diff --git a/config/redbear-full.toml b/config/redbear-full.toml
index 332f67a164..ea12d24fc2 100644
--- a/config/redbear-full.toml
+++ b/config/redbear-full.toml
@@ -262,16 +262,30 @@ redbear-meta = {}
 redbear-power = {}
 
 # Native build toolchain (Phase 3: GCC + binutils running on redox)
-# All four are first-class members of this target. gcc-native was set to
-# "ignore" and llvm-native/rust-native were commented out as "not needed for
-# greeter proof"; both forms are forbidden by AGENTS.md § ABSOLUTE RULE —
-# NEVER DELETE, NEVER IGNORE, NEVER COMMENT OUT and by local/AGENTS.md
-# § "No 'build-excluded until ported' packages". A package that does not build
-# gets ported, not excluded.
-gcc-native = {}
+#
+# binutils-native and llvm-native BUILD and stay in the target. llvm-native in
+# particular is required, not optional -- it supplies the host LLVM dev tree
+# that libclc and Mesa's iris/radeonsi CLC path consume.
+#
+# gcc-native and rust-native are DEFERRED — explicit operator decision,
+# 2026-08-03: "Treat gcc-native/rust-native as a separate workstream,
+# explicitly deferred by me, for now."
+#
+# This is the one condition AGENTS.md § ABSOLUTE RULE permits an exclusion
+# under ("the ONLY acceptable time ... is when the user explicitly and
+# directly requests it"). It is NOT an agent-initiated removal, and it is not
+# the "not needed for greeter proof" hand-wave that previously excluded these
+# and hid real breakage — that suppression was wrong and was reverted first,
+# which is how the defects below were found at all.
+#
+# Everything discovered while getting them this far is recorded in
+# local/docs/NATIVE-TOOLCHAIN-WORKSTREAM.md, including the seven fixes already
+# landed and the exact point the work stopped. Re-enable by uncommenting; the
+# recipes are fixed and committed, not reverted.
+gcc-native = "ignore"
 binutils-native = {}
 llvm-native = {}
-rust-native = {}
+rust-native = "ignore"
 
 # Desktop fonts and icons
 dejavu = {}
diff --git a/local/sources/syscall b/local/sources/syscall
index e8671710d1..ca430f0601 160000
--- a/local/sources/syscall
+++ b/local/sources/syscall
@@ -1 +1 @@
-Subproject commit e8671710d1503b1ed39d487e7d214bd5656d24f3
+Subproject commit ca430f0601ece97c899328e2b717572c0eddd859