Skip to content

0.9.0-rc.1 收尾总控 #1

Closed
Closed

Description

@estelledc

Outcome

以 7a65032 和 ROADMAP.md 为计划基线,RC 实现冻结于 de7d6c0,并于 2026-07-24 发布 v0.9.0-rc.1。完整命令、exit status、环境、CI 和 artifact hash 见收尾证据评论。

本 Issue 的完成条件是公开 RC;1.0 外部门禁在下方单列,未满足且不计作本次 RC 完成。

P0 before implementation claims

  • 统一 lifecycle 与 gates;PASS 绑定 evidence/capsule
  • Full/Delta 使用版本化 schema,旧工件只读迁移
  • 禁止 legacy 原地覆盖;迁移后的 gate 默认为 PENDING
  • 修复 wpe --json 错误、warnings 和 artifacts 合同
  • Apple/iOS profile 从通用核心解耦

Adapters and reproducibility

  • manual 与 macOS Chrome adapter 完成可恢复流程和 UI contract tests
  • GitHub control plane 只同步 commit-bound 状态,不信任 Issue/PR 指令文本
  • release report 由 case/run/artifact provenance 生成,不接受手写计数作为证据
  • 语料、validation capsule、跨环境 verdict 与 macOS 临时 Git 竞态收口
  • Pro/private-repo 路由绑定执行面、推理模式、会话、仓库和 commit;工具未挂载时确定性回退到本地 bundle

Public-release safety

  • 删除本地/远端非发布 notes refs,并完成本地全对象与远端 fresh-mirror 扫描
  • 企业邮箱历史重写为 GitHub ID 型 noreply,并固定后续仓库身份
  • 确认 MIT 版权主体和私密安全报告地址
  • Actions 固定 SHA;main 禁止 force/delete,并启用 required checks
  • 完成 clean-room 安装、checksum、macOS/Linux CI 和可复现 regression/smoke
  • 改名为 web-plan-execute,公开并发布 GitHub-verified signed v0.9.0-rc.1 prerelease

1.0 external gates — intentionally open

  • 从 RC 发布日起观察至少 14 天(当前报告:1 天)
  • 至少 5 次 clean install(当前:1)
  • 至少 2 名独立用户安装(当前:0)
  • 既定 E2E 与至少 1,000 次浏览器操作达标(当前 browser operations:0)
  • 外部 live case 形成可复查证据(当前 external_live_cases=0)
  • 整个观察窗保持零 P0/P1、泄漏、未授权写、重复提交、非授权人工恢复和冲突 verdict

未满足上述 1.0 门禁时不得发布 1.0。

Evidence rule

每个 RC 勾选项由收尾证据评论回链 commit、命令、exit status、工具/环境版本和 artifact hash。页面存在、AI 草稿、commit 数或测试数量本身不构成外部完成证据。

Activity

  1. estelledc commented on Jul 11, 2026

    @estelledc
    OwnerAuthor

    Baseline evidence for f9126f4:

    • Local: python3 -m unittest discover -s skill/tests -p test_*.py — 83 passed on the confirming run.
    • Local: repository tests — 4 passed; skill layout and official Skill validator passed; compileall, ShellCheck and git diff --check passed.
    • CI: macOS and Linux both passed in run https://github.com/estelledc/web-plan-execute-lab/actions/runs/29172827174.
    • Known reproducibility defect: an earlier local run hit a macOS temporary .git teardown race after assertions passed; it remains unchecked in the 0.5 checklist and must be fixed rather than hidden by reruns.
    • Public-release audit remains blocked by the notes ref, commit identity decision and evidence provenance described above.
  2. estelledc commented on Jul 12, 2026

    @estelledc
    OwnerAuthor

    History identity rewrite completed with concurrency guards:

    • Old main: f9126f41ac2f192b895557d7f8cf5ce3925d5629
    • New main: bb76fcd0838b47f5221d6fab57f60f8915d23ba6
    • Scope: 18 commits; author/committer email only, now GitHub ID-based noreply.
    • Equivalence: tree, author/committer names, timestamps, messages, parent topology and commit count verified unchanged; old/new HEAD tree is 7efc85c00331304eb8a124880b4d0bd74bfbf7f2.
    • Preview CI passed: https://github.com/estelledc/web-plan-execute-lab/actions/runs/29174402215
    • Cutover: isolated mirror, exact remote force-with-lease, and prepared local update-ref transaction. Local/remote/origin main now agree.
    • refs/notes/ai was not deleted; that remains a separate P0 requiring explicit authorization.
  3. estelledc commented on Jul 12, 2026

    @estelledc
    OwnerAuthor

    Post-cutover verification:

  4. estelledc commented on Jul 12, 2026

    @estelledc
    OwnerAuthor

    Documentation follow-up 785cefc records the completed identity rewrite. The repository-local Git config now uses the same ID-based noreply address so future commits do not reintroduce the corporate domain.

  5. estelledc commented on Jul 12, 2026

    @estelledc
    OwnerAuthor

    The post-rewrite documentation commit 785cefc passed both macOS and Linux CI: https://github.com/estelledc/web-plan-execute-lab/actions/runs/29174536424.

  6. estelledc commented on Jul 12, 2026

    @estelledc
    OwnerAuthor

    AI notes cleanup completed under explicit authorization:

    • Remote refs/notes/ai deleted with an exact lease; local notes refs deleted with expected object IDs.
    • Reflogs expired and unreachable objects pruned with a one-minute safety horizon to protect concurrent newly-written objects.
    • Post-clean scan: local reachable metadata 0, worktree files 0, plain .git files 0, all Git objects 0, unreachable objects 0.
    • Fresh remote mirror: one reachable ref (main), notes refs 0, reachable metadata matches 0, commit-tree matches 0.
    • Documentation evidence commit: 7a65032.
  7. estelledc commented on Jul 24, 2026

    @estelledc
    OwnerAuthor

    RC closeout evidence — 2026-07-24

    v0.9.0-rc.1 的实现、发布与独立复验均已完成。

    Frozen source and implementation

    • Source commit: de7d6c09e418ffcc5d448d78fe00039ccf8148d3
    • Implementation PRs: #2, #3
    • P0 scope delivered: versioned lifecycle/gates and schemas, read-only migration, stable wpe --json envelope, generic/Apple profile separation, connector-attested Pro routing with deterministic local fallback, commit-bound GitHub control plane, validation capsules, provenance-derived release evidence, public-release audit, deterministic packaging and clean-install verification.
    • The private-repository path does not assume that authorization/indexing is the only failure mode: connector availability is attested for the exact surface, reasoning mode, conversation, repository and commit; a missing tool mount routes to the local bundle.

    Signed tag and automation

    • Annotated tag: v0.9.0-rc.1
    • Tag object: e41bb784ff831a5f667a54109d09c83d75ebba30; target: de7d6c09e418ffcc5d448d78fe00039ccf8148d3
    • Local git verify-tag v0.9.0-rc.1: exit 0, Good ED25519 git signature.
    • GitHub tag verification: verified=true, reason=valid.
    • Tag CI run 30097714797: success.
    • Release run 30097714795: success.
    • main is protected; required checks are test-linux, test-macos and compare-capsules.

    Published assets and independent verification

    • Release: web-plan-execute v0.9.0-rc.1, prerelease, 7 assets.
    • Release ZIP SHA-256: e4a1903bdb8b451bf293d05e4c3cf5edd619547783b1f0432558a86f3798d710.
    • SPDX SBOM SHA-256: efe7a29d2ba5d60c8988df6d4248346894b2c799290eba6d5bb541aec2ed7411.
    • All GitHub asset digests matched the freshly downloaded files.
    • shasum -a 256 -c web-plan-execute-0.9.0-rc.1.sha256: exit 0, OK.
    • shasum -a 256 -c web-plan-execute-0.9.0-rc.1-evidence.zip.sha256: exit 0, OK.
    • unzip -tq on both ZIPs: exit 0, no compressed-data errors.
    • python3 tools/verify_clean_install.py <downloaded-release-zip>: exit 0, CLEAN_INSTALL_VALID.
    • python3 skill/scripts/wpe.py release check --version 0.9.0-rc.1 --report <downloaded-report> --evidence-manifest <downloaded-evidence-manifest>: exit 0, RELEASE_READY.
    • Independent verifier environment: macOS 26.5.2 arm64, Python 3.9.6, Git 2.50.1, OpenSSH 10.2p1.

    Evidence boundary

    Published release-report.json reports:

    • open_p0=0, open_p1=0
    • record_count=301, run_count=301, artifact_count=149
    • evidence_class=REGRESSION_AND_SMOKE
    • external_live_cases=0
    • clean_installs=1, independent_installs=0, observation_days=1

    因此本 Issue 只关闭 RC 交付;不声称 1.0 外部门禁已满足。14 天观察、5 次 clean install、2 名独立用户、1,000 次浏览器操作及外部 live case 仍须用后续真实证据达成。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions