[ymote]

Standalone Rinx packages the pinned Octos executable for desktop and Android, discovers it inside the app, and shuts down only the runtime it owns. Hosted Rinx consumes OctoSense's injected service. The peer dependency uses 35d9d121, the source-equivalent replacement for c806889 after OctoSense's history rewrite; the kernel remains a6ea8505.

Android discovery no longer panics while constructing the HTTPS verifier. Login/restore revoke old contexts before binding the installed Matrix client, and mini-app session/history replies retain their fields and size limit.

The article editor now includes SVG action controls, compact side-by-side authorization/publish/withdraw confirmation rows, 24 icon assets, and English/Chinese hover and long-press labels. Edit/Preview, publishing, formatting, image and style controls keep their existing actions. The source editor changes were integrated without altering the original development checkout.

Validation for 8a7b935b (the source tree is identical to merge commit 7c3f4900, which incorporates main's rewritten dependency pin while retaining the newer tested shared-kernel revision):

• Both Rinx CI checks pass at 8a7b935b.
• macOS cargo build --profile fast --locked -p rinx and all three existing article_app::ui::tests pass. Hidden native macOS startup and matrix.org discovery pass.
• Separate OnePlus 6 APKs: standalone 2026092711 and hosted 2026092713 via OctoSense #70. Both signatures, kernel hashes and exact article SVG asset bytes verified. Standalone native login/discovery passes; it remains signed out.
• Hosted authenticated UI retains the account, shows adjacent consent icons and long-press labels, preserves a local draft after closing/reopening, and renders typed text in Preview. Theme selection, table insertion/rendering, publish preparation and Back to editing pass. No article was published and no Matrix message was sent.
• OctoSense setup/Cargo and both packaging dependency-graph checks pass for standard/mobile-apps on host/Android.

Earlier validation at the revisions recorded in ADR 0007 covers six packaging tests, nine homeserver tests, five account/reply tests, kernel isolation/restart/shutdown, and signed-in Android session/history, scripted-provider AI reply, approval denial, delayed-response closure, and one host kernel child. Those AI interactions were not repeated for the SVG-only editor integration. Temporary provider configuration and its own tunnel were removed.

Paid-provider inference, native cross-app agent exchange, approval acceptance, and privileged production Home/Bridge integration remain unverified. Normal Rinx, Home and Bridge installations are untouched. PR remains open for review.