[bong-water-water-bong]

The package stage cannot run on a release build after #556. Two independent blockers, both in scripts/package-linux.sh:

1. #556 requires a tool it never stages. pack_require_tools (line ~103) demands llama-server llama-bench llama-perplexity, but put only stages the first two, so every run dies with
missing from the package: hrx/llama/bin/llama-perplexity. The build does make it — cmake/hrx.cmake builds all
three — and #556's pack_localize gives it $ORIGIN RUNPATHs and libllama-perplexity-impl.so. Fix: stage it too.

2. The provenance check can never pass where it is. pack_require_provenance compares each staged file byte for
byte with $build/$rel, and it is called after pack_localize, which rewrites every RUNPATH with patchelf and
copies libomp.so in from TheRock. So it reports every ELF as differs from the build being packaged (and libomp as
not in the build). Fix: run it before pack_localize, where the staged files are still the build's own bytes.

Proved against the release build (engine e7d64b8, strixhalo): scripts/package-linux.sh <build> /tmp/out exits
0, hrx/llama/bin ships 27 files including llama-server, llama-bench, llama-perplexity and
libllama-perplexity-impl.so, the three sealed NPU sets are packed, and #556's own load check prints no
"cannot load" line. Before the change, the stage failed one line earlier on the missing tool.

python3 tools/copyright.py --check rc=0. Release-blocking for the v2026.43 candidate: the e7d64b8 tree is otherwise
green (hw-gate 20/20, 1bit.check both ways, vmtest + vmtest-release PASS, binary drop PASS), and only package needs to
re-run after this merges.

🤖 Generated with Claude Code

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🎫 Ticket compliance analysis 🔶 556 - Partially compliant Compliant requirements: The implementation library for llama-perplexity is now built and included in the package The stage refuses to ship programs whose NEEDED libraries do not resolve The resolve check runs with plain ldd without LD_LIBRARY_PATH The package no longer ships binaries that fail at first use Non-compliant requirements: None Requires further human verification: None

⏱️ Estimated effort to review: 3 🔵🔵🔵⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Incorrect Provenance Check Timing The provenance check pack_require_provenance is moved before pack_localize to ensure that staged files are compared against the build tree before RUNPATHs are rewritten. This is necessary because pack_localize rewrites RUNPATHs and copies libomp.so from TheRock, which would cause the byte comparison to fail even for valid files. # Everything staged has to come from the build being packaged. This compares bytes with the same path under the # build, so it runs before pack_localize: localization rewrites every RUNPATH (and adds libomp.so, which the build # does not have), after which nothing would match. provenance_bad=$(pack_require_provenance "$stage" "$build" || true) [ -z "$provenance_bad" ] || { echo "files that did not come from this build:"; echo "$provenance_bad"; exit 1; } Missing Tool Staging The put function call for hrx/llama/bin is updated to include llama-perplexity in addition to llama-server and llama-bench. This ensures that the llama-perplexity binary is staged and available for the provenance check and tool requirement verification. put hrx/llama/bin llama-server llama-bench llama-perplexity