Package verified speech runtime in Linux headless archives

docs/LINUX-SPEECH-0.1.6.md

@@ -70,3 +70,24 @@ Exact mono 16-kHz signed PCM16 samples were converted to float32 by division by
 32768, preserving all 360192 samples. PCM SHA-256:
 `56948226ac5a0ad4b70523a856dad0851929c7067957f339e9a5b30fc9b369ce`.
 Fixture preparation succeeded; native recognition has not yet been executed.
+
+## Headless release preparation
+
+The locked offline Linux release build of `searchi-cli` and
+`searchi-extract-worker` from source `61afa08` passed in 58.38 seconds.
+The extraction helper was staged with its current source fingerprint and
+verified. CLI executable: 21921224 bytes, SHA-256
+`f7602d41eeab80c74e00014ab51297223eae651755707b341951c2e624807d94`.
+This is compilation and provenance evidence, not a new published archive.
+
+`tools/package_linux.py --speech-runtime PATH` now includes a verified normal
+speech runtime in its isolated `speech-runtime/` directory. The worker is
+executable; inventory, libraries and approved notices are included. Archive
+instructions explain speech-model setup and indexing, and metadata identifies
+speech as experimental. Omitting this parameter preserves reproduction of older
+speech-free packages. New speech-enabled releases must provide it.
+
+Twenty-one focused package tests passed, including archive hashes/permissions,
+instructions, and rejection of internal CPU artifacts, tampering, absent notices
+and invalid ELF closure while preserving an existing output. These use fixture
+artifacts and do not replace the pending genuine native-runtime verification.

docs/ROADMAP.md

@@ -49,6 +49,9 @@ Google EmbeddingGemma 2 remains the main text/image/audio/video search model.
   - [x] Current Rust speech client unit and actual subprocess lifecycle checks
     passed on Ubuntu 24.04 WSL; headless client dependency compilation passed.
     [Evidence](LINUX-SPEECH-0.1.6.md); native Linux ASR and updated packages remain open.
+  - [x] Current Linux headless release compilation and extraction provenance;
+    add verified speech-runtime archive support with setup instructions and
+    21 packaging tests. Native runtime and public Linux speech delivery remain open.
   - [x] Genuine shared-service ASR/Google lifecycle passed: verified speech
     excerpts, zero raw reencodes through policy failure/retry, and retained
     query reader; [proof](SPEECH-INTEGRATION.md).