launcher/docs/release-gate.md

Launcher Release Gate

Required

1. Wallet bootstrap flow passes local security checks.
2. Package verification pass/fail tests pass.
3. Governance install path fails closed on invalid evidence.
4. Marketplace and status APIs are called with app-session auth.
5. Wallet v1 acceptance criteria pass (docs/wallet-v1-product-spec.md).
6. Owner/admin actions block unless identity_assurance_level=onramp_attested.

Blockers

1. Any path that installs unsigned package.
2. Any path that leaks private key material.
3. Any path that bypasses entitlement checks for governance activation.
4. Any launch flow that exposes seed phrase by default.
5. Any owner support/install action that proceeds without required identity assurance.