Harden worker IPC and recoverable runtime staging

docs/ROADMAP.md

@@ -67,11 +67,16 @@ Status: implementation started; no production release yet. Windows VM tests use
 - [x] Windows desktop archive packager includes explicit runtime/helper files
   and notices, checks architecture and records per-file checksums; excludes
   model caches and user data. Controlled packaging regression tests pass.
-- [ ] Verify embedded-frontend Release archive launch outside the source tree,
-  clean-machine prerequisites, GPU dependencies, upgrades and signing.
+- [x] Embedded-frontend Windows Release archive launches outside the source tree
+  with isolated data and a ready real Google CPU semantic generation.
+- [ ] Verify native interactions, clean-machine prerequisites, GPU dependencies,
+  upgrades and signing.
 - [x] Preflight native license and the complete offline Google model pair before
   modifying staged resources; corrupted/missing assets preserve existing worker.
-- [ ] Atomic resource staging and interrupted-copy recovery for release bundles.
+- [x] Transactional resource staging, verified copied bytes, process locking,
+  interrupted-copy/swap recovery and backup preservation on failed rollback.
+- [ ] Verify power-loss durability and release-tool interaction with resource
+  directory swaps on each OS; fault-injected process interruption is narrower.
 - [x] Shared monotonic Basic/Debug search metrics, granular bounded engine traces,
   actual worker query diagnostics, and headless JSON performance output.
 - [ ] Verify detailed performance UI interaction on native desktop platforms;
@@ -84,7 +89,9 @@ Status: implementation started; no production release yet. Windows VM tests use
   Warm p95 alone does not satisfy the first-use requirement.
 - [ ] Test migrations, interrupted work, invalid documents, inaccessible/offline roots and cloud placeholders.
 - [ ] Automated native build matrix and documented supported cross-compilation paths.
-- [ ] Execute Linux/macOS platform tests; create Windows/macOS/Linux installers.
+- [x] Native Linux headless workspace tests: 93 passed, 11 explicitly ignored.
+- [ ] Execute Linux native Google worker and desktop/macOS platform tests;
+  create Windows/macOS/Linux installers.
 - [ ] Signing/notarization configuration, upgrade/rollback validation, release instructions.
 
 ## 6. Local agents and optional answers
@@ -115,8 +122,11 @@ Audit and measured priorities: [EMBEDDINGGEMMA2-AUDIT.md](EMBEDDINGGEMMA2-AUDIT.
   preserve filtering, source freshness, failures and actual warmup probes.
 - [x] Reduce semantic settle delay to 120 ms and retain old ready generation
   during rebuilding; test initial-generation and activation readiness boundaries.
-- [ ] Bound whole IPC write/read deadlines and recover from a nonreading helper.
-- [ ] Declare/test x86 CPU minimum or baseline/AVX2 runtime selection.
+- [x] Bound whole IPC write/read deadlines and recover from a nonreading helper;
+  CPU-only real helper-process regressions cover blocked writes and responses.
+- [x] Windows x64 baseline/optimized CPU runtime selection and OS AVX-state
+  checks, verified with real packaged baseline and optimized inference.
+- [ ] Validate CPU selection on older hardware and remaining architectures.
 - [ ] Incrementally reuse unchanged document/media vectors in atomic generations.
 - [ ] Benchmark genuine token-budgeted multi-sequence batching and isolation.
 - [ ] Implement and measure shared foreground/indexer resource budgets/priority.