[PascaleBeier]

Homebrew 7 refuses the stable-formula metadata lookup before the selected formula is trusted. The original Ubuntu release job exited with code 4 at that preflight, before candidate resolution, artifact download, or compilation.

Run the existing fully qualified stable install before reading its metadata. Homebrew's formula-trust contract grants only the selected formula through that install. Existing version-format, installed-version, candidate-source checksum, upgrade, test, and uninstall assertions continue to run. The change moves one existing line in one file.

Validation at exact head 8dfefe6562d71afedee8fc712d05077f2919801c:

• Existing source/archive contracts: 2 passed; required-check contracts: 5 passed.
• Canonical MCP complete plan aa063df2ee3c7c5f478315d8, run 20261104T085602-cbabc8bb: all five selected gates passed (actionlint, zizmor, goreleaser-check, developer-docs, helm-lint).
• One native fixed-branch Release validation dispatch passed all three Homebrew platforms: macOS14, Ubuntu x64, and Ubuntu arm64, plus cross-CGO, Helm lifecycle and the required aggregate.
• All 17 applicable PR checks and all four required guards passed.

Evidence limit: the original failed image 20261101.360 lists Homebrew7.0.11, while the successful job used image 20261025.353 and did not print its runtime Homebrew version. The success log directly records formula trust and stable2.16.1 → source-bound validation-candidate upgrade/test/uninstall; it is not evidence that the successful runtime was exactly7.0.11. Official7.0.11 source independently confirms the trust mechanism. No forced Homebrew upgrade or second dispatch was performed.

The original failure and all receipts remain preserved. PR454 had not refreshed from old7458 when diagnosed, so no failure on a refreshed unfixed release head is claimed; its workflow blob was identical on main11d. Maintainers own refreshing and qualifying actual release454 after this fix is merged.