Build delivery retries from clean tagged source

docs/roadmap/remediation.md

@@ -262,6 +262,11 @@ name and verify that only the intended tool runs.
 
 ### Stage 3: Build the manual retry tool only from a clean tagged checkout
 
+**Completed.** The retry resolves and checks out the fetched tag and checks
+cleanliness before invoking Go. Local probes verified that fetch failure,
+checkout failure, and remaining edits stop before Go, and a clean retry
+builds and runs the tagged tool for the host.
+
 **Evidence:** The [manual retry block](../release.md) runs `git fetch` and
 `git checkout --detach` before the subshell that enables `set -e`. A
 failed checkout can therefore be followed by dependency preparation, a