diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
index c8da45ab7dc..749199b4703 100644
--- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
+++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md
@@ -10,8 +10,12 @@ A checked box means the work has evidence in the detailed ledger. Design approva
complete a box.
Active checkpoint: **Milestone 6 / Work Package 5 bounded runtime transfer — disconnected SFTP
-session/tree orchestration is locally green; exact-head native proof is next, 2026-07-15, Codex
-implementation owner.** `E-M6-SFTP-TREE-TRANSFER-LOCAL-001` passes 9/9 purpose cases after absolute-
+session/tree orchestration is exact-head green; raw `ssh2` session-adapter audit is next, 2026-07-15,
+Codex implementation owner.** `E-M6-SFTP-TREE-TRANSFER-CI-001` closes all six primary native jobs,
+both Linux supplements, Windows x64 floor, PR Checks, Golden E2E, and computer-use on exact commit
+`28e7a6e5f`; Windows arm64 retains only the declared hosted build-26200 versus required-26100
+rejection after complete runtime smoke. No live SFTP/server or product/default claim is made.
+`E-M6-SFTP-TREE-TRANSFER-LOCAL-001` passes 9/9 purpose cases after absolute-
root hardening, 112 focused cases with one declared skip, 588 broad relay cases with five declared skips, 280/280 release
contracts, typecheck, full lint, formatting, max-lines, diff, protected-resolver, and no-product-
import gates. `E-M6-SFTP-TREE-TRANSFER-AUDIT-001` limits the package to one caller-owned signal and session
diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
index 81be6af6c24..8778b096c4a 100644
--- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
+++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md
@@ -8,8 +8,8 @@ work; keep exact commands, runner identities, hashes, metrics, and residual gaps
Date created: 2026-07-14
Last updated: 2026-07-15
-Current phase: Milestone 6 / Work Package 5 bounded runtime transfer — **In progress — 2026-07-15, Codex implementation owner: disconnected SFTP session/tree orchestration is locally green; exact-head native proof is next**. Keep every capability disconnected from every production/default SSH path. Real Apple/SignPath rehearsals remain an explicit late gate and are not on this package's critical path.
-Session checkpoint: **SFTP SESSION/TREE ORCHESTRATION LOCAL GREEN — 2026-07-15, Codex implementation owner** — `E-M6-SFTP-TREE-TRANSFER-LOCAL-001` passes purpose, focused/broad relay, release-contract, typecheck, full-lint, format, max-lines, diff, protected-resolver, and no-product-import gates. It proves one exclusive manifest staging tree, one-to-four composed file streams, reverse proved-owned cleanup, and cancellation-driven awaited session close at a mockable abstraction. Commit/push this disconnected package and require exact-head all-six native and adjacent CI before auditing the raw `ssh2` session adapter. Do not credit live SFTP/server transfer, raw-session callback settlement, full-size remote metrics, product/settings/fallback wiring, tuple enablement, publication, or default behavior. Merging to `main` remains prohibited, SignPath is deferred, and legacy remains the production default.
+Current phase: Milestone 6 / Work Package 5 bounded runtime transfer — **In progress — 2026-07-15, Codex implementation owner: disconnected SFTP session/tree orchestration is exact-head green; raw `ssh2` session-adapter audit is next**. Keep every capability disconnected from every production/default SSH path. Real Apple/SignPath rehearsals remain an explicit late gate and are not on this package's critical path.
+Session checkpoint: **SFTP SESSION/TREE ORCHESTRATION EXACT-HEAD GREEN — 2026-07-15, Codex implementation owner** — `E-M6-SFTP-TREE-TRANSFER-CI-001` closes all-six primary native, both Linux supplement, Windows x64 floor, PR Checks, Golden E2E, and computer-use proof for exact implementation commit `28e7a6e5f`; Windows arm64 retains only the declared hosted build-26200 versus required-26100 floor rejection after complete runtime smoke. Audit the smallest disconnected raw `ssh2` session adapter next. Do not credit a live SFTP server/remote cell, full-size network transfer, high-latency comparison, product/settings/fallback wiring, tuple enablement, publication, or default behavior from the callback abstraction. Merging to `main` remains prohibited, SignPath is deferred, and legacy remains the production default.
Primary design: [SSH relay GitHub Release plan](./2026-07-14-ssh-relay-github-release-plan.html)
Motivating issues: [#8450](https://github.com/stablyai/orca/issues/8450), [#1693](https://github.com/stablyai/orca/issues/1693)
@@ -16986,6 +16986,64 @@ config/scripts/ssh-relay-runtime-workflow.test.mjs` — PASS, 7/7 in 356 ms. The
sole production/default path and SignPath remains deferred. Exact-head all-six Node 24 and
adjacent CI evidence is required before the raw-session adapter audit.
+### E-M6-SFTP-TREE-TRANSFER-CI-001 — all-six clients accept disconnected SFTP tree orchestration
+
+- Date/owner/head: 2026-07-15, Codex implementation owner; exact hardened implementation commit
+ `28e7a6e5f92be98514dbd3a62bc9d5aae9331888` on draft PR
+ [#8741](https://github.com/stablyai/orca/pull/8741).
+- Native workflow: SSH Relay Runtime Artifacts run
+ [29507821804](https://github.com/stablyai/orca/actions/runs/29507821804). All six primary Node
+ 24.18.0 jobs pass the nine-case tree suite, complete contract set, deterministic build/smoke,
+ full-size extraction/cache/scan/stream, and evidence upload: Windows arm64
+ [87653187734](https://github.com/stablyai/orca/actions/runs/29507821804/job/87653187734), Darwin arm64
+ [87653187777](https://github.com/stablyai/orca/actions/runs/29507821804/job/87653187777), Linux arm64
+ [87653187857](https://github.com/stablyai/orca/actions/runs/29507821804/job/87653187857), Windows x64
+ [87653187877](https://github.com/stablyai/orca/actions/runs/29507821804/job/87653187877), Darwin x64
+ [87653187906](https://github.com/stablyai/orca/actions/runs/29507821804/job/87653187906), and Linux x64
+ [87653187933](https://github.com/stablyai/orca/actions/runs/29507821804/job/87653187933).
+- Purpose/native totals: every client passes all nine new cases with no suite skip: Linux x64
+ 1,196 ms, Linux arm64 2,155 ms, Darwin x64 3,646 ms, Darwin arm64 1,186 ms, Windows x64
+ 2,799 ms, and Windows arm64 4,981 ms. Overall contract totals are 756 passed / one declared skip on
+ each Linux client, 755 passed / two declared skips on each Darwin client, and 743 passed / 18
+ declared skips on each Windows client.
+- Exact full-size client baselines remain green: Linux x64 34 files / 124,846,430 bytes, stream
+ 183.762342 ms / 786,432 incremental RSS bytes; Linux arm64 34 / 122,865,324,
+ 142.800937 ms / 131,072; Darwin x64 35 / 124,316,655, 548.450994 ms / 282,624; Darwin arm64
+ 35 / 122,027,869, 115.096708 ms / 688,128; Windows x64 42 / 96,527,161, 182.7795 ms /
+ 5,341,184; Windows arm64 42 / 85,213,511, 360.4851 ms / 1,482,752. Every existing cold/warm/
+ scan/stream/retention/eviction budget passes. These are client-source regression baselines, not
+ live SFTP network measurements.
+- Baselines: Linux arm64 supplement
+ [87654529646](https://github.com/stablyai/orca/actions/runs/29507821804/job/87654529646), Linux x64
+ supplement
+ [87654529663](https://github.com/stablyai/orca/actions/runs/29507821804/job/87654529663), and Windows
+ x64 floor [87655923525](https://github.com/stablyai/orca/actions/runs/29507821804/job/87655923525)
+ pass. Windows x64 verifies 42 files / 96,527,161 bytes, Node/PTY/watcher/two-second settlement in
+ 5,400.4459 ms at 50,401,280 RSS, and completes verification in 6,610.5719 ms on build 20348.
+ Windows arm64 floor
+ [87655923544](https://github.com/stablyai/orca/actions/runs/29507821804/job/87655923544) retains only
+ the declared hosted-image rejection: build 26200 observed versus 26100 required. Before that
+ rejection it verifies 42 files / 85,213,511 bytes and Node/PTY/watcher/two-second settlement in
+ 6,860.7918 ms at 48,672,768 RSS; complete verification is 9,414.1715 ms.
+- Adjacent exact-head workflows pass: PR Checks run
+ [29507822115](https://github.com/stablyai/orca/actions/runs/29507822115), verify job
+ [87653099635](https://github.com/stablyai/orca/actions/runs/29507822115/job/87653099635); Golden E2E
+ run [29507828242](https://github.com/stablyai/orca/actions/runs/29507828242), macOS job
+ [87653119889](https://github.com/stablyai/orca/actions/runs/29507828242/job/87653119889) and Linux
+ job [87653119935](https://github.com/stablyai/orca/actions/runs/29507828242/job/87653119935);
+ computer-use run [29507829190](https://github.com/stablyai/orca/actions/runs/29507829190), Ubuntu
+ native-smoke job
+ [87653123437](https://github.com/stablyai/orca/actions/runs/29507829190/job/87653123437) and Windows
+ native-smoke job
+ [87653123462](https://github.com/stablyai/orca/actions/runs/29507829190/job/87653123462).
+- Boundary/residual gaps: native clients run callback mocks, not a raw `SFTPWrapper` or server. They
+ do not prove SFTP channel open/end/error behavior, that raw session termination settles retained
+ callbacks, real remote directory/mode semantics, full-size network memory/cancellation, high-RTT
+ one-versus-four behavior, `MaxSessions=1` wiring, or a live remote matrix cell. The module still
+ has no non-test importer. Remote bundled-Node verification/install/publish/launch and every
+ product/Beta/settings/fallback/tuple/publication/default path remain absent; legacy remains the
+ sole production/default path and SignPath remains deferred.
+
## Accepted Gaps
No product gap is accepted merely because it appears in this list. Each entry requires explicit