launcher/docs/release-gate.md

Launcher Release Gate

Required

1. Wallet bootstrap flow passes local security checks.
2. Package verification pass/fail tests pass.
3. Governance install path fails closed on invalid evidence.
4. Marketplace and status APIs are called with app-session auth.

Blockers

1. Any path that installs unsigned package.
2. Any path that leaks private key material.
3. Any path that bypasses entitlement checks for governance activation.