Prepare inspected static Metal runtime inventory for macOS staging

docs/RUNTIME-PROVENANCE.md

@@ -7,8 +7,8 @@ release preparation now records and checks build-input identity before staging
 or packaging a normal Windows/Linux runtime.
 
 `runtime-libraries.json` includes `build_provenance`, schema 1, the pinned
-llama.cpp commit and SHA-256 of six bounded inputs: worker.cpp, native
-CMakeLists.txt, build_runtime.py and the three runtime patches. Only CRLF line
+llama.cpp commit and SHA-256 of seven bounded inputs: worker.cpp, native
+CMakeLists.txt, build_runtime.py, the macOS artifact inspector and the three runtime patches. Only CRLF line
 endings in these build inputs are canonicalized to LF, allowing the same
 source revision to compare across checkouts. Indexed user-file bytes and their
 extraction provenance are unaffected.
@@ -29,8 +29,8 @@ check and were not altered retroactively.
 
 ## Recorded evidence, 2026-10-13
 
-- 69 tests passed across provenance, builder, staging, Windows packaging and
-  Linux packaging suites; one platform-specific staging test remained skipped.
+- 75 tests passed across provenance, builder, macOS metadata, staging, Windows
+  packaging and Linux packaging suites; one platform-specific staging test remained skipped.
   The same suites passed under optimized Python. Regressions reject a valid old
   inventory without provenance, changed source and oversized inputs, while
   preserving existing archives. Build-source CRLF/LF equivalence is checked.
@@ -39,17 +39,18 @@ check and were not altered retroactively.
   `c01cb3ec13cfca722ee768e8350e1399a8b9a4d14a24a35adc3473a5cfc82a73`;
   all 25 Windows DLL hashes also match the previously tested release exactly.
   New staged inventory SHA-256:
-  `7fde510984b4635ce127d25ad91aab9a391300d7968ac71e4f201cc8edd052e8`.
+`b3859169d2c21ee5d40cdca038c3494f5620fe544adb2dd404d4535c89b5076b`.
 - An actual historical extracted Windows inventory was rejected by normal
   staging preflight for missing provenance. Its files were only read.
 - Actual normal Linux `auto` build passed on Ubuntu 24.04 WSL. The packager
-  verified 21 runtime inventory/files and all six source identities against the
+  verified 21 runtime inventory/files and all seven source identities against the
   current repository, including checkout line-ending differences.
   Worker SHA-256 remains
   `b52d50a1e676bd4bf64124daff1c4ce83d86a8bde01e4eaf09838cbb24a4c28f`.
   New inventory SHA-256:
-  `de6e06c68815b35d83c6acbde468d100413f47c74536f0d4219a9edcbeb01a86`.
+  `6463ae8a126f8de3ca4349bbb02fd36852f30222fe30e11fb4070385ce1989e8`.
 
 These normal builds retain GPU modules plus CPU fallback; no GPU inference was
-executed. macOS inventory integration, cross-compilation and actual GPU checks
+executed. macOS inventory preparation is now implemented and fixture-tested;
+[native macOS checks](MACOS-RUNTIME.md), cross-compilation and actual GPU checks
 remain open. Published Windows and Linux assets retain their original hashes.