diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
index 0be24ebfbc0..a43ea2973c0 100644
--- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
+++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
@@ -10,12 +10,18 @@ A checked box means the work has evidence in the detailed ledger. Design approva
 complete a box.
 
 Active checkpoint: **Milestone 5 / Work Package 4 desktop resolver/cache — disconnected
-official-build manifest loader locally proven; isolated commit/push and all-six native Node 24 proof
+official-build manifest loader proven on all six native clients; accepted-key/resource-input audit
 next, 2026-07-15, Codex implementation owner.** `E-M5-PACKAGED-MANIFEST-LOCAL-001` passes 6/6
 purpose-named tests, 300/300 non-full-size SSH relay tests, 279/279 release-script tests, typecheck,
 lint, format, max-lines, and diff gates. `E-M5-PACKAGED-MANIFEST-CI-WIRING-LOCAL-001` pins the suite
-into both native job families. No packaged resource, production key, cache root, downloader, SSH
-consumer, Beta mode, tuple, publication, or default behavior is connected. Exact-head run
+into both native job families; exact-head run
+[29466359518](https://github.com/stablyai/orca/actions/runs/29466359518) passes the contract step and
+complete primary job on Linux, macOS, and Windows, x64 and arm64, under
+`E-M5-PACKAGED-MANIFEST-CI-001`. PR Checks
+[29466359581](https://github.com/stablyai/orca/actions/runs/29466359581) and Golden E2E
+[29466359541](https://github.com/stablyai/orca/actions/runs/29466359541) pass. No packaged resource,
+production key, cache root, downloader, SSH consumer, Beta mode, tuple, publication, or default
+behavior is connected. Prior exact-head run
 [29464742446](https://github.com/stablyai/orca/actions/runs/29464742446) passes the lease/eviction
 source contracts and exact full-size active-retention/release/eviction lifecycle on Linux, macOS,
 and Windows, x64 and arm64, under `E-M5-ARTIFACT-CACHE-EVICTION-CI-001`. Retention is 11.14–47.88ms
@@ -318,9 +324,9 @@ production keys/environment/seed, and merge to `main` remain disconnected.
       `E-M5-OFFLINE-SELECTION-CI-WIRING-LOCAL-001`, and exact-head all-six native proof is closed by
       `E-M5-OFFLINE-SELECTION-CI-001`. The disconnected fixed-resource manifest loader is locally
       green under `E-M5-PACKAGED-MANIFEST-LOCAL-001`, and both native workflow command families are
-      pinned under `E-M5-PACKAGED-MANIFEST-CI-WIRING-LOCAL-001`. Exact-head all-six native proof,
-      production keys, signed embedded bytes, builder mapping, packaged-app smoke, and a consumer
-      remain open, so this item is not complete.
+      pinned under `E-M5-PACKAGED-MANIFEST-CI-WIRING-LOCAL-001`. Exact-head all-six native source
+      proof is closed by `E-M5-PACKAGED-MANIFEST-CI-001`. Production keys, signed embedded bytes,
+      builder mapping, packaged-app smoke, and a consumer remain open, so this item is not complete.
 - [ ] Stream bounded downloads; verify signature, size, archive hash, and extracted tree.
       The disconnected Electron downloader is locally green under
       `E-M5-ARTIFACT-DOWNLOAD-LOCAL-RED-001` and `E-M5-ARTIFACT-DOWNLOAD-LOCAL-001`; exact-head
diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
index 12b76fe00d8..5b551679a0b 100644
--- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
+++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
@@ -8,7 +8,7 @@ work; keep exact commands, runner identities, hashes, metrics, and residual gaps
 
 Date created: 2026-07-14<br>
 Last updated: 2026-07-15<br>
-Current phase: Milestone 5 / Work Package 4 desktop resolver/cache — **In progress — 2026-07-15, Codex implementation owner: checkpoint and obtain all-six native evidence for the locally proven disconnected official-build manifest loader**. `E-M5-PACKAGED-MANIFEST-LOCAL-001` and `E-M5-PACKAGED-MANIFEST-CI-WIRING-LOCAL-001` prove the fixed-resource loader and its native source-test wiring locally. Keep resource embedding, production keys, Electron/cache-root/downloader/SSH/settings/tuples/publication/default behavior disconnected until the exact-head native jobs pass.<br>
+Current phase: Milestone 5 / Work Package 4 desktop resolver/cache — **In progress — 2026-07-15, Codex implementation owner: all-six native packaged-manifest source gate closed; audit the next disconnected accepted-key/resource-embedding prerequisite**. `E-M5-PACKAGED-MANIFEST-CI-001` proves the fixed-resource loader on Linux, macOS, and Windows, x64 and arm64, under Node 24.18.0. Keep production keys/secrets, signed embedded bytes, Electron/cache-root/downloader/SSH/settings/tuples/publication/default behavior disconnected while selecting the next purpose-named RED.<br>
 Session checkpoint: **In progress — 2026-07-15, Codex implementation owner** — user authority covers end-to-end PR-contained implementation, commits, pushes, CI, rehearsals, and release writes; merging to `main` remains explicitly prohibited. Commit `b79bcbd04` passes all six native source/full-size cache jobs, PR Checks, and Golden E2E. The artifact workflow is red only for the retained hosted Windows arm64 build-26200 versus required-26100 floor rejection after its primary proof. No Electron, downloader, SSH, setting, tuple, publication, or default-path consumer exists. Legacy remains the production default.<br>
 Primary design: [SSH relay GitHub Release plan](./2026-07-14-ssh-relay-github-release-plan.html)<br>
 Motivating issues: [#8450](https://github.com/stablyai/orca/issues/8450), [#1693](https://github.com/stablyai/orca/issues/1693)
@@ -13874,6 +13874,65 @@ config/scripts/ssh-relay-runtime-workflow.test.mjs`.
   job/run ID and result under `E-M5-PACKAGED-MANIFEST-CI-001` before adding resource embedding,
   production keys, cache-root selection, or a consumer.
 
+### E-M5-PACKAGED-MANIFEST-CI-001 — All-six native fixed-resource loader proof
+
+- Date: 2026-07-15
+- Owner: Codex implementation owner
+- Source: exact pushed implementation commit
+  `ffc7947a4afe823fe56c4972cca4af8c509eca83` on draft PR #8741.
+- Workflow: [SSH Relay Runtime Artifacts run
+  29466359518](https://github.com/stablyai/orca/actions/runs/29466359518). The exact workflow source
+  and `E-M5-PACKAGED-MANIFEST-CI-WIRING-LOCAL-001` require the purpose-named loader suite inside the
+  `Run runtime artifact contract tests` step for both POSIX and PowerShell job families.
+- Exact native primary results; every listed contract-test step and complete primary job passes
+  under Node 24.18.0:
+  - Linux x64, `ubuntu-24.04`, job
+    [87520232532](https://github.com/stablyai/orca/actions/runs/29466359518/job/87520232532):
+    contract step 02:21:10–02:21:26Z; job 02:20:48–02:23:11Z;
+  - Linux arm64, `ubuntu-24.04-arm`, job
+    [87520232493](https://github.com/stablyai/orca/actions/runs/29466359518/job/87520232493):
+    contract step 02:21:29–02:21:40Z; job 02:20:51–02:23:34Z;
+  - macOS x64, `macos-15-intel`, job
+    [87520232509](https://github.com/stablyai/orca/actions/runs/29466359518/job/87520232509):
+    contract step 02:22:02–02:22:36Z; job 02:20:49–02:24:26Z;
+  - macOS arm64, `macos-15`, job
+    [87520232533](https://github.com/stablyai/orca/actions/runs/29466359518/job/87520232533):
+    contract step 02:21:45–02:22:04Z; job 02:20:49–02:23:06Z;
+  - Windows x64, `windows-2022`, job
+    [87520232476](https://github.com/stablyai/orca/actions/runs/29466359518/job/87520232476):
+    contract step 02:22:01–02:22:25Z; job 02:20:48–02:26:38Z;
+  - Windows arm64, `windows-11-arm`, job
+    [87520232497](https://github.com/stablyai/orca/actions/runs/29466359518/job/87520232497):
+    contract step 02:24:36–02:25:10Z; job 02:20:49–02:30:39Z.
+- Repository gates: [PR Checks run
+  29466359581](https://github.com/stablyai/orca/actions/runs/29466359581), job
+  [87520232413](https://github.com/stablyai/orca/actions/runs/29466359581/job/87520232413), passes
+  in 14m33s. [Golden E2E run
+  29466359541](https://github.com/stablyai/orca/actions/runs/29466359541) passes Linux job
+  [87520232284](https://github.com/stablyai/orca/actions/runs/29466359541/job/87520232284) in
+  4m30s and macOS job
+  [87520232283](https://github.com/stablyai/orca/actions/runs/29466359541/job/87520232283) in
+  5m08s.
+- Supplemental result: both Linux oldest-userland jobs and Windows x64 oldest-floor job
+  [87521425899](https://github.com/stablyai/orca/actions/runs/29466359518/job/87521425899) pass.
+  Windows arm64 primary source/build/runtime proof passes; its separate oldest-floor job
+  [87521425836](https://github.com/stablyai/orca/actions/runs/29466359518/job/87521425836) executes
+  the exact runtime successfully, including Node v24.18.0, PTY, watcher, 2s settlement, and
+  49,745,920-byte RSS, then rejects observed build `10.0.26200` against required build 26100
+  (`osBuild: false`). The artifact workflow is therefore expected red solely for the previously
+  declared floor gap; no Windows arm64 tuple is enabled.
+- Closure: the source-only packaged loader's path, stable-read, mutation, accepted-key signature,
+  and exact build/protocol contracts execute on all six native client families. This closes the
+  loader's native source gate, not packaged-app embedding or product use.
+- Residual gaps: no production accepted-key file or protected seed/environment exists; no signed
+  manifest bytes are embedded; builder `extraResources`, release required-assets composition,
+  packaged-app extraction/smoke, Electron adapter, cache root, downloader orchestration, offline
+  transfer, SSH install/launch, per-target Beta, fallback, tuple, publication, and default behavior
+  remain open.
+- Follow-up: commit this evidence-only checkpoint, then audit the smallest PR-contained accepted-key
+  and immutable resource-input contract. External protected-environment/secret provisioning remains
+  a separate repository-administrator gate and must not be inferred from source tests.
+
 ## Accepted Gaps
 
 No product gap is accepted merely because it appears in this list. Each entry requires explicit
@@ -13932,10 +13991,10 @@ The project is not complete until every applicable item below is checked with ev
 
 ## Next Required Action
 
-Add and run the purpose-named official-build manifest-loader RED fixed by
-E-M5-PACKAGED-MANIFEST-AUDIT-001, then implement only stable fixed-resource loading, accepted-key
-signature verification, and exact desktop build/protocol identity. Do not add resource embedding,
-production keys, cache-root/downloader orchestration, SSH transfer/install, mode wiring, tuple
+Audit the smallest PR-contained accepted-key and immutable resource-input boundary now that
+`E-M5-PACKAGED-MANIFEST-CI-001` closes the all-six native source-loader gate. Add a purpose-named RED
+before implementation. Do not provision production secrets/environments, embed unreviewed keys or
+manifest bytes, add cache-root/downloader orchestration, SSH transfer/install, mode wiring, tuple
 enablement, release publication, or default behavior.
 Keep Node upstream `.tar.xz` inputs, Windows ZIP, `ORCA_RELAY_PATH`, existing desktop required-assets
 behavior, detached-signature byte encoding, Windows arm64 build 26100, macOS 13.5, Linux kernel 4.18,