ElyOffice/tasks/reviews/L1.7-r3.md

FAIL

1. packaging/linux/package.sh:146 — A RUNPATH containing a literal newline is silently treated as absent: readelf prints its value across lines, so the line-based sed extracts nothing and validation skips it. In Ubuntu 26.04, a compiled ELF with $ORIGIN/missing\n:/outside passed the unmodified guard and produced deb, rpm and Arch packages; the ELF extracted from its deb returned 42 with the external library present, then failed to load when that library was removed. Reject present but unparsed RUNPATH records, and parse or reject multiline values before validating every component; add a compiled-ELF regression. Evidence: .work/L1.7-r3/guard.log, .work/L1.7-r3/ubuntu-newline.log, .work/L1.7-r3/native-newline.log.

2. packaging/source.sh:9 — The clean-tree check inherits status.showUntrackedFiles, so round 2's untracked-build-input defect persists when that Git setting is no. In the Rust probe, an untracked, automatically discovered build.rs changed the binary output to untracked-build-input; source.sh exited 0 and omitted it, and rebuilding the commit-labelled archive printed committed, violating PRD §§21.3 and 24.2. Explicitly enumerate untracked files regardless of Git settings, and add a regression with status.showUntrackedFiles=no. Evidence: .work/L1.7-r3/source.log.