tenant.openagents/omega

diff --git a/script/bundle-omega-rc b/script/bundle-omega-rc
index b235ee5f33..a359c92a0d 100755
--- a/script/bundle-omega-rc
+++ b/script/bundle-omega-rc
@@ -13,7 +13,7 @@ set -euo pipefail
1313 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
1414 cd "$ROOT"
1515 
16-readonly OMEGA_RC_VERSION="0.2.0-rc14"
16+readonly OMEGA_RC_VERSION="0.2.0-rc15"
1717 readonly OMEGA_RC_SEMVER="0.2.0"
1818 readonly OMEGA_RC_CHANNEL="preview"
1919 readonly OMEGA_RC_DISPLAY_CHANNEL="rc"
@@ -28,12 +28,12 @@ readonly OMEGA_SOURCE_VERIFIER_PATH="script/verify-omega-identity"
2828 readonly OMEGA_IDENTITY_BOUNDARY_LIST="BUZZ_PRIVATE_KEY,identity.key,get_nsec"
2929 readonly OMEGA_BRAND_VERIFIER_PATH="script/verify-omega-brand"
3030 readonly OMEGA_BRAND_POLICY_PATH="script/omega-brand-gate.json"
31-readonly OMEGA_EFFECTD_RELEASE_TAG="omega-effectd-v0.1.0-rc.9"
31+readonly OMEGA_EFFECTD_RELEASE_TAG="omega-effectd-v0.1.0-rc.10"
3232 readonly OMEGA_EFFECTD_ASSET_NAME="omega-effectd-v0.1.0-macos-arm64.tar.gz"
33-readonly OMEGA_EFFECTD_ASSET_SHA256="52429905efe9922348da7b762d5fc52d8663ace37cddbc979da60be8393f552b"
34-readonly OMEGA_EFFECTD_MANIFEST_ASSET_SHA256="ed1c60e1d697c60ef1f48f7d121db67584f8c7f524bbf2e1ff5dfc31a440a937"
35-readonly OMEGA_EFFECTD_SOURCE_COMMIT="28c877d0b85b57d8f3162488b27ecf77c20278e2"
36-readonly OMEGA_EFFECTD_SOURCE_TREE="85eaf116ca8d1f303fcdb94279a512ffb5e6baa1"
33+readonly OMEGA_EFFECTD_ASSET_SHA256="e3ab92ffe0baa0cb3082ea4bc83720d1677b633f3f0725b7c7571930ae19f7ac"
34+readonly OMEGA_EFFECTD_MANIFEST_ASSET_SHA256="d797f749f57d2ab88cdad74f5ff81e882bc6052951a026c028a84fb7b022b5eb"
35+readonly OMEGA_EFFECTD_SOURCE_COMMIT="e3280b4795efe189474e12b4c6cd06123cfda359"
36+readonly OMEGA_EFFECTD_SOURCE_TREE="af28ecd0a57523640a96b6f3ed7411f07a7da228"
3737 readonly OMEGA_EFFECTD_DOWNLOAD_URL="https://github.com/OpenAgentsInc/openagents/releases/download/${OMEGA_EFFECTD_RELEASE_TAG}/${OMEGA_EFFECTD_ASSET_NAME}"
3838 
3939 DRY_RUN=false
@@ -573,12 +573,12 @@ expected_effectd = {
573573     "service_version": "0.1.0",
574574     "protocol": "openagents.omega.effectd.v1",
575575     "platform": "darwin-arm64",
576-    "release_tag": "omega-effectd-v0.1.0-rc.9",
576+    "release_tag": "omega-effectd-v0.1.0-rc.10",
577577     "asset_name": "omega-effectd-v0.1.0-macos-arm64.tar.gz",
578-    "archive_sha256": "52429905efe9922348da7b762d5fc52d8663ace37cddbc979da60be8393f552b",
579-    "manifest_sha256": "ed1c60e1d697c60ef1f48f7d121db67584f8c7f524bbf2e1ff5dfc31a440a937",
580-    "source_commit": "28c877d0b85b57d8f3162488b27ecf77c20278e2",
581-    "source_tree": "85eaf116ca8d1f303fcdb94279a512ffb5e6baa1",
578+    "archive_sha256": "e3ab92ffe0baa0cb3082ea4bc83720d1677b633f3f0725b7c7571930ae19f7ac",
579+    "manifest_sha256": "d797f749f57d2ab88cdad74f5ff81e882bc6052951a026c028a84fb7b022b5eb",
580+    "source_commit": "e3280b4795efe189474e12b4c6cd06123cfda359",
581+    "source_tree": "af28ecd0a57523640a96b6f3ed7411f07a7da228",
582582 }
583583 for key, expected in expected_effectd.items():
584584     if effectd.get(key) != expected:
@@ -1184,7 +1184,12 @@ if [[ "${DRY_RUN}" == "true" ]]; then
11841184   echo "  team:               ${OMEGA_TEAM_ID}"
11851185   echo "  signing identity:   ${OMEGA_SIGNING_IDENTITY}"
11861186   find_openagents_signing_identity
1187-  write_release_record "${DMG_PATH}" "not_attempted" "false" "false"
1187+  # Five arguments, not four: `app_stapled` arrived with the app-level staple
1188+  # check and this call was not widened with it, so every dry run since has
1189+  # died on `$5: unbound variable` after printing the plan. A dry run is the
1190+  # affordance an independent reviewer is told to use before trusting a
1191+  # candidate, so it has to reach the end.
1192+  write_release_record "${DMG_PATH}" "not_attempted" "false" "false" "false"
11881193   echo "dry-run complete; no compile, codesign, or notarization was performed."
11891194   exit 0
11901195 fi
diff --git a/script/prove-omega-rc-install b/script/prove-omega-rc-install
index 772d57bea9..4044c5e5fd 100755
--- a/script/prove-omega-rc-install
+++ b/script/prove-omega-rc-install
@@ -141,10 +141,10 @@ EXPECTED_LIFECYCLE_RECEIPTS = (
141141     "app_removal",
142142     "app_reinstall",
143143 )
144-EXPECTED_EFFECTD_ARCHIVE_SHA256 = "52429905efe9922348da7b762d5fc52d8663ace37cddbc979da60be8393f552b"
145-EXPECTED_EFFECTD_MANIFEST_SHA256 = "ed1c60e1d697c60ef1f48f7d121db67584f8c7f524bbf2e1ff5dfc31a440a937"
146-EXPECTED_EFFECTD_SOURCE_COMMIT = "28c877d0b85b57d8f3162488b27ecf77c20278e2"
147-EXPECTED_EFFECTD_SOURCE_TREE = "85eaf116ca8d1f303fcdb94279a512ffb5e6baa1"
144+EXPECTED_EFFECTD_ARCHIVE_SHA256 = "e3ab92ffe0baa0cb3082ea4bc83720d1677b633f3f0725b7c7571930ae19f7ac"
145+EXPECTED_EFFECTD_MANIFEST_SHA256 = "d797f749f57d2ab88cdad74f5ff81e882bc6052951a026c028a84fb7b022b5eb"
146+EXPECTED_EFFECTD_SOURCE_COMMIT = "e3280b4795efe189474e12b4c6cd06123cfda359"
147+EXPECTED_EFFECTD_SOURCE_TREE = "af28ecd0a57523640a96b6f3ed7411f07a7da228"
148148 MANUAL_CHECKS = (
149149     "clean_profile_side_by_side_zed",
150150     "offline_identity_first_start",
@@ -406,7 +406,7 @@ def validate_release_record(record: dict[str, Any], record_path: Path, artifact:
406406         "service_version": "0.1.0",
407407         "protocol": "openagents.omega.effectd.v1",
408408         "platform": "darwin-arm64",
409-        "release_tag": "omega-effectd-v0.1.0-rc.9",
409+        "release_tag": "omega-effectd-v0.1.0-rc.10",
410410         "asset_name": "omega-effectd-v0.1.0-macos-arm64.tar.gz",
411411         "archive_sha256": EXPECTED_EFFECTD_ARCHIVE_SHA256,
412412         "manifest_sha256": EXPECTED_EFFECTD_MANIFEST_SHA256,
@@ -1812,7 +1812,7 @@ def self_test() -> None:
18121812                     "service_version": "0.1.0",
18131813                     "protocol": "openagents.omega.effectd.v1",
18141814                     "platform": "darwin-arm64",
1815-                    "release_tag": "omega-effectd-v0.1.0-rc.9",
1815+                    "release_tag": "omega-effectd-v0.1.0-rc.10",
18161816                     "asset_name": "omega-effectd-v0.1.0-macos-arm64.tar.gz",
18171817                     "archive_sha256": EXPECTED_EFFECTD_ARCHIVE_SHA256,
18181818                     "source_commit": EXPECTED_EFFECTD_SOURCE_COMMIT,