# Installed native readiness action contract

[README.md](README.md) describes prerequisite ordering. This action is a hosted
Ubuntu preparation step, called after checkout, pinned source fixtures and
Python/uv setup. Its `prepare-lean` input accepts only `true` or `false` and
defaults to `true` for complete native roles. The Code diagnostic explicitly uses
`false`; it does not exercise Lean. `matrix-cell` names the single exemplar a job prepares and is the preferred input:
after this action's own `uv sync` it derives the extra cache scopes from
`native_installed_launcher --print-preparation-scopes`, so warming and preparation
share one predicate. Never resolve those scopes in a workflow step instead: the
interpreter does not exist before this action, and hosted run 41952164694 lost all
25 cells to `.venv/bin/python: No such file or directory` (exit 127) that way.
`project-scopes` remains as an explicit override and defaults to empty, which keeps
Root-only warming for callers that install nothing else. This action has no acceptance outputs. Java and EPUBCheck
nominations are exported as `TEMPLATE_NATIVE_JAVA` and
`TEMPLATE_NATIVE_EPUBCHECK` for the caller's explicit tool arguments.

Preserve Root `uv.lock`, Source package/tool pins, upstream licenses and existing
local setup actions. Do not combine independent project locks or use a cache,
path or tool label as provider authority. Cache warming precedes the cold
operation. Complete native roles retain the original 14400-second deadline;
the incomplete Code diagnostic retains its bounded 1800-second deadline. All later
provider/Code/native predicates belong to the genuine installed launcher and
reader. Preparation establishes no claim that either operation fits its clock.

Retain genuine preparation failures. Keep temporary cache-warming cleanup
restricted to the action's own `mktemp` destinations. This action does not clean
shared source, runtime aliases or acceptance evidence. The same preparation must
serve originals, readers and handoff under the
[required workflow](../../workflows/platform-required-acceptance.yml) and
[release workflow](../../workflows/release.yml).

Maintain the [parent action contract](../AGENTS.md), the local doc pair and
resolving links. Run actionlint after action edits; complete docs and release
acceptance remain caller-owned gates.