[errantpacket]

Closes #171 (the --net-host evaluation for #30 continues separately).

Review (per the rhubarb-update-inputs rules)

Check	Result
Source	Unchanged: openai/tart GitHub release
Hash	363e2701…. It matches GitHub's asset digest and the release's tart_2.40.1_checksums.txt, both checked independently
Signer	TART_TEAM_ID stays 9M2P8L4D89. Bootstrap re-checks codesign, notarization and the Team ID when it installs
Scope	Only the Tart block. toolchain-pin --latest also offered uv 0.12.22; it stays at 0.12.19 for a separate change, because the CI workflows pin uv as well

Changes since 2.38.0:

• protect existing VMs during clone (#1331);
• keep errors when deleting a running VM (#1350);
• tart ip also reads /etc/bootptab (#1355);
• listing VMs when disk capacity is unavailable (#1349);
• --net-host (#1356).

Validation (in progress)

A Tart bump can change build behaviour, so after bootstrap every family is built on the Mac (M1) with 2.40.1: NixOS, Kali, the Juice Shop target, macOS 26 and macOS 27. This also covers #170's --no-audio --no-clipboard in every template. Results will be posted here before merge.

🤖 Generated with Claude Code

[errantpacket]

Mac validation: Tart 2.40.1 (MacBook Pro M1, 8 GB)

Every profile was built from this branch (766d4f7, clean tree), with #170's --no-audio --no-clipboard in every template:

Profile	Result	Notes
nixos-research	✅ smoke PASSED	7 min
juiceshop-target	✅ smoke PASSED	4 min
kali-research	✅ smoke PASSED	rbt-kali-research-30560117767a, the image the second Mac validated
goldengate-research (macOS 27)	✅ smoke PASSED	Fresh vanilla install via provisioning (10m16s) + apps + smoke. A first attempt failed once at first boot ("Internal Virtualization error"). It didn't recur, and five quick boots of macOS 26/27 images on 2.40.1, with and without the new flags, all worked
tahoe-research (macOS 26)	✅ smoke PASSED, twice	Fresh vanilla installs (17m49s, 17m59s) + apps + smoke, with #63's fix (Setup Assistant steps wait for each screen's text). Without it, stage 1 hit the old #63 flake, which predates this bump (seen on 2.38.0 on 2026-09-29)

All provenance records show tart 2.40.1. The macOS 26 runs include the #63 fix, which goes in its own PR after this one.