Brimstone Core RC26 cumulative PRIVATE TEST candidate — C08 Prepared 11 November 2026. Published for invited testing. This is not general public-release acceptance. Normal installation, A/B cold boots and saved account/profile checks passed on the isolated Derby VM. The same normal user session and distinctive profile persisted through B → A → C → A. Each installed slot retained a read-only root and the VM stayed headless. SIGNED APPLICATION UPDATE Brimstone-Core-R1-1.0.0-rc.26-Cumulative-Candidate08-20261111.tar.gz Bytes: 7583733 SHA-256: d7669d327b5d8818aaceb24730197edd790a38ae4122b5c8d5819928fb1f7760 Manifest SHA-256: 9bd7ee0fad49512c7f9ae281f7e88bf2016e84d569dd5f93f51efa8c3f247857 Payload SHA-256: edf5cf094f6ac7c74e20109814c69f8b0f9822289aca434e5f8c3cf5bde22a36 Publisher: Ed25519 / vm10000-qa-20261025 Application files: 550 Source: 3b14480167d371084305631f627dfe904cb2be36 GitHub source: 910675d533b4ac76b9f228aede0b933fd64512af Exact source tree: 238a9a9f3fca00d9fc14db4ad3d59393ddb3eba8 FRESH INSTALLER { "status": "QUALIFIED_PRIVATE_TEST_CANDIDATE", "url": "https://core-audio.uk/downloads/core/testing/Brimstone-Core-R1-RC26-Cumulative-Candidate08-20261111-amd64.iso", "filename": "Brimstone-Core-R1-RC26-Cumulative-Candidate08-20261111-amd64.iso", "bytes": 4891410432, "sha256": "28948786ca790b2bffd372e359966171cbe065a4e641b5edf432ea00495a7428", "bmm_support_staged_disabled": true, "customer_credentials_included": false, "origin_full_sha256_verified": true, "checksum_url": "https://core-audio.uk/downloads/core/testing/Brimstone-Core-R1-RC26-Cumulative-Candidate08-20261111-amd64.iso.sha256", "origin_stage_receipt_sha256": "cbafafe039eec08e198a626cc915ee39e3a19cbb2975d6881d55edefbd7ff61f", "factory_manifest_sha256": "7e1ccdbb4acd91904362629e12559a7054b65cc8edab03f8b4941f896c1fdf0c", "application_source_manifest_sha256": "9bd7ee0fad49512c7f9ae281f7e88bf2016e84d569dd5f93f51efa8c3f247857", "full_public_https_sha256_verified": true } Test only on a spare system disk or disposable full VM. The application archive cannot boot a new machine. Physical HP kiosk/mouse/automatic-login and broad audio output qualification are separate from VM boot checks. EXACT-BASELINE COMPATIBILITY Use the installed trusted Debian A/B updater. It must authenticate the publisher signature and match a complete admitted fingerprint set: 370-file base and 122 named variants. Policy SHA-256: b63b0cf955141cb7243fa35f625136e799314b1cbd71bfd7a720506ce441384d Version labels alone are insufficient. Recent Home R05 and Trev R04 maintenance overlays are NOT automatically admitted or qualified. Do not bypass signature, baseline, backup, idle/readiness or recovery refusals. No production system is updated merely because this test candidate is published. CUMULATIVE SOURCE Meridian V3 handoff and output planning, queue handling, podcasts, source-quality reporting, streaming/AirPlay fixes, normal LAN discovery and trusted local access, signed scoped metadata references and missing-only local cover recovery are included. C08 adds Linux kernel address discovery without the ip executable and the corrected factory Recovery C boot-environment path. Saved/manual/alias art, quarantines, rights and metadata acceptance remain authoritative. These source changes do not imply physical playback acceptance on every output. BMM SUPPORT The public 20-file kit is staged DISABLED and UNCOMMISSIONED, without customer credentials. Uploading the application does not install or activate host services. Commission each machine separately. Weekly dataset refresh is Wednesday 03:00–05:00 local time. Store-backed media remains managed through paired Core. Provider approvals, entitlements and user-authorisation policy are unchanged. No macOS/iOS/TestFlight/Android binary release is claimed by this Core candidate. C08 QUALIFICATION { "status": "SIGNED_C08_APPLICATION_AND_HOST_KIT_QA_PASS", "runtime_files": 550, "qa_only_signed_host_support_files": 2, "full_linux": { "passed": 2729, "skipped": 39, "subtests_passed": 38, "failed": 0, "seconds": 182.69 }, "focused_root_postgres": { "passed": 94, "skipped": 1, "subtests_passed": 24, "failed": 0, "seconds": 2.72 }, "actual_kernel_no_ip": { "passed": 1, "skipped": 0, "seconds": 0.18, "real_unprivileged_reader_uid": 65534 }, "web": { "node_passed": 176, "chromium_passed": 5, "failed": 0 }, "packaging": { "passed": 62, "failed": 0 }, "latest_assembler_guards": { "passed": 10, "failed": 0 }, "skip_accounting": [ "28 full environment skips covered by focused ROOT/PostgreSQL checks", "New isolated real-kernel NET_ADMIN fixture covered explicitly with required opt-in environment flag", "Seven SQLite-labelled cases intentionally require separately exercised PostgreSQL variants", "Two exactRC25 artwork transform cases reuse unchanged-source/frozenfunction evidence from C07; all relevant runtime andtransformsource unchanged", "M5 OpenSSL-path-specific unit is separate from required actual installedRecoveryC OpenSSL validation" ], "iso_acceptance_here": false, "physical_audio_tested": false, "production_core_operations": false, "qualification_receipt_sha256": "8885ff100d89aba8b34f38c1089cbe156dea848003a5bc6c89b9a753f10781c2", "independent_signed_audit": { "status": "SIGNED_CANDIDATE08_INDEPENDENT_AUDIT_PASS", "receipt_sha256": "8fc586bca766e0a20b1bcedb87492f02f8c8898098fe932d95a13a8be355966a", "direct_ed25519_verified": true, "normal_updater_verified": true, "runtime_files": 550, "complete_baseline_variants": 122 }, "group_counts_not_claimed_unique": true, "C07_boot_results_inherited": false } { "status": "PASS", "receipt_status": "exact compact evidence read back and all manifest entries verified", "target": "isolated fresh Derby QA VM", "normal_installer": "PASS", "cold_slot_A": "PASS", "cold_slot_B": "PASS", "runtime_files_each_slot": 550, "public_uncommissioned_BMM_files_each_slot": 20, "root_read_only": true, "VM_headless_kiosk_inactive": true, "same_normal_user_session_and_distinctive_profile_B_A_C_A": true, "actual_installed_image_no_ip_dual_address_fixture": "PASS", "public_summary": "The same normal user session and distinctive profile persisted through B \u2192 A \u2192 C \u2192 A. Each installed slot retained a read-only root and the VM stayed headless.", "receipt_sha256": "9db3e847341995e1be9006a108692c4a6444082eeb9240365fdf8308f95421b8", "evidence_manifest_sha256": "db13d610959b3b5ffa49b9f428c0274f2afa69a60eac47d3c186aab17d1d1304", "evidence_content_files_verified": 24 } { "status": "PASS_MANUAL_ONE_USE_DIAGNOSTIC_AND_INSTALLED_VERIFIER", "mode": "manual one-use diagnostic boot; no DATA mount or application services", "authoritative_one_use_C_flag_consumed": true, "installed_C_OpenSSL_valid_C08_package_accepted": true, "installed_C_OpenSSL_wrong_key_rejected": true, "same_normal_user_session_and_profile_returned_to_A": true, "armed_end_to_end_update_activation_qualified": false, "update_apply_and_rollback_execution_qualified": false, "same_version_reinstall_qualified": false, "public_summary": "A manual one-use Recovery C diagnostic boot consumed the authoritative C flag; its installed OpenSSL verifier accepted the signed C08 package and rejected a wrong key. End-to-end update activation/apply/rollback and same-version reinstall require separate qualification.", "receipt_sha256": "72cd6a0c2165226cf3f77db8c7d129d3545bdf6539d40ade0a9dac7f022aab97", "no_update_transaction_staged": true, "diagnostic_worker_exit_without_transaction": "expected refused/no update apply; not qualified as update execution" } Remaining separate checks: physical HP EliteDesk kiosk/mouse/automatic login, broad physical audio output matrix, same-version reinstall, end-to-end update activation and rollback. See the public JSON for exact receipts, hashes and limitations.