Normalize empty XDG cache settings at their owner and preserve damaged signed evidence as a backup when approved setup publishes an authenticated replacement. Keep read-only admission strict and retain incomplete publisher cleanup through client cancellation, restart admission and shutdown retry. Verify offline evidence with isolated module state and observed PGP/native inspection, remove vendor-network dependence from the foreign-launcher doctor test, and bound small feed/key requests separately from package downloads. Co-authored-by: Kaoru0822 <[email protected]> Co-authored-by: gensokyo-dev <[email protected]>