[chen21019]

Native Docker Hosts use the Host model for typed metadata reads, writes and receipts while retaining existing role, Key, account and removal checks. Catalog launch delegation supports the actual client’s exact version-root and schema GET handshake, with proof, fresh-owner and frozen-source checks before metadata; root null types are handled safely.

Existing pinned final package versions are installed through the normal APT solver before the frozen base plan. The signed-plan downloader validates the full dependency closure, uses archive-first transport and seeds verified local inputs under their native canonical cache names before the unchanged no-download install. Final package versions, official URLs/SHA pins, security lock and snapshots remain unchanged.

The existing governance audit test now uses a trusted UUID containing the forged-ID substring and checks exact payload values and raw fields. Deterministic reproduction proved the original substring oracle defective; the failed original CI did not capture its random UUID. Only that method was run locally, with four leak mutations rejected. Three inherited Checkstyle violations in that test file remain unchanged; no production audit behavior changed. A verbose flag exposes the existing APT phase test names in original CI.

Validation retained: 28 focused Host/domain tests and four new Catalog bootstrap tests passed. Required CI retains all original 166 cases and adds Host3 + Catalog4 (173). The 41 product-related methods remain seven new plus 34 inherited; the corrected existing audit method is separate. C03 retains 458 inputs, three changed inputs, 1,396 unchanged tuples and zero policy delta. Source scope is 112 paths. Previous failed runs are preserved; new-head required CI, scans and exact published370 Dapper package-table qualification must pass before merge/release. No runtime acceptance claim.