Penguin Command original local registration — 2026-10-24

Registers penguin_command_1611 in the localhost candidate selector and penguin-command-1611 in the local corpus. The genuine runtime game closure contains 91 files / 1,778,442 bytes, including seven DLLs. The schema-1 pins derive only from game/ in the accepted 287-file scheduled-input recovery manifest on 3f75d7afdfc93819d4874b2cf126ca83e66d5bd2; its manifest SHA-256 is 3e26a3d5e575796eda295b4b418ce2c61e5086a85602866b2821a7d87073e274. The exact Git blob, derived inventory and all retained source hashes matched.

The preparation tool validates every source before destination creation, refuses overwrite, copies unchanged bytes and checks the complete resulting closure and mappings. It creates no downloads or payload redistribution. Launch planning preserves C:\ and --windowed --nosound. The registry pins the inventory digest for the pending shared adapter; no shared loader files are changed by this task.

Passing checks (Node old-space 256 MiB, fresh MemAvailable >= 805,306,368 bytes, each process CPU/wall bounded at 60 seconds):

• test/test-penguin-command-local-registration.js ORIGINAL CRT: real preparation, production buildLaunchArgs, production VFS expansion and corpus manifest writer; all 91 identities and seven DLL seeds. Rejects each missing file, all eight changed EXE/DLL files plus one changed PNG, five invalid mappings/schemas, invalid source, missing seed and overwrite.
• The same focused test with an explicit read-only pending Airstrike lib/app-files.js adapter: genuine synchronous contract compatibility; bad mappings and wrong inventory digest fail before game-file reads. Tested adapter SHA-256 f2f109f0fcf3f15fae2dff6238eb10478d5378ca1d72df38965647fc331ccbd9. This identifies a live pending implementation, not an integrated revision.
• Unchanged test/test-candidate-cli-silver-launch.js (8 checks), test/test-candidate-browser-manifest.js (645 inventory paths), and test/test-local-proprietary-demo-dropdown.js.

The first focused-test attempt exposed a test-only proxy that rejected child_process.spawnSync destructuring. The proxy now rejects invocation; all tests pass with network/subprocess actions forbidden. Failed logs remain in the external evidence directory and are included in disk accounting.

Pending acceptance: ordinary app loading needs the separate Airstrike shared adapter and independent host-wiring review. Main 3f75d7af alone does not consume the declared integrity policy. The adapter owner acknowledged the exact contract on the messageboard at 03:20:08 UTC and confirmed its canonical matched registered --exe route inherits the app policy. Arbitrary external fixtures have no generic corpus identity hook. Direct adapter API and standalone preparation tests do not establish ordinary-route acceptance. The README documents this dependency and the manual verification requirement. No runtime, build, browser, package installation, box action, deployment or main integration was performed. Historical score/Wave-2 evidence is reused with its no-audio, historical-runtime and unknown shot-causality limits.

Evidence and recovery recipes: /tmp/penguin-command-local-registration-oct24/ contains admission, source-validation, guarded test commands/logs, adapter identity, publication and final resource/cleanup receipts. Temporary genuine test fixtures are removed by the test. The private sparse checkout and tested task branch remain for independent review. Root tracked files/index/refs and donors are read-only; only append-only coordination messages touch the root worktree. No box was assigned or used; box ID/state/expiry are N/A and lifecycle remains coordinator-owned.