact review records remain blockers until reviewed evidence exists.

04

Gate target mutation

Install and removal validation requires disposable targets, clean snapshots, recovery paths, and operator consent.

05

Block publication claims

Official package, PPA, OBS, notarization, app-store, endorsement, and production installer claims stay false.

Workbench Tie-In

Packaging points back to no-effect payloads.

The strongest current path is still local evidence: Panel and CLI surfaces can be inspected, status reports can be generated, and package metadata can be checked without pretending a release artifact exists.

static checks fixture lanes not released
Latticra Panel local workbench used for plan and evidence review.
Panel remains the human-facing local workbench; package records do not expand its authority.

Current Snapshot

Readiness records exist, while release claims remain blocked.

These fields summarize the public packaging posture across the current Fedora, Ubuntu, openSUSE, and macOS records.

fedora_local_rpm_static 1
fedora_source_archive_fixture 1
ubuntu_local_deb_draft 1
ubuntu_notice_review_unblocked 0
opensuse_local_rpm_static 1
opensuse_obs_publication 0
macos_app_bundle_commit 0
production_installer_ready 0

Platform Lanes

Each ecosystem has a different proof shape.

The page groups platform work by the strongest evidence currently present and the claim that still remains blocked.

Fedora

RPM shape and VM-gated payload validation

Static RPM validation and source archive fixtures exist. Install and removal evidence requires a disposable Fedora VM with snapshot, recovery, and consent gates.

Fedora readiness
Ubuntu

Local deb draft with notice blockers

The local deb draft checks the no-effect CLI payload while release-artifact notices, package notice review, lint/build transcripts, and archive readiness remain blocked.

Ubuntu deb lane
openSUSE

RPM draft and maintenance records

openSUSE records cover local RPM shape, a changes file, rpmlint and osc availability, findings classification, source archive reproducibility, temporary RPM topdir handoff, build-gate blockers, disposable build-environment requirements, payload inspection, install/remove transcript requirements, OBS non-claims, validation promotion blockers, build-evidence intake denial, denial review, denial disposition, denial disposition closeout, denial disposition closeout archive gate, archive gate review, archive gate review disposition, archive gate review disposition closeout, archive gate review disposition closeout archive gate, archive gate review disposition closeout archive gate review, archive gate review disposition closeout archive gate review disposition, archive gate review disposition closeout archive gate review disposition closeout, archive gate review disposition closeout archive gate review disposition closeout archive gate, and archive gate review disposition closeout archive gate review disposition closeout archive gate review before any publication claim.

openSUSE readiness
Debian and BSD

Static metadata checks

Debian deb, FreeBSD port, and OpenBSD port records remain local-only metadata checks with archive, ports-tree, and package redistribution claims blocked.

Debian static lane
macOS

No-effect app bundle writer dry-run

The macOS lane can render writer phases, inspect candidate assets, and block unsafe paths while app bundle writes, signing, notarization, and verification stay disabled.

macOS writer alignment
Blocked

Publication and endorsement claims

No official package, Ubuntu archive package, PPA, Fedora approval, Open Build Service publication, SUSE endorsement, notarized app, or production installer is claimed.

Non-claims

Gate Matrix

Publishing stays downstream of local evidence.

A package lane can advance only by naming which action is allowed, which target it may touch, and which broader claims remain false.

Allowed now

Read plans, run static checks, inspect source archive fixtures, run notice blockers, and execute no-effect macOS dry-run reports.

Temporary fixture only

Fedora archive fixture checks may create and inspect disposable temporary archives without source RPMs, binary RPMs, installs, or publication.

Disposable target only

Fedora RPM install/removal validation requires explicit disposable VM evidence, clean snapshot, recovery path, and operator consent.

Blocked claims

Distribution approval, package publication, production installer readiness, root installer readiness, daily-driver readiness, notarization, signing, and platform endorsement.

Local Commands

Run packaging checks without publishing anything.

These commands inspect static package shape, fixture boundaries, and no-effect writer readiness. They do not publish packages or grant install authority.

Static package shape

sh scripts/test-fedora-local-rpm-static-validation.sh
sh scripts/test-ubuntu-local-deb-static-validation.sh
sh scripts/test-opensuse-local-rpm-static-validation.sh

Archive, lint, and notice gates

sh scripts/test-fedora-source-archive-fixture-lane.sh
sh scripts/test-opensuse-rpmlint-findings-classification.sh
sh scripts/test-ubuntu-release-artifact-notice-requirements-contract.sh

macOS dry-run gates

sh scripts/test-macos-app-bundle-writer-alignment.sh
sh scripts/test-macos-local-candidate-asset-probe.sh
sh scripts/test-macos-dry-run-writer-candidate-integration.sh

Source Records

Trace packaging claims to exact files.

Fedora readinessFedora-friendly package review direction, terminology boundary, and non-claims. Fedora static RPMLocal spec skeleton checks without rpmbuild, rpmlint, mock, or artifacts. Fedora source fixtureTemporary source archive shape checks before source RPM or binary RPM work. Fedora VM payload laneManual disposable VM payload validation gate and forbidden payload surfaces. Ubuntu readinessUbuntu local deb draft, notice blockers, build transcript blockers, and archive non-claims. Ubuntu deb staticLocal deb shape checks for the no-effect CLI payload without package build tools. Ubuntu release noticesRelease-artifact notice requirements that remain blocked before package notice review can promote. openSUSE readinessopenSUSE local RPM, maintenance, rpmlint, osc, and OBS non-claim boundaries. openSUSE source archiveSource archive reproducibility requirements and blockers before build transcripts or OBS claims. openSUSE RPM topdirTemporary RPM build-input staging without rpmbuild, osc build, artifacts, or package-readiness claims. openSUSE build gateClosed no-effect gate before rpmbuild, osc build, artifacts, install, or OBS publication evidence. openSUSE build environmentDisposable build environment requirements without provisioning, rpmbuild, osc build, artifacts, or install claims. openSUSE RPM artifact namesFuture source RPM and binary RPM names with disposable output boundaries and no artifact creation. openSUSE RPM payload inspectionFuture source RPM and binary RPM payload checks without inspecting artifacts or accepting payloads. openSUSE RPM install/removeFuture disposable RPM install/remove transcript evidence without installing packages or mutating hosts. openSUSE OBS non-claimsOpen Build Service, submit-request, official-package, and SUSE endorsement non-claims without publishing packages. openSUSE validation blockersRPM validation promotion blocker matrix before any openSUSE build evidence can be accepted. openSUSE intake denialBuild-evidence intake denial for rpmbuild, osc build, rpmlint, and RPM transcripts while the blocker matrix is closed. openSUSE denial reviewReviewed intake denial upheld while build-evidence re-requests remain blocked. openSUSE denial dispositionClosed upheld denial while build evidence remains unaccepted and RPM builds stay blocked. openSUSE denial closeoutClosed-out disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE archive disposition closeoutClosed-out archive gate review disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gateArchive gate for the reviewed disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate reviewReview of the archive gate for the reviewed disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review dispositionDisposition of the reviewed closeout archive gate review while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeoutCloseout of the reviewed closeout archive gate review disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gateArchive gate for the reviewed closeout archive gate review disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate reviewReview of the archive gate for the reviewed closeout archive gate review disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate review dispositionDisposition of the reviewed closeout archive gate review disposition closeout archive gate review while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate review disposition closeoutCloseout of the reviewed closeout archive gate review disposition closeout archive gate review disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate review disposition closeout archive gateArchive gate for the reviewed closeout archive gate review disposition closeout archive gate review disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate review disposition closeout archive gate reviewReview of the archive gate for the reviewed closeout archive gate review disposition closeout archive gate review disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate review disposition closeout archive gate review dispositionDisposition of the reviewed closeout archive gate review disposition closeout archive gate review disposition closeout archive gate review while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate review disposition closeout archive gate review disposition closeoutCloseout of the reviewed closeout archive gate review disposition closeout archive gate review disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE closeout archive gate review disposition closeout archive gate review disposition closeout archive gate review disposition closeout archive gateArchive gate for the reviewed closeout archive gate review disposition closeout archive gate review disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate reviewReview of the shortened-path repeat closeout archive gate while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review dispositionDisposition of the shortened-path repeat closeout archive gate review while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeoutCloseout of the shortened-path repeat closeout archive gate review disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeout archive gateArchive gate for the shortened-path repeat closeout archive gate review disposition closeout while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeout archive gate reviewReview of the shortened-path repeat closeout archive gate review disposition closeout archive gate while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeout archive gate review dispositionDisposition of the reviewed shortened-path repeat closeout archive gate review disposition closeout archive gate review while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeout archive gate review disposition closeoutCloseout of the reviewed shortened-path repeat closeout archive gate review disposition closeout archive gate review disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeout archive gate review disposition closeout archive gateArchive gate for the closed-out shortened-path repeat closeout archive gate review disposition closeout archive gate review disposition while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeout archive gate review disposition closeout archive gate reviewReview of the closed shortened-path repeat closeout archive gate review disposition closeout archive gate review disposition closeout archive gate while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE repeat closeout archive gate review disposition closeout archive gate review disposition closeout archive gate review dispositionDisposition of the upheld shortened-path repeat closeout archive gate review disposition closeout archive gate review disposition closeout archive gate review while archive, re-request, build evidence, and RPM promotion stay blocked. openSUSE rpmlint findingsFindings classification and blocked publication posture before OBS or build claims. macOS writer alignmentNo-effect app bundle writer dry-run and blocked commit-capable writer claims. macOS asset probeLocal candidate executable and icon checks before any future writer commit gate. Installer readinessProduction installer gates, artifact manifest fixture, and release non-claims. Supply-chain gatesSBOM, dependency, artifact, signing, update, and release-publication blockers. Vulnerability management gateKEV/NVD review, exception records, release blockers, and product-security non-claims. Local validationInstall evidence, package guards, disposable VM gates, and validation non-claims.