[ymote]

Make native platform acceptance reproducible for signed App Hub apps: the Host API Lab runs in a separate Android package, and connected apps exercise the normal desktop browser/callback and platform-vault route against a synthetic backend. Runtime discovery now exposes implemented Linux/Windows account, read and local-draft methods; physical write-review methods retain their existing platform restriction.

Validated:

• OnePlus 6 / Android 15: 14/14 signed-app host API checks, including native permission status, capability/account isolation, invalid/uncompiled calls, background prompt refusal and endpoint cleanup. Normal Home and personal profiles are untouched.
• Linux: seven real browser/backend checks using WebKitGTK and native Secret Service, including registration/login, PKCE callback, refresh recovery, process restart, logout and two-app isolation. All 36 recorded source/lockfile hashes match the reviewed source; the native examples were built from e976557, followed only by test-driver/responsive-fixture changes. Owned processes and fictional connections were cleaned up.
• Windows: actual Credential Manager lifecycle and seven real Edge/backend behaviors passed in run 37730564370: registration/login, PKCE callback, rotating refresh recovery, native restart, logout/relogin and two-app isolation. All 35 recorded source/lockfile hashes match the reviewed files; native processes and the synthetic server stopped. The workflow tested merge commit 95d1da0 for PR head 723b202.
• Linux package: eight launch/render/resource/shutdown checks passed on the real .deb from run 37723207058, actual source merge c15a0ab. App Hub rendered all three sample listings; its agent-consent dialog remained unanswered. No app installation or account login was attempted in that package run.

The driver uses the exact host-produced authorization URL in a fresh browser; it does not inject accounts, tokens or callbacks. Native review, real Google/GitHub authorization, model/peer relay, physical permission approval and OS-authenticated business writes are separate and unverified by this PR. Sanitized receipts and bilingual reproduction instructions are included. OS-authenticated write approval is isolated in draft #372.

Local checks include the native fixture builds, Python diagnostics privacy tests, runtime/dependency checks and CI mapping checks. Stacked on #361 for its runtime pins; no browser adapter changes.

The browser, raw-response, platform-acceptance and compatible Hub changes are being consolidated into one integration PR for one complete final-source CI run. OS-authenticated approval remains separate in draft #372.

[ymote]

Implemented on main through #370, merged as 28e2ac11401621cad3d6a77e6ecab17024b72c8f. This PR’s complete head 723b202e is an ancestor of the integrated candidate. Closing the stacked PR because its changes are already included. The integrated 933abbcf head passed all 44 required local CI steps and exact-head Windows browser acceptance; it is tagged desktop-v0.1.0-rc.1, with release assets still building.