Step NC07: JVM IPC, Packaging, And CI

[deku2026]

Summary

• Implements Step NC07: JVM IPC, Packaging, And CI
• Keeps scope limited to the active step
• Updates traceability and acceptance evidence required by the step
• Adds Kotlin-managed Aeron driver lifecycle, JVM capability-host IPC loop, local-center IPC supervision, package/runtime manifests, reproducibility and NOTICE checks, final client CI, performance baselines, AI iteration drill, and final production-gate report

Verification

• ./gradlew check --stacktrace --no-daemon: passed
• deno task test from ts/agent: passed, 16 tests
• ./gradlew :jvm:aeron-media-driver:check :jvm:capability-host:check :packages:ipc-core:check :packages:protocol-sbe:check --stacktrace --no-daemon: passed
• ./gradlew :apps:desktop:packageDistributionForCurrentOS :apps:desktop:verifyPackageReproducibility --stacktrace --no-daemon: passed
• ./scripts/verify-generation-determinism.ps1: passed
• ./scripts/verify-package-manifest.ps1: passed, 57 artifacts
• ./scripts/verify-notice.ps1: passed
• ./scripts/run-performance-baseline.ps1: passed
• git diff --check: passed

Traceability

• Rows updated: NC-IPC-001, NC-IPC-002, NC-PKG-001, NC-PKG-002, NC-SCOPE-001 through NC-SCOPE-005
• Matrices updated: client CI, package smoke/reproducibility, JVM IPC foundation, performance baseline, AI iteration drill, final production-gate report
• Final-gate impact: closes FG.08, FG.09, and FG.10; final report maps FG.01 through FG.10 evidence

Out Of Scope

• Spring/server/web/SaaS/subscription/cloud implementation
• ArcChat-owned HTTP proxy/server routes
• Native Aeron/C/C++ media driver or native capability hosts
• Tauri runtime and browser PWA artifacts
• macOS signing/notarization/package enablement

Open Questions

• none