From 2f46d9de0ae4940ba87260999169595df0121f67 Mon Sep 17 00:00:00 2001
From: Mikhail <misha_mst@mail.ru>
Date: Tue, 12 May 2026 10:12:06 +0300
Subject: [PATCH] Record clean main vpnruntime build correction

---
 .../VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md  | 25 +++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/docs/operations/VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md b/docs/operations/VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md
index eeff31e..d3181b4 100644
--- a/docs/operations/VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md
+++ b/docs/operations/VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md
@@ -115,3 +115,28 @@ Check it with:
 git rev-parse HEAD
 git ls-remote --heads origin main
 ```
+
+### 2026-05-12 Clean Main Build Correction
+
+Follow-up review found that `fabric_transport_test.go` had been published
+before the tracked `vpnruntime` implementation files. A clean worktree from
+`main` therefore failed in `agents/rap-node-agent/internal/vpnruntime`.
+
+Correction:
+
+- added tracked `vpnruntime` implementation files required by the CI guard
+  tests;
+- added the mesh VPN packet production envelope contract;
+- added the required client packet batch helpers;
+- added the missing mesh production constants;
+- made the default TUN implementation unsupported on non-Linux builds so clean
+  Windows builds compile without the optional Windows TUN prototype.
+
+Verification:
+
+- clean detached worktree from corrected `HEAD`: `go test ./...` in
+  `agents/rap-node-agent`: PASS
+- local one-shot guard:
+  `pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/smoke/run-vpnruntime-ci-guards.ps1 -AntiFlakeCount 20 -TargetedCount 50`: PASS
+- corrected published head:
+  `43663e403033223af8945c51395c223e856d5016`