[AnticsDecoded]

Summary

• carry the unpublished v0.1.5 evaluation candidate forward as v0.1.6
• run the two-build signer-image reproducibility gate on GitHub’s native ARM64 runner
• exercise that gate in manual branch release rehearsals and cap it at three hours
• retry transient Debian and rustup bootstrap fetches without changing the locked offline Cargo build
• refresh canonical binary and signer-image hashes for v0.1.6

Why

The v0.1.5 tag was not published because the unchanged signer-image gate spent six hours cross-compiling two ARM Rust binaries and two ARM Linux kernels under QEMU. GitHub cancelled that single job; all other release jobs passed and publication was skipped. The failed tag remains immutable and documented.

Local verification

• signing-core/scripts/reproducible-cross-check.sh (two canonical builds agree)
• platform/signer-image/check-reproducible.sh (two clean image builds agree)
• cargo test --workspace --release --locked
• strict workspace Clippy and rustfmt
• 30 release-tool tests and v0.1.6 tag/version validation
• browser application build and 15 smoke checks
• desktop dependency audit
• mobile TypeScript, Expo Doctor 20/20, and exact advisory-graph audit