Skip to content

docs: mark mysql 0.2.1 public #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bobisme merged 1 commit into from
Sep 3, 2026
Merged

docs: mark mysql 0.2.1 public #16

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,7 +88,7 @@ one GitHub OIDC/Sigstore package attestation, and publishes an immutable tag and
release. It has no long-lived signing secret and never resumes or replaces a
partial version.

Version 0.2.0 is the current public stable release. It includes the additive
Version 0.2.0 is the preceding public stable release. It includes the additive
`sigil:host/[email protected]` contract, SingleStore-compatible
`mysql_native_password`, and the typed SQL 0.2 session contract. It requires
Sigil 0.33.1 or newer and is available as an immutable keyless-provenance
Expand All @@ -97,17 +97,17 @@ Its deterministic fixtures cover the exact SingleStoreDB Dev 0.2.35 greeting,
the existing MySQL 8.4 `caching_sha2_password` path, repeated calls on one
session, typed boundary values, exact command metadata, and fail-closed limits.

Version 0.2.1 is the accepted stable source candidate. It adds one bounded auth
Version 0.2.1 is the current public stable release. It adds one bounded auth
switch plus complete cold-cache `caching_sha2_password` authentication for
stock MySQL 8, including typed 1045/28000 failures for wrong credentials. It
requires Sigil 0.33.1 or newer and an entropy grant only when the unencrypted
cold-cache exchange is possible. Do not add `[email protected]` to a project lock
until the separately authorized stable release is published and verified.
Its fixtures cover the exact SingleStoreDB Dev 0.2.35 greeting, MySQL 8.0.29
cold-cache exchange is possible. Add the exact immutable identity with
`sigil plugin add [email protected]`. Its fixtures cover the exact SingleStoreDB Dev
0.2.35 greeting, MySQL 8.0.29
fast, TLS-full, RSA-full, and auth-switch paths, repeated calls on one session,
typed boundary values, exact command metadata, and fail-closed limits.

| Public 0.2.0 | Accepted 0.2.1 stable source candidate |
| Public 0.2.0 | Public 0.2.1 |
|---|---|
| SingleStore native auth and warm-cache MySQL 8 auth | also handles `mysql_native_password` auth switches and cold `caching_sha2_password` caches |
| unsupported on cold-cache and switched login failures | returns the server's typed authentication error, including 1045/28000 |
Expand Down
14 changes: 7 additions & 7 deletions conformance/live/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
# Pinned live acceptance

This gate proves the accepted MySQL 0.2.1 stable source through Sigil's real
This gate proves the public MySQL 0.2.1 release through Sigil's real
plugin store, lock, component host, and Lua resource bridge. It uses a
rootless Podman or Docker runner on Linux and never publishes an artifact.

## Exact inputs

- Candidate commit:
`cc4dab15d66b760d507fb3214d0b75bb6618a9b6`
- Release commit:
`f62d41387bd27c671f734a4ba6171d619f810614`
- `plugin.wasm` SHA-256:
`968704493a62e07d8011bbbe4ce2d8f178b30dc0b1bc1e379c2a2e41263d9125`
- `plugin.wasm` BLAKE3:
Expand All @@ -21,7 +21,7 @@ rootless Podman or Docker runner on Linux and never publishes an artifact.
- MySQL 8.0.29 Linux/amd64 manifest:
`docker.io/library/mysql@sha256:44f98f4dd825a945d2a6a4b7b2f14127b5d07c5aaa07d9d232c2b58936fb76dc`

The script rejects changed candidate digests before starting either service.
The script rejects changed release digests before starting either service.
It runs SingleStore with four CPUs because that image's free license rejects a
larger visible CPU count.

Expand All @@ -48,10 +48,10 @@ for it in the exit trap. `KEEP_LIVE_SCRATCH=1` retains the temporary Sigil
project for diagnosis; it does not retain service state.

Sigil 0.33.0 already contains the SQL 0.2 host contract but predates this
candidate's declared 0.33.1 floor. The harness lowers that floor only in a
release's declared 0.33.1 floor. The harness lowers that floor only in a
scratch manifest when testing 0.33.0. SemVer excludes prereleases from a stable
lower-bound comparator, so the harness similarly pins a supplied prerelease
binary's exact version in scratch. The candidate component and package are
binary's exact version in scratch. The release component and package are
hashed before either operation, and neither checked-in artifact is changed.

## Matrix
Expand Down Expand Up @@ -88,7 +88,7 @@ assertion, never partial row output.

Each run writes ignored evidence under `target/live-acceptance/run.*`, including
image pull identities, raw handshake probes, auth-plugin evidence, JSON
reports, hostile-peer traces, service logs, candidate identities, elapsed
reports, hostile-peer traces, service logs, release identities, elapsed
times, the one-line `cleanup-count.txt`, container and volume inventories
before and after teardown, and `teardown.txt`. A successful teardown file ends
with:
Expand Down