Status: NOT YET APPROVED FOR PUBLICATION. The working line is 1.0.0-SNAPSHOT; public Maven
Central 0.1.0 is unchanged. Feature scope is defined in the family review
and the compatibility contract.
- #85 reviewed and merged; full original candidate suite passed (372 tests, zero failures/errors, two platform/opt-in skips) and upstream CI/CodeQL passed.
- #86 iterative SCC/enumeration, including 10,000-node chains/rings, passes.
- #89 properties cycle rules and real-bytecode CLI regressions pass.
- Clean full suite: 378 tests, zero failures/errors, two expected platform/opt-in skips; source and Javadoc candidate artifacts pass doclint.
- Opt-in digest-pinned performance and semantic snapshots pass (383 combined imported types, 4,832 dependency edges, zero diagnostics; semantic digest unchanged).
- Reviewed SpotBugs baseline matches exactly: 161 notices, fingerprint
fc7970533be9e41f9961b7303fa77d0170a4f441c31ea6e85057effcdfc2f555, zero analysis errors/missing classes. - API baseline matches 478 public/protected types; an incompatible baseline is rejected.
- Independently compiled basic example (one test) and RAG consumer (five tests) pass.
- Primary artifact is byte-for-byte reproducible across clean local builds (SHA-256
b91178bc2c400674245720fe19e11cce1fce11607e88ea5cf15c339eb9e4cdd8); docs site assembles with valid local links. - Final candidate CI passes on Linux/Windows, including both independent RAG consumers and
release dry runs; CodeQL passes. Evidence for reviewed head
6b0be56e3f304ca3b844366a2984e1266f1836cc: CI, push CI, CodeQL. PR #90 merged this tree to main as89ba4d7932c84f1404714519e673f55273aca8bc. - Signed exact-commit tag and protected Central staging validate the prospective
1.0.0bundle; a maintainer reviews signatures, checksums, metadata and immutable coordinates before publication.
Publisher membership is separate from repository ownership. Previously the maven-central
environment required Tristan's approval; a read-only check on 2026-11-02 confirms that reviewer
still applies. Lukas's namespace access was requested using [email protected] but has not been
independently confirmed. A successful signed staging run is the authoritative credential check.
Use JDK 25 and the checked-in Maven wrapper. Supply -Dmaven.repo.local=... when relocating the
repository; also supply -Darchunitjava.performance.repository=... for the performance test.
./mvnw --batch-mode --no-transfer-progress -Prelease-candidate clean verify
pwsh -File scripts/check-public-api.ps1
./mvnw -Dtest=PerformanceBaselineTest -Darchunitjava.performance=true test
./mvnw -Prelease-candidate -DskipTests install
./mvnw -f examples/basic/pom.xml testRun the independent RAG repository with -Darchunitjava.version=1.0.0-SNAPSHOT. Build the JAR twice
from clean sources to compare SHA-256 values. Use scripts/build-pages.ps1 after generating site
Javadocs. CI additionally exercises disposable signing and a Central bundle against an unreachable
loopback endpoint. That tests bundle mechanics without publishing a package.