RJ Terminal PHP runtime candidate

This isolated package contains the unmodified PHP 8.3.36 WASIX32 executable from the official wasix-org/php GitHub Actions build. It has no production database credentials, user data, application code or third-party publisher runtime.

• Source repository: https://github.com/wasix-org/php
• Source branch: 8.3.36-wasix
• Source commit: 809183b90c6faabe76b67dba36ce9009228aadb7
• Build and test run: https://github.com/wasix-org/php/actions/runs/39649844539
• Build and Test (32) job: https://github.com/wasix-org/php/actions/runs/39649844539/job/119394975282
• Official artifact name / ID: php-wasix-32 / 12369963549
• Official ZIP SHA-256: af4b3010fd684a2f91cf6a4b0c5c9f54a78b0825b13ca0c80a8a9977cabd4222
• Extracted modules/php.wasm SHA-256: 12c9cf41fbb0ba0ebe56c926d35ce10d1cea12826b7ec3a33e03c768245517b8
• Artifact retrieved through the GitHub connector; ZIP digest verified against the official Actions artifact metadata before extraction.

Runtime data files come from wasix-org/php-wasix-deps commit b77ecbede97aba2df32c86eaeb54ff9f5e44f543, the repository's latest commit preceding the official October 21 build. The build workflow checks out that repository's default branch; this asset correspondence is inferred from repository history rather than a signed build attestation. Each fetched file is checked against its pinned Git blob digest. asset-hashes.json records SHA-256 values and source paths. The CA bundle is also copied to OpenSSL's conventional cert.pem path. No shell or sendmail dependency is included because RJ Terminal does not require those commands.

Official workflow toolchain: wasixcc 0.4.4, WASIX sysroot v2026-07-03.1, LLVM 21.1.206, Binaryen version_130; official tests use Wasmer 7.2.0 on Linux. This newer build uses Wasm exception handling and WASIX process snapshots, so successful target-platform validation is required before changing the production dependency.

The previous production dependency php/php@8.3.403 resolves to a container with SHA-256 da8d3fcfcf02d2401787532c4af3fdaf5b680b05144a9591ca70b97131ee2f32 and PHP atom SHA-256 bf606ab43bdc8056d8f9d5f9f1b8ee52e9d657bd42f8ea9d6cae46a0e707168f. Its atom contains PHP/8.3.4 at byte offset 41319905 and Zend Engine v4.3.4 at 41457812. The registry packaging version alone therefore does not establish current PHP security patch coverage.

The production application manifest is unchanged by this staging package.