Qualify CLI transfers and retain applied client-tools evidence

[seathatflowsinourveins]

Scope

Qualify the bounded CLI transfer collection and repository host steps, and record the tools windows' applied package pins and client registrations. This retained draft folds #780's dated code-navigation dossier and #815's applied-window records into #776; it performs no host installation, configuration or client trial. The72missing filenames include30legacy user-bin names and42package bin/sbin names, including backups, versioned SDK aliases and a daemon; they are not72distinct products.

• Base: ecfa112.
• Lane: lane:foundation.
• Ten named install rows share seven native transactions;62dated exclusions retain source pins and consumer/owner gaps.
• Foundation84owners/63selected installations and default dispatch are unchanged.
• Owned paths: the install-plan bundle/checker, transfer runbooks, client maps/templates, profile/catalog/recipes, token instructions, touched tests and dated artifacts. manifests/stack.json and manifests/evidence.json are in the LAST commit.
• Repository changes only. No host install, sudo, service/config change, fresh model/provider execution or merge by this lane.

Approved folds and preservation

• Document Codex code-navigation parity and native F9 fixes #780, source 50bf3c5: preserve the code-navigation parity decision/proposal and summary byte-identically. Their historical observations and proposed trial/configuration work remain dated evidence; no local trial matrix gates readiness and no unrun proposal is claimed applied.
• Reflect the applied native client tools windows #815, source 9db54c8: preserve the actual Codex/Claude tools-window receipts and decisions byte-identically, and apply their current package/registration/map changes. The recorded jCodeMunch pin is 1.108.330, semble is 0.6.2, and Codebase Memory retains its own 0.11.0 binary and canonical client interface. A later pin needs its owner's own receipt; this historical window is not relabelled.
• The eight new source artifacts are all byte-identical. Shared current carriers retain Qualify CLI transfers and retain applied client-tools evidence #776's existing scope outside the exact source-PR patches; the comparison proof records each path and hash. The registry is produced with native register_file, never copied or hand-merged.
• Generated handbook outputs use Qualify CLI transfers and retain applied client-tools evidence #776's unchanged native builder, since Reflect the applied native client tools windows #815's base has a different builder/prior receipt. Both existing historical receipts stay byte-identical. A new local generation record, evidence/artifacts/ns2604-tools-window-20261006/handbook-fold-776-20261007.json, binds this branch's actual inputs/outputs. The current test pointer uses that new record; no unrelated intervening main changes or rebase are imported.
• The co-op verifies each fold and closes Document Codex code-navigation parity and native F9 fixes #780/Reflect the applied native client tools windows #815 with records, keeping their branches. This lane closes none.

Landing path

The co-op arranges the combined independent read, the CC ACK names the exact checked head, and 5f lands this retained draft at the approved rank 24. Rebase once, only on the relayed landing cue. This creates no new PR. Current source-review, requested-smoke and organic-counter evidence remain separate.

SOTA sources

• Codebase Memory v0.11.0 native client installer, README and src/cli/{agent_clients.c,agent_profiles.c}; the binary's install --skip-binary --clients owns the native assets.

• jCodeMunch 1.108.330, README/configuration/watch-extra metadata; semble 0.6.2, README and MCP package extra. Actual-window digests are bound in evidence/artifacts/ns2604-tools-window-20261006/receipt.json.

• Historical codenav source review: Codex rust-v0.160.0 required-server/catalog readiness, Serena c6fbd1c client recipe, SocratiCode 1.15.0; full pinned source locators remain in the unchanged folded dossier.

• Existing plan, catalog, adoption/credential profiles and check contracts atecfa11276; approved Phase1 step6 SHA775119dc6840552def19142a10e2730b489b6365c346e6f9fb6f5db5f2572ba2.

• misev2026.10.1 use/unuse and auto-install setting; UV0.12.22 tools. Manager source/command equality is checked.

• Gitleaksv8.30.1 README, explicitly retained for P1-GIT compatibility; Betterleaks default unchanged.

• Grype0.119.0 native installation test; existing independent vulnerability-scanner selection in catalogs/foundation/automation.json.

• ntfyv2.28.0, Aqua e831e00a; Qdrantv1.19.1, Aqua d15f84b9.

• vLLM0.30.0 CLI/Python support; Tavily CLI0.1.8 PyPI and sdist SHA3b660c961e8bc93309964ccfc6982f3a17dcae15b59cc1e36924ccf4edfdec08, reviewed2026-10-06.

• pkgconf2.5.1 CLI; Ubuntu resolute2.5.1-4 alias file list, binary file list, APT native manual, reviewed2026-10-06.

• Git2.53.0 clone, util-linux2.41.3 mount/findmnt, systemd259.5 systemd-fstab-generator; canonical Librarium source at7c6215ebdcb47ee6a73af692868b9ff014db3c8c and nas-ops at1fc22572b0f8aadbe976fae8fe12ec811103e456.

• All excluded-row sources are repository files bound at a full Git pin. A9/A10 owner dispositions retain Poppler26.09.0/no-consumer and legacy-wrapper-purpose gaps.

Evidence-class table

Claim	Evidence class	Command / receipt
Actual legacy/target CLI and package metadata;72missing filenames accounted for	local_integration	transfer-inventory.json; private sanitized inventory outputs
Same checker passes72transfer rows;84/63foundation contract unchanged	local_integration	check_plan.py exit0; transfer-local-checks-20261006.json
323tests run:320passed,3conditional statusline skips retained	local_integration; individual stand-ins synthetic	exact unittest argv/output hash/skipped names in local-check receipt
Missing-shim control discriminates auto-install side effect	synthetic + pinned source review	transfer contract test; not upstream mise acceptance
Native helper version/help reuse, scoped-prefix/entrypoint facts	native_proven (version only) + source_review	inventory's amtool/promtool/hf/context-mode fields
New installation/self-test commands and repository/fstab lifecycle	source_review; planned host work	CLI/repository runbooks;10bash blocks syntax0, not executed
Integrity/privacy/scope and diff checks	local_integration	validate0 and git diff --check0

Local commands run

Combined fold validation at cda3e50:

rtk proxy nice -n 19 ionice -c3 python3 evidence/artifacts/new-wsl-install-plan-20261002/check_plan.py
# 0: 84 foundation rows, 72 transfer rows, 10 named-only transfer installs.
rtk proxy nice -n 19 ionice -c3 python3 scripts/build_new_wsl_handbook.py --check
# 0: matches the new native fold-generation record.
rtk proxy nice -n 19 ionice -c3 python3 -m unittest tests.test_new_wsl_transfer_clis tests.test_new_wsl_definitive_defaults tests.test_new_wsl_client_config tests.test_new_wsl_handbook tests.test_task_model_routing tests.test_token_lanes_subagent_start tests.test_new_wsl_profile tests.test_handbook_summary tests.test_landscape
# 0: 542 tests in 128.779s; 3 retained conditional skips (539 passed).
rtk proxy nice -n 19 ionice -c3 python3 scripts/validate.py
# 0: 10,286 hashed files; integrity/scope only.
rtk git diff --check
# 0.

Independent fold-completeness review ACCEPT: all source paths covered; #780 is 2/3 whole-file identical (registry merged), #815 is 21/32 (11 explicitly documented current-carrier/generated/registry merges). All eight added original artifacts are byte-identical, as are both historical handbook receipts and all 13 retained-target artifacts. The native builder stays unchanged. These are repository integration checks, not upstream suites, organic use, fresh host acceptance or benchmarks. Hosted CI at this head is pending.

Retained original transfer checks:

rtk proxy nice -n 19 python3 evidence/artifacts/new-wsl-install-plan-20261002/check_plan.py
# 0:84foundation rows/63selected;72transfer rows/10named install rows.
rtk proxy bash -n evidence/artifacts/new-wsl-install-plan-20261002/install.sh
rtk proxy bash -n evidence/artifacts/new-wsl-install-plan-20261002/accept.sh
# Both0.
rtk proxy nice -n 19 python3 -m unittest tests.test_new_wsl_transfer_clis tests.test_new_wsl_definitive_defaults tests.test_new_wsl_client_config
# 0:323tests in95.518s;3conditional statusline skips (320passed).
rtk proxy nice -n 19 python3 scripts/validate.py
# 0:integrity/scope only; no live provider/GPU qualification.
rtk git diff --check
# 0.

Initial local contract failures are retained privately and corrected: first function indentation, expanded-fixture inventory coverage, source Path namespace, and safe compiler-ID slugs. Source critics found exclusion dispatch/source-validation and shim auto-install gaps; meaningful negative controls now cover them. No upstream failure was patched/skipped or promoted into acceptance.

Hosted CI's OSV scan fails on unchanged baseline locks: mako1.4.1 (GHSA-5639-2j2p-m4mx), fsspec2025.9.0 (GHSA-27vj-qcqg-25rc), multidict6.7.0 (GHSA-54p9-h82j-f925), werkzeug3.1.8 (GHSA-g6x2-hccm-hh4m), and source-map-js1.2.1 (GHSA-68fv-2mgg-jv7q). The five affected lockfiles have zero diff against ecfa112, including the frozen macOS artifact. This lane makes no lockfile repair or suppression; co-op routes these to their owners before landing. Local checks passed; this draft is not claimed CI-green or ready.

Decision record

docs/decisions/2026-10-06-transfer-cli-scope.md records alternatives/overturn criteria. Scope follows A8: transfer-only collection, same checker, no foundation default revision. A9B excludes Poppler CLIs while retaining26.09.0 migration if a consumer appears. A10A keeps two unowned wrapper purpose/consumer questions open with the legacy owner before R5; no equivalence claimed and old bins remain intact for salvage.

Exact host apply, readbacks and rollback

The co-op runs these from the reviewed checkout, one installation/heavy step at a time, nice19. The CC's current foundation-first rule removes foundation paper/calendar holds. Heavy commands use nice19/ionice-c3; host configuration changes still use the CC's reviewed source and announced brief lane park. This PR executes none of the host steps. A native manager must already exist; absent prerequisites fail69. Keep before/after metadata in a dated0700private directory. Reuse an already matching pin; record a differing prior request and its exact restoration before replacing it.

Seven native installations; the pkgconf canonical row supplies four aliases. The native self-tests are UNRUN by this PR. They bind versions/help plus option-parser controls; Gitleaks's generated detector fixture is synthetic. All transfer acceptance subprocesses disable mise auto-install.

set -euo pipefail
p1_cli_receipt="$HOME/.local/state/native-agent-stack/backups/p1-clis-$(rtk proxy date -u +%Y%m%dT%H%M%SZ)"
rtk proxy mkdir -m 0700 -p "$p1_cli_receipt"
rtk proxy mise ls --global --json > "$p1_cli_receipt/mise-before.json"
rtk proxy uv tool list > "$p1_cli_receipt/uv-before.txt"
rtk proxy apt-cache policy pkgconf pkgconf-bin libpkgconf7 > "$p1_cli_receipt/apt-before.txt"

rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/install.sh --only transfer-cli-gitleaks
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/install.sh --only transfer-cli-grype
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/install.sh --only transfer-cli-ntfy
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/install.sh --only transfer-cli-qdrant
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/install.sh --only transfer-cli-tvly
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/install.sh --only transfer-cli-vllm
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/install.sh --only transfer-cli-pkgconf

rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-gitleaks --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-grype --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-ntfy --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-qdrant --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-tvly --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-vllm --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-pkgconf --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-pkg-config --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-x86_64-linux-gnu-pkgconf --stage post_install
rtk proxy nice -n 19 ionice -c3 bash evidence/artifacts/new-wsl-install-plan-20261002/accept.sh --only transfer-cli-x86_64-linux-gnu-pkg-config --stage post_install
rtk proxy mise ls --global --json > "$p1_cli_receipt/mise-after.json"
rtk proxy uv tool list > "$p1_cli_receipt/uv-after.txt"
rtk proxy uv pip freeze --python "$(rtk proxy uv tool dir)/tavily-cli/bin/python" > "$p1_cli_receipt/tavily-dependencies.txt"
rtk proxy uv pip freeze --python "$(rtk proxy uv tool dir)/vllm/bin/python" > "$p1_cli_receipt/vllm-dependencies.txt"
rtk proxy dpkg-query -W -f='${binary:Package} ${Version}\n' pkgconf pkgconf-bin libpkgconf7 > "$p1_cli_receipt/apt-after.txt"

rtk proxy mise unuse --global aqua:gitleaks/gitleaks@8.30.1
rtk proxy mise unuse --global aqua:anchore/grype@0.119.0
rtk proxy mise unuse --global aqua:binwiederhier/ntfy@2.28.0
rtk proxy mise unuse --global aqua:qdrant/qdrant@1.19.1
rtk proxy uv tool uninstall tavily-cli
rtk proxy uv tool uninstall vllm

for p1_package in pkgconf pkgconf-bin libpkgconf7; do
  test "$(rtk proxy dpkg-query -W -f='${Version}' "$p1_package")" = 2.5.1-4
done
rtk proxy apt-get --simulate remove pkgconf pkgconf-bin libpkgconf7 > "$p1_cli_receipt/apt-removal-preview.txt"
rtk proxy python3 - "$p1_cli_receipt/apt-removal-preview.txt" <<'PY'
from pathlib import Path
import sys
allowed = {"pkgconf", "pkgconf-bin", "libpkgconf7"}
removed = {line.split()[1].split(":")[0] for line in Path(sys.argv[1]).read_text().splitlines()
           if line.startswith("Remv ")}
assert removed <= allowed, "rollback would remove another consumer"
PY
rtk proxy sudo apt-get remove -y pkgconf pkgconf-bin libpkgconf7
rtk proxy mise ls --global --json > "$p1_cli_receipt/mise-rollback.json"
rtk proxy uv tool list > "$p1_cli_receipt/uv-rollback.txt"
rtk proxy apt-cache policy pkgconf pkgconf-bin libpkgconf7 > "$p1_cli_receipt/apt-rollback.txt"

The rollback blocks above apply only to newly introduced requests/packages still matching this apply. Restore a saved prior pin for an upgrade; preserve intervening operator changes. Native mise pruning preserves other tracked consumers. UV uninstall targets only the named environment. The apt preview must remove only the three introduced packages; no autoremove/purge. P1-GIT#767 separately owns its paired containment wrappers and their lifecycle.

Repository clones and vault bind

Clone nas-ops, distinct librarium (not librarium-course), and a fresh native-agent-stack-live. All track main and record the actual remote/local heads. Each destination must be new; no existing checkout/key/sign-in is copied.

Exact operator-specific fstab line, explicitly requested:

/mnt/c/Users/<user>/librarium-vault ~/projects/librarium/vault none bind,nofail 0 0

The following blocks use that SAME operator path and matching HOME guard. Run every block in the SAME ordinary-user shell with set-euo; save receipt variables before later rollback. They preserve existing cloned vault contents/fstab, verify mount identity, reject concurrent fstab changes during full-file restoration, and move only recorded new clones during rollback.

set -euo pipefail
p1_repo_backup="$HOME/.local/state/native-agent-stack/backups/p1-repositories-$(rtk proxy date -u +%Y%m%dT%H%M%SZ)"
rtk proxy mkdir -m 0700 -p -- "$p1_repo_backup"
rtk proxy mkdir -p -- "$HOME/code" "$HOME/projects"

test ! -e "$HOME/code/nas-ops"
test ! -L "$HOME/code/nas-ops"
rtk proxy nice -n 19 git clone --branch main -- \
  https://github.com/seathatflowsinourveins/nas-ops.git "$HOME/code/nas-ops"
printf '%s\n' nas-ops >> "$p1_repo_backup/created-clones"

test ! -e "$HOME/projects/librarium"
test ! -L "$HOME/projects/librarium"
rtk proxy nice -n 19 git clone --branch main -- \
  https://github.com/seathatflowsinourveins/librarium.git "$HOME/projects/librarium"
printf '%s\n' librarium >> "$p1_repo_backup/created-clones"

test ! -e "$HOME/code/native-agent-stack-live"
test ! -L "$HOME/code/native-agent-stack-live"
rtk proxy nice -n 19 git clone --branch main -- \
  https://github.com/seathatflowsinourveins/native-agent-stack.git "$HOME/code/native-agent-stack-live"
printf '%s\n' native-agent-stack-live >> "$p1_repo_backup/created-clones"

p1_clone="$HOME/code/nas-ops"  # repeat for the other two destinations
test "$(rtk proxy git -C "$p1_clone" symbolic-ref --short HEAD)" = main
rtk proxy git -C "$p1_clone" rev-parse HEAD
rtk proxy git -C "$p1_clone" rev-parse origin/main
test "$(rtk proxy git -C "$p1_clone" rev-parse HEAD)" = "$(rtk proxy git -C "$p1_clone" rev-parse origin/main)"
test -z "$(rtk proxy git -C "$p1_clone" status --porcelain=v1)"

p1_vault_source=/mnt/c/Users/<user>/librarium-vault
p1_vault_target="$HOME/projects/librarium/vault"
p1_fstab_line='/mnt/c/Users/<user>/librarium-vault ~/projects/librarium/vault none bind,nofail 0 0'

test "$HOME" = ~
test -d "$p1_vault_source"
test ! -L /etc/fstab
test ! -L "$p1_vault_target"
if rtk proxy findmnt --mountpoint "$p1_vault_target" --noheadings --output TARGET >/dev/null; then exit 1; fi
if rtk proxy findmnt --fstab --mountpoint "$p1_vault_target" --noheadings --output TARGET >/dev/null; then exit 1; fi
if test -e "$p1_vault_target"; then
  test -d "$p1_vault_target"
  test ! -e "$p1_repo_backup/librarium.vault.before"
  rtk proxy mv -- "$p1_vault_target" "$p1_repo_backup/librarium.vault.before"
fi
rtk proxy mkdir -p -- "$p1_vault_target"

rtk proxy sudo cp -a -- /etc/fstab "$p1_repo_backup/fstab.before"
printf '\n%s\n' "$p1_fstab_line" | rtk proxy sudo tee -a /etc/fstab >/dev/null
rtk proxy sha256sum /etc/fstab > "$p1_repo_backup/fstab.applied.sha256"
rtk proxy sudo systemctl daemon-reload
rtk proxy sudo mount "$p1_vault_target"
rtk proxy git -C "$HOME/projects/librarium" config --local core.fileMode false

rtk proxy findmnt --verify --verbose --target "$p1_vault_target"
rtk proxy findmnt --fstab --mountpoint "$p1_vault_target" --noheadings --output SOURCE,TARGET,FSTYPE,OPTIONS
rtk proxy findmnt --mountpoint "$p1_vault_target" --noheadings --output SOURCE,TARGET,FSTYPE,OPTIONS
test "$(rtk proxy stat -c '%d:%i' "$p1_vault_source")" = "$(rtk proxy stat -c '%d:%i' "$p1_vault_target")"
test "$(rtk proxy git -C "$HOME/projects/librarium" config --local --get core.fileMode)" = false

if rtk proxy findmnt --mountpoint "$p1_vault_target" --noheadings --output TARGET >/dev/null; then
  rtk proxy sudo umount -- "$p1_vault_target"
fi
if test -f "$p1_repo_backup/fstab.before"; then
  if test -f "$p1_repo_backup/fstab.applied.sha256" &&
     rtk proxy sudo sha256sum --check --status "$p1_repo_backup/fstab.applied.sha256"; then
    rtk proxy sudo cp -a -- "$p1_repo_backup/fstab.before" /etc/fstab
  else
    # A concurrent edit or interrupted append: inspect/remove only the owned row.
    rtk proxy sudoedit /etc/fstab
  fi
  rtk proxy sudo systemctl daemon-reload
fi
if rtk proxy findmnt --mountpoint "$p1_vault_target" --noheadings --output TARGET >/dev/null; then exit 1; fi
if rtk proxy findmnt --fstab --mountpoint "$p1_vault_target" --noheadings --output TARGET >/dev/null; then exit 1; fi
if test -d "$p1_repo_backup/librarium.vault.before"; then
  if test -e "$p1_vault_target"; then rtk proxy rmdir -- "$p1_vault_target"; fi
  rtk proxy mv -- "$p1_repo_backup/librarium.vault.before" "$p1_vault_target"
fi

# Move only destinations recorded as newly created by this apply; preserve edits.
if rtk proxy grep -qx nas-ops "$p1_repo_backup/created-clones"; then
  if test -e "$HOME/code/nas-ops"; then
    test ! -e "$p1_repo_backup/nas-ops"
    rtk proxy mv -- "$HOME/code/nas-ops" "$p1_repo_backup/nas-ops"
  fi
fi
if rtk proxy grep -qx librarium "$p1_repo_backup/created-clones"; then
  if test -e "$HOME/projects/librarium"; then
    test ! -e "$p1_repo_backup/librarium"
    rtk proxy mv -- "$HOME/projects/librarium" "$p1_repo_backup/librarium"
  fi
fi
if rtk proxy grep -qx native-agent-stack-live "$p1_repo_backup/created-clones"; then
  if test -e "$HOME/code/native-agent-stack-live"; then
    test ! -e "$p1_repo_backup/native-agent-stack-live"
    rtk proxy mv -- "$HOME/code/native-agent-stack-live" "$p1_repo_backup/native-agent-stack-live"
  fi
fi

Host evidence and limits

No evidence/hosts entry, platform status, service/API/model gate or strategy gate changed. amtool/promtool/context-mode remain scoped owner binaries with no new PATH alias. CLI restoration does not qualify Grype CVE detection, ntfy delivery, Qdrant queries, vLLM GPU/model behavior or compile/link correctness. Transitive UV dependencies resolve at host apply and are separately recorded; top-level pins are not a lockfile.

Checklist

• One lane:foundation draft; reviewed owned branch and paths.
• Exact native pins, source/command equality, meaningful controls and complete bounded inventory.
• No credential values, source auth stores or active client configuration copied.
• No host install/sudo/service change/fresh provider execution/merge by this lane.
• Shared evidence registry is the last commit; no generated-handbook/default catalog change.
• Peer-owned worktrees, files and the selected trading runtime preserved.
• Claude cross-family read before ready; co-op-controlled host apply/landing.

Known landing composition: #819 and #826 (revised)

At the recorded cda3e50 head the portable Claude registration uses codebase-memory-mcp, while USER_SCOPE_SERVERS still names the old key. Retain this as a composition condition, not a passing equality-test claim.

The later command-center ruling review-ns2604-coop-20261007T080628Z supersedes the vendor-key rename plan: #819 lands without the rename. At #776's one landing rebase, only on the relayed cue, keep then-main's server names, test name set, registered-name fixtures and client-map references. Do not introduce the vendor-key rename unless a later relay explicitly authorizes it. Preserve the other CLI-transfer and #780/#815 fold changes; compose with #826, which edits the same Claude template, without reviving the deferred rename.

Run the relevant equality checks and repository validation at that resulting head, and register checksums last. No branch edit, push or early rebase is performed for this description correction.