diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
index f24739ef940..691787705f1 100644
--- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
+++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
@@ -10,17 +10,17 @@ A checked box means the work has evidence in the detailed ledger. Design approva
 complete a box.
 
 Active checkpoint: **Milestone 5 / Work Package 4 offline artifact selection —
-local GREEN; exact-head native CI pending, 2026-07-15, Codex implementation owner.** The selector
-now accepts only a signature-verified recursively immutable manifest and returns its exact offline
-tuple, content ID, archive metadata, and tag-qualified direct URL. Focused 27-test, adjacent 91-test,
-broad 307-test, typecheck, lint, formatting, and scope gates pass under
-`E-M5-OFFLINE-SELECTION-LOCAL-RED-001` and `E-M5-OFFLINE-SELECTION-LOCAL-001`. Next, commit and push
-this isolated package with the pending Milestone 4 evidence checkpoint, then require all six native
-Node 24 jobs, PR Checks, and Golden E2E at one exact head. Download, cache, desktop consumers, SSH
-transfer/install, mode wiring, tuple enablement, publication, production keys/environment/seed, and
-merge to `main` remain disconnected. Current pushed branch head is `8c925c249`; the implementation
-owner is authorized to drive commits, pushes, CI, and PR-contained rehearsals end to end without
-merging.
+native CI wiring correction locally GREEN; replacement exact-head CI pending, 2026-07-15, Codex
+implementation owner.** The verified immutable selector is pushed at `5ae2a505c`, but a post-push
+audit proved the native artifact jobs did not invoke its portable source suites. The workflow now
+pins artifact schema, signature, release asset, selector, and runtime identity tests in both POSIX
+and Windows job families under `E-M5-OFFLINE-SELECTION-CI-WIRING-RED-001` and
+`E-M5-OFFLINE-SELECTION-CI-WIRING-LOCAL-001`. Runs started for `5ae2a505c` are intermediate only.
+Next, push this test-wiring correction and require replacement all-six native Node 24 jobs, PR
+Checks, and Golden E2E at one exact head. Download, cache, desktop consumers, SSH transfer/install,
+mode wiring, tuple enablement, publication, production keys/environment/seed, and merge to `main`
+remain disconnected. The implementation owner is authorized to drive commits, pushes, CI, and
+PR-contained rehearsals end to end without merging.
 
 ## Safety status
 
@@ -296,8 +296,10 @@ merging.
 
 - [ ] Select tuples offline from the embedded manifest and resolve immutable direct asset URLs.
       The verified immutable selection and URL boundary is locally green under
-      `E-M5-OFFLINE-SELECTION-LOCAL-001`; exact-head all-six native CI and the actual packaged
-      embedded-manifest loader remain open.
+      `E-M5-OFFLINE-SELECTION-LOCAL-001`. The first post-push audit found that native jobs omitted
+      these source suites; both job families are now locally pinned under
+      `E-M5-OFFLINE-SELECTION-CI-WIRING-LOCAL-001`. Replacement exact-head all-six native CI and the
+      actual packaged embedded-manifest loader remain open.
 - [ ] Stream bounded downloads; verify signature, size, archive hash, and extracted tree.
 - [ ] Add exclusive staging, atomic publication, quarantine, locking, and the 2 GiB cache policy.
 - [ ] Prove verified cached bytes can be transferred while the client is offline.
diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
index ccfc4a9d7b9..83795a4d3e2 100644
--- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
+++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
@@ -8,7 +8,7 @@ work; keep exact commands, runner identities, hashes, metrics, and residual gaps
 
 Date created: 2026-07-14<br>
 Last updated: 2026-07-15<br>
-Current phase: Milestone 5 / Work Package 4 offline artifact selection — **Local GREEN; exact-head native CI pending — 2026-07-15, Codex implementation owner**. The signature-verified immutable-manifest boundary and exact offline tuple/content/archive/URL result pass local focused, adjacent, broad, static, and scope gates under E-M5-OFFLINE-SELECTION-LOCAL-RED-001 and E-M5-OFFLINE-SELECTION-LOCAL-001. No networking, cache, desktop consumer, SSH transfer, tuple enablement, mode wiring, or default behavior is connected. Commit and push the isolated package with the pending Milestone 4 evidence checkpoint, then require all-six exact-head native Node 24 CI before starting download/cache work.<br>
+Current phase: Milestone 5 / Work Package 4 offline artifact selection — **Native CI wiring correction locally GREEN; replacement exact-head CI pending — 2026-07-15, Codex implementation owner**. The selector implementation is pushed at `5ae2a505c`, but audit E-M5-OFFLINE-SELECTION-CI-WIRING-RED-001 proved the native workflow did not invoke its portable source suites. E-M5-OFFLINE-SELECTION-CI-WIRING-LOCAL-001 now pins all five artifact/manifest/selector suites in both POSIX and Windows job families. Commit and push the correction, then require replacement all-six exact-head Node 24 evidence; runs already started for `5ae2a505c` are intermediate only. No networking, cache, desktop consumer, SSH transfer, tuple enablement, mode wiring, or default behavior is connected.<br>
 Session checkpoint: **In progress — 2026-07-15, Codex implementation owner** — exact pushed head `8c925c24990ac93f6d2dd8de2081a50a74f30d97` passes the 10-test draft-release composition suite and full runtime construction/execution on all six target-native jobs in run 29440806947 under E-M4-DRAFT-RELEASE-COMPOSITION-CI-001. PR Checks 29440804969 and both Golden E2E jobs in 29440804978 are green. Both Linux supplements and Windows x64 floor pass. Windows arm64 floor smoke passes in 6,178.8338ms with 49,881,088-byte RSS; the floor gate then correctly rejects hosted build 26200 versus required 26100. The user authorizes end-to-end commits, pushes, draft-PR updates, CI runs/reruns, and PR-contained rehearsals, but not merging to `main`. There is no real release write, publication caller, desktop consumer, SSH transfer/install, tuple enablement, or production/default behavior change. No accepted production key, protected environment/seed, native-signing trust proof, publication path, or tuple enablement is connected. Legacy remains the production default.<br>
 Primary design: [SSH relay GitHub Release plan](./2026-07-14-ssh-relay-github-release-plan.html)<br>
 Motivating issues: [#8450](https://github.com/stablyai/orca/issues/8450), [#1693](https://github.com/stablyai/orca/issues/1693)
@@ -11978,6 +11978,49 @@ config/vitest.config.ts config/scripts/ssh-relay-runtime-draft-release-verificat
   require focused and adjacent contracts on all six exact-head native Node 24 jobs plus normal PR
   checks before starting the disconnected download boundary.
 
+### E-M5-OFFLINE-SELECTION-CI-WIRING-RED-001 — Native jobs omitted desktop selection contracts
+
+- Date: 2026-07-15
+- Owner: Codex implementation owner
+- Source: workflow audit immediately after pushed selector head
+  `5ae2a505cbb0d9744ebd4232cfc131747fdead54`; draft PR #8741. Runs 29443022601,
+  29443022528, and 29443022549 had started but cannot close the selector package because the native
+  artifact workflow lacked its purpose-named source suites.
+- Audit signal: `rg -n "artifact-selector|manifest-signature|artifact-schema|release-asset|vitest.*src/main/ssh"
+  .github/workflows config/scripts` returned no selector/source-suite invocation from
+  `.github/workflows/ssh-relay-runtime-artifacts.yml`.
+- Purpose-named RED command after adding only the workflow assertion:
+  `/usr/bin/time -l pnpm exec vitest run --config config/vitest.config.ts --maxWorkers=1
+  config/scripts/ssh-relay-runtime-workflow.test.mjs` — expected FAIL, 1 failed / 6 passed of 7 in
+  473ms Vitest / 2.07s wall, maximum RSS 131,694,592 bytes, zero swaps. The workflow contained zero
+  occurrences where two job-family invocations were required.
+- Contract pinned by the RED: artifact schema, signature, release asset, selector, and runtime
+  identity source suites must be explicit inputs to both the POSIX and Windows native test steps.
+  Green workflow status without these invocations is not selector portability evidence.
+- Does not prove: corrected wiring, execution on any native runner, product behavior, or any tuple.
+
+### E-M5-OFFLINE-SELECTION-CI-WIRING-LOCAL-001 — Both native job families invoke source suites
+
+- Date: 2026-07-15
+- Owner: Codex implementation owner
+- Source: uncommitted workflow correction atop pushed head
+  `5ae2a505cbb0d9744ebd4232cfc131747fdead54`; draft PR #8741.
+- Command: `/usr/bin/time -l pnpm exec vitest run --config config/vitest.config.ts --maxWorkers=1`
+  with the workflow test plus artifact schema, signature, release asset, selector, and runtime
+  identity suites — PASS, 6 files / 81 tests in 3.97s Vitest / 6.00s wall; maximum RSS 132,087,808
+  bytes and zero swaps. Focused YAML/test `oxfmt --check` and `git diff --check` pass.
+- Oracle proved: the workflow source names all five portable source suites exactly once in the
+  four-runner POSIX job family and exactly once in the two-runner Windows job family. The YAML parses,
+  runner labels remain unchanged, and the existing credential/publication prohibitions remain
+  covered by the same workflow suite.
+- Consumer-disconnection oracle: this changes test execution only. It adds no credential, release
+  write, desktop consumer, network/download/cache path, SSH behavior, tuple enablement, or default
+  behavior.
+- Does not prove: actual Linux/macOS/Windows x64/arm64 execution. The `5ae2a505c` runs are
+  intermediate only; replacement exact-head CI after this correction is mandatory.
+- Follow-up: commit and push the workflow/test/evidence correction, then collect replacement all-six
+  native Node 24 jobs plus PR Checks and Golden E2E.
+
 ## Accepted Gaps
 
 No product gap is accepted merely because it appears in this list. Each entry requires explicit
@@ -12036,11 +12079,11 @@ The project is not complete until every applicable item below is checked with ev
 
 ## Next Required Action
 
-Commit and push the isolated Milestone 5 offline-selection package together with local evidence
-commit `2097a40dd`. Require the focused selector/signature contract and adjacent manifest consumers
-to pass on Linux x64/arm64, macOS x64/arm64, and Windows x64/arm64 at the exact pushed head, plus
-normal PR Checks and Golden E2E. Record job IDs, runner images, timings, results, and the separately
-gated Windows arm64 floor outcome before closing the package.
+Commit and push the native CI wiring correction and its evidence checkpoint. Require the five
+portable artifact/manifest/selector suites to pass inside the Linux x64/arm64, macOS x64/arm64, and
+Windows x64/arm64 artifact jobs at the replacement exact head, plus normal PR Checks and Golden E2E.
+Runs for `5ae2a505c` are intermediate only. Record replacement job IDs, runner images, timings,
+results, and the separately gated Windows arm64 floor outcome before closing the package.
 
 Only after that evidence is complete, begin a purpose-named disconnected download-boundary RED for
 bounded streaming, cancellation, archive hash/size, approved GitHub redirect origins, and credential/