[decebal]

Native workflows need observable command results and safe enrollment into existing repositories. Add standalone runtime receipts and preserve project state while keeping native skills as the primary interface.

• Add allstack check with explicit expected exits, source/executable identity, bounded stdin, separate raw streams, and timeout/ownership enforcement, without opening delivery or memory stores.
• Preserve Chronis Git exports and unchanged guarded base files through Git blob references; reject guarded changes and guarded artifact contents. Restore explicitly enrolled ignored skills.
• Update native planning, recall, QA, and shipping guidance; install and verify Allstack 0.2.0.
• Qualify the complete authenticated Claude → Codex → Claude application flow in AllSource PR #361.

Test plan:

• Toolkit Nextest: 73 passed, 2 explicit opt-in skips; all four process-backed workspace cases discovered and executed.
• Old/new installed bootstrap comparison: export acceptance fails before and passes after; private-state rejection preserved.
• Installed source-denied initialization and idempotence, real Cargo shim, negative exits, raw bytes, stdin identity, executable changes, timeout and signal coverage.
• Full Clippy, formatting, dependency policy, and all eight frozen native gates on the prepared single commit.
• AllSource frozen acceptance: baseline 14 passed/5 failed, candidate 19 passed; full Prime suite 123 passed/2 ignored; independent authenticated Claude runtime calls and direct executable hash/zero rejection.
• Application remote/PR heads, completed Chronis task, and Prime outcome read back through owning systems.

Design: native runtime checks.
Evidence: native AllSource verification.

Hosted tenant synchronization, merge, and deployment are outside this proof. Repository checks are advisory where branch protection/rulesets are absent.