[decebal]

Installed Allstack can prepare a fresh repository and complete authenticated Codex/Claude delivery without copying toolkit source files. Setup checks run before mutable workflow storage opens.

• Bundle workflow methods, explicit Rust/existing-policy setup, indexed documentation, and repository-local host guidance.
• Preserve custom files, refuse unsafe/conflicting destinations, and append only needed index/ignore data.
• Initialize Chronis after preflight; distinguish setup readiness, executable availability, and authentication.

Test plan:

• 29 runtime/bootstrap tests and four handoff fixture tests passed locally and on Linux/macOS CI.
• Installed executable initialized actual Chronis with toolkit source reads denied; generated policy executed one test.
• Fresh all-source-os/allstack-example completed real authenticated Codex planning, Claude implementation, immutable handoffs, verification, and first remote push/PR creation.
• Five frozen example integration tests passed on exact delivered commit ccb3f4fe96d7b8c3dda7c4e8f39a0f1aa381a540.
• Chronis completion, source-linked embedded Prime outcome, remote/PR head equality, and worktree cleanup read back.
• Formatting, Clippy with warnings denied, and dependency policy passed on final publication SHA.

Design · Installed bootstrap proof · Fresh authenticated delivery proof · Example PR · Final CI

The installed-artifact smoke is explicitly selected locally; the default suite reports it as skipped. Supported scope remains sequential hosts on one Unix machine. Raw transcripts and private component stores remain local.