Skip to content

feat(authoring): prepare guarded paired native promotion - #203

Draft
777genius wants to merge 6 commits into
feat/authoring-public-packed-prooffrom
feat/authoring-native-promotion
Draft

feat(authoring): prepare guarded paired native promotion#203
777genius wants to merge 6 commits into
feat/authoring-public-packed-prooffrom
feat/authoring-native-promotion

Conversation

@777genius

@777genius 777genius commented Sep 8, 2026

Copy link
Copy Markdown
Owner

Paired native preparation has no authenticated promotion route. This introduces a fixed promotion record, artifact and verifier orchestration, explicit protected workflow routing, and release reconciliation while preserving the existing preparation and legacy routes.

Promotion deliberately rejects all currently unsupported native evidence contracts before signing or publication. This PR is preparation for completing the native release flow; it does not establish authentic signing, complete native qualification, public npm publication, or completion of the authoring plan. The pinned gh verifier/output mapping still needs compatibility confirmation with authentic verifier output. No fixture JSON is accepted as that evidence.

Stacked on #199 at cdf0aa4, with the accepted preparation workflow seams from #196 composed as a dependency. Current head: 51a9959. Measured diff against #199: five files, 1,694 changed lines.

Writer validation after R3/R4: 134 Node tests passed. Root verified the exact two-file patch, source hashes and ownership before committing. Completed public pairs can now reconcile without mutations; every pre-write read checks expected pair presence/state alongside identity and assets. Independent hosted high-effort review ACCEPT at this exact successor: 134 tests and 25 independent probes passed. All current-head CI checks passed. The PR remains draft. Read-only worker Git metadata required a mechanical coordinator commit under the repository owner's identity.

Remaining before production enablement: accepted frozen-pair native/public terminal contracts, authentic verifier compatibility and signatures, both native release readbacks, and the public launcher/release gates. Useful legacy YAML capabilities remain preserved.

Refs #196, #199

Project a verified frozen native pair into explicit product manifests and isolate read-only preparation from publication. Preserve historical producers and reject major-two use of the legacy producer.

Refs #165
Refs #169
Refs #196, #199. Preserve accepted native preparation and public acquisition before implementing authenticated promotion.
Refs #196, #199. Preserve read-only preparation and reject promotion until accepted native evidence contracts are integrated. Authentic signing and release qualification remain unproved.
@coderabbitai

coderabbitai Bot commented Sep 8, 2026

Copy link
Copy Markdown

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Refs #203, #196, #199. Preserve native admission rejection; authentic signing and release qualification remain unproved.
Refs #203, #196, #199. Preserve native admission rejection; authentic signing and release qualification remain unproved.
777genius added a commit that referenced this pull request Sep 8, 2026
Refs #208, #203, #204. Keep publisher implementation in its separate bounded delivery.
777genius added a commit that referenced this pull request Sep 8, 2026
Clarify authenticated frozen-input provenance, immutable npm staging, execution qualification, and distribution readback order. Preserve all native, public installer, packaging, and release gates.

Refs #203
Refs #204
Refs #208
777genius added a commit that referenced this pull request Sep 8, 2026
Refs #210, #203, #208. Keep production observation and native admission fail-closed pending actual execution and independent review.
777genius added a commit that referenced this pull request Sep 8, 2026
Refs #210, #203, #208. Keep production observation and native admission fail-closed pending actual execution and independent review.
777genius added a commit that referenced this pull request Sep 8, 2026
Refs #210, #203, #208. Keep production observation and native admission fail-closed pending actual execution and independent review.
777genius added a commit that referenced this pull request Sep 8, 2026
Refs #210, #203, #208. Keep production observation and native admission fail-closed pending actual execution and independent review.
777genius added a commit that referenced this pull request Sep 8, 2026
Refs #210, #203, #208. Keep production observation and native admission fail-closed pending actual execution and independent review.
777genius added a commit that referenced this pull request Sep 9, 2026
Refs #219, #220, #223, #225, #227, #228, #216, #210, #203, #208. Owner-requested consolidation of independently reviewed source checkpoints into the existing parent feature branch. All 10 required CI checks passed at 47e376f. N2 independent acceptance, genuine E2E and release qualification remain open. No main activation or release publication.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant