FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Release: harden public 0.3.0 candidate by nikolasvoss · Pull Request #1 · nikolasvoss/debugOracle · GitHub

/ debugOracle Public

Release: harden public 0.3.0 candidate - #1

Merged
nikolasvoss merged 8 commits into
mainfrom
codex/public-release-hardening-plan
Aug 24, 2026
ConversationCommits (8)ChecksFiles changed
Merged

Release: harden public 0.3.0 candidate#1
nikolasvoss merged 8 commits into
mainfrom
codex/public-release-hardening-plan

Conversation

nikolasvoss commented Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Summary

  • harden release packaging, CI compatibility, installer trust, safe file writes, and process control
  • synchronize version 0.3.0, specifications, changelog, security policy, provenance, and dependency evidence
  • add deterministic wheel verification and adversarial installer/runtime regression coverage
  • retain Apache-2.0 and the current checkout-local installer for 0.3.0; default verified-wheel onboarding is deferred on the roadmap
  • temporarily exclude the private reference workspace from pull-request and main CI while keeping tag validation fail-closed

Traceability

Behavior Change: yes

  • Spec: docs/plans/PUBLIC_RELEASE_HARDENING_TASK_SPEC.md
  • Plan: docs/plans/PUBLIC_RELEASE_HARDENING_PLAN.md

Acceptance Criteria -> Validation

Acceptance criterion Validation Evidence
AC-003 Temporary non-tag exception; full local recursive gate passes and tag gate remains strict tests/test_verify_workflow_docs.py; tests/test_release_verification_script.py
AC-004 Python 3.10 through 3.14 compatibility matrix quality-and-traceability workflow
AC-021 Deterministic verified wheel gate scripts/verify-release.sh
AC-022 Full quality, artifact, documentation, and security gates local release evidence and GitHub Actions

Validation

  • full project verification passed with the initialized reference workspace
  • simulated non-tag CI passed 517 core tests, coverage, Bandit, deterministic builds, metadata checks, and fresh installation
  • independent code, CLI, documentation, and security reviews completed without unresolved blocking findings

Exception

Exception requested: yes

  • What is being skipped: private reference-workspace checkout and only its content-dependent tests in pull-request and main CI
  • Why it is safe: runtime and package code remain fully checked; the complete reference suite passed locally; tagged release verification rejects this exception
  • Follow-up work: publish the separately reviewed reference repository and restore recursive checkout and tests in pull-request and main CI
  • Expiry: before creating or validating release tag v0.3.0

Known release decisions

  • physical HIL validation is explicitly deferred and must not be claimed as completed
  • no tag or GitHub Release is created by this pull request
  • the wheel is the planned publication asset; reproducible sdist publication remains out of scope

nikolasvoss merged commit 63bad46 into main Aug 24, 2026
8 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

Back | FazBrowse Home | New Git URL