From 49ea3667c67edf6dfddd90f07804b0b4f539c545 Mon Sep 17 00:00:00 2001 From: "Dylan Mordaunt (ISLHD)" Date: Sat, 1 Aug 2026 14:32:44 +1000 Subject: [PATCH 1/3] fix(ci): update release action to Node 24 --- .github/workflows/release.yml | 2 +- test/workflow-integrity.test.js | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 94be89b..1238fba 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -81,7 +81,7 @@ jobs: - name: Publish GitHub release if: startsWith(github.ref, 'refs/tags/') - uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2 + uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 with: files: | authentext-skill-artifacts.tar.gz diff --git a/test/workflow-integrity.test.js b/test/workflow-integrity.test.js index 78ecf82..72b829b 100644 --- a/test/workflow-integrity.test.js +++ b/test/workflow-integrity.test.js @@ -114,6 +114,12 @@ test('CodeQL excludes only frozen legacy and experimental trees', () => { test('release workflow packages only maintained, existing paths', () => { const source = fs.readFileSync(path.join(WORKFLOW_DIR, 'release.yml'), 'utf8'); + assert.match( + source, + /softprops\/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228\s+# v3\.0\.2/, + 'release publication must use the current Node.js 24 action release' + ); + for (const requiredPath of [ 'SKILL.md', 'SKILL_PROFESSIONAL.md', From 423928e7f31701e23116d1242252448225267db1 Mon Sep 17 00:00:00 2001 From: "Dylan Mordaunt (ISLHD)" Date: Sat, 1 Aug 2026 14:36:46 +1000 Subject: [PATCH 2/3] fix(conductor): validate archived track paths --- .../design.md | 0 .../index.md | 0 .../metadata.json | 0 .../phase1-verification.md | 0 .../phase2-verification.md | 0 .../phase3-verification.md | 0 .../phase4-verification.md | 0 .../phase5-verification.md | 0 .../phase6-verification.md | 0 .../plan.md | 0 .../requirements.md | 0 .../spec.md | 0 ...{release-candidate-3.2.0.md => release-3.2.0.md} | 0 scripts/validate-conductor.js | 13 ++++++++----- test/conductor-handshake.test.js | 2 +- 15 files changed, 9 insertions(+), 6 deletions(-) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/design.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/index.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/metadata.json (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/phase1-verification.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/phase2-verification.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/phase3-verification.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/phase4-verification.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/phase5-verification.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/plan.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/requirements.md (100%) rename conductor/tracks/{ => archive}/bleeding-edge-agent-skills-conductor_20260731/spec.md (100%) rename docs/{release-candidate-3.2.0.md => release-3.2.0.md} (100%) diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/design.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/design.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/design.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/design.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/index.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/index.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/metadata.json b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/metadata.json similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/metadata.json rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/metadata.json diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase1-verification.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase1-verification.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase1-verification.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase1-verification.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase2-verification.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase2-verification.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase2-verification.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase2-verification.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase3-verification.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase3-verification.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase3-verification.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase3-verification.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase4-verification.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase4-verification.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase4-verification.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase4-verification.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase5-verification.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase5-verification.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase5-verification.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase5-verification.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/requirements.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/requirements.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/requirements.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/requirements.md diff --git a/conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/spec.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/spec.md similarity index 100% rename from conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/spec.md rename to conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/spec.md diff --git a/docs/release-candidate-3.2.0.md b/docs/release-3.2.0.md similarity index 100% rename from docs/release-candidate-3.2.0.md rename to docs/release-3.2.0.md diff --git a/scripts/validate-conductor.js b/scripts/validate-conductor.js index 88b3a5f..5e252f6 100644 --- a/scripts/validate-conductor.js +++ b/scripts/validate-conductor.js @@ -47,13 +47,16 @@ for (const track of tracks) { } } -const active = tracks.find( +const bleedingEdgeTrack = tracks.find( (track) => track.track_id === 'bleeding-edge-agent-skills-conductor_20260731' ); -if (!active) errors.push('active bleeding-edge track is absent from github mapping'); -for (const artifact of ['requirements.md', 'design.md', 'plan.md', 'spec.md']) { - const relative = `conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/${artifact}`; - if (!fs.existsSync(path.join(root, relative))) errors.push(`missing ${relative}`); +if (!bleedingEdgeTrack) { + errors.push('bleeding-edge track is absent from github mapping'); +} else { + for (const artifact of ['requirements.md', 'design.md', 'plan.md', 'spec.md']) { + const relative = path.posix.join(bleedingEdgeTrack.path, artifact); + if (!fs.existsSync(path.join(root, relative))) errors.push(`missing ${relative}`); + } } if (errors.length) { diff --git a/test/conductor-handshake.test.js b/test/conductor-handshake.test.js index 595eb64..ba44e08 100644 --- a/test/conductor-handshake.test.js +++ b/test/conductor-handshake.test.js @@ -3,7 +3,7 @@ import assert from 'node:assert/strict'; import path from 'node:path'; import { spawnSync } from 'node:child_process'; -test('repaired Conductor handshake and active track artifacts validate', () => { +test('Conductor handshake and mapped current or archived track artifacts validate', () => { const validator = path.join(process.cwd(), 'scripts', 'validate-conductor.js'); const result = spawnSync(process.execPath, [validator], { encoding: 'utf8' }); assert.equal(result.status, 0, result.stderr); From 7ba1e54d72b4d73f4544313839f73180a87aa8e8 Mon Sep 17 00:00:00 2001 From: "Dylan Mordaunt (ISLHD)" Date: Sat, 1 Aug 2026 14:38:17 +1000 Subject: [PATCH 3/3] conductor(archive): complete bleeding-edge alignment track --- conductor/github-mapping.json | 26 +++++----- conductor/index.md | 2 +- conductor/roadmap.md | 2 +- conductor/tracks.md | 16 +++--- .../index.md | 14 ++++-- .../metadata.json | 11 ++++- .../phase6-verification.md | 23 ++++++--- .../plan.md | 14 ++++-- .../review.md | 49 +++++++++++++++++++ docs/release-3.2.0.md | 20 +++++--- 10 files changed, 130 insertions(+), 47 deletions(-) create mode 100644 conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/review.md diff --git a/conductor/github-mapping.json b/conductor/github-mapping.json index 95e98fd..47093c6 100644 --- a/conductor/github-mapping.json +++ b/conductor/github-mapping.json @@ -11,8 +11,8 @@ "tracks": 30, "phases": 123, "repository_issues": 162, - "open_tracks": 1, - "historical_tracks": 29 + "open_tracks": 0, + "historical_tracks": 30 }, "verification": { "verified_at": "2026-07-31", @@ -26,22 +26,22 @@ { "track_id": "bleeding-edge-agent-skills-conductor_20260731", "title": "Bleeding-Edge Agent Skills and Conductor Alignment", - "path": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731", + "path": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731", "priority": "P0", - "historical": false, - "metadata_status": "new", + "historical": true, + "metadata_status": "archived", "parent_issue": { "number": 66, "node_id": "I_kwDORAMgA88AAAABK6xpRg", "url": "https://github.com/edithatogo/authentext/issues/66", - "state": "open" + "state": "closed" }, "phases": [ { "phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase1", "number": 1, "title": "Portable contract and generated frontmatter", - "source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md", + "source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md", "reconstructed": false, "issue": { "number": 67, @@ -54,7 +54,7 @@ "phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase2", "number": 2, "title": "Deterministic validation, tests, and CI", - "source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md", + "source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md", "reconstructed": false, "issue": { "number": 68, @@ -67,7 +67,7 @@ "phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase3", "number": 3, "title": "Progressive disclosure and behavioral evaluation", - "source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md", + "source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md", "reconstructed": false, "issue": { "number": 69, @@ -80,7 +80,7 @@ "phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase4", "number": 4, "title": "Identity, metadata, and host layers", - "source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md", + "source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md", "reconstructed": false, "issue": { "number": 70, @@ -93,7 +93,7 @@ "phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase5", "number": 5, "title": "Conductor, GitHub, and experimental operations", - "source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md", + "source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md", "reconstructed": false, "issue": { "number": 71, @@ -106,13 +106,13 @@ "phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase6", "number": 6, "title": "Release-candidate verification and governed handoff", - "source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md", + "source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md", "reconstructed": false, "issue": { "number": 72, "node_id": "I_kwDORAMgA88AAAABK6xv5g", "url": "https://github.com/edithatogo/authentext/issues/72", - "state": "open" + "state": "closed" } } ] diff --git a/conductor/index.md b/conductor/index.md index 02c56d1..f98cd07 100644 --- a/conductor/index.md +++ b/conductor/index.md @@ -19,7 +19,7 @@ than guessing paths. - [Roadmap](./roadmap.md) - [Tracks Registry](./tracks.md) -- [Active Bleeding-Edge Track](./tracks/bleeding-edge-agent-skills-conductor_20260731/index.md) +- [Released Bleeding-Edge Track](./tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md) - [GitHub Issue Mapping](./github-mapping.json) ## Capability Contract diff --git a/conductor/roadmap.md b/conductor/roadmap.md index 5747832..6e0ef7b 100644 --- a/conductor/roadmap.md +++ b/conductor/roadmap.md @@ -19,7 +19,7 @@ publication, or release. ## Next: standards-compliant portable core Primary track: -[`bleeding-edge-agent-skills-conductor_20260731`](./tracks/bleeding-edge-agent-skills-conductor_20260731/index.md), +[`bleeding-edge-agent-skills-conductor_20260731`](./tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md), mirrored by [GitHub issue #66](https://github.com/edithatogo/authentext/issues/66). - Repair generated frontmatter and portable metadata. diff --git a/conductor/tracks.md b/conductor/tracks.md index a879dfe..291ad38 100644 --- a/conductor/tracks.md +++ b/conductor/tracks.md @@ -8,12 +8,7 @@ This file tracks all major tracks for the project. Each track has its own detail ## Active Tracks -- [~] **bleeding-edge-agent-skills-conductor_20260731** (P0) - - Standards-compliant portable skill, behavioral evaluation, current - Conductor protocol, native GitHub phase hierarchy, and governed - experimental channels. See - [`tracks/bleeding-edge-agent-skills-conductor_20260731/`](./tracks/bleeding-edge-agent-skills-conductor_20260731/index.md) - and [GitHub #66](https://github.com/edithatogo/authentext/issues/66). +No active tracks. --- @@ -27,10 +22,15 @@ This file tracks all major tracks for the project. Each track has its own detail ## Archived Tracks -**Total archived track directories:** 25 (24 legacy + `modernization_20260610`) +**Total archived track directories:** 26 **Latest archives:** +- [x] **bleeding-edge-agent-skills-conductor_20260731** - Portable Agent Skills + conformance, behavioral evaluation, current Conductor/GitHub control plane, + governed experimental layers, and release `v3.2.0`. See + [`tracks/archive/bleeding-edge-agent-skills-conductor_20260731/`](./tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md) + and [GitHub #66](https://github.com/edithatogo/authentext/issues/66). - modernization_20260610 (Bleeding-edge modernization: upstream v2.8.0, sourceright extraction, Agent Skills migration) - v4-architecture_20260415 (Modular V4 Architecture & Ecosystem Overhaul) - upstream-pr-adoption_20260304 (Patterns 28-30 adopted) @@ -193,4 +193,4 @@ Live self-improvement outputs (not a track): `conductor/self-improvement/` Last updated: 2026-07-31. -Active P0 track: standards-compliant Agent Skills and Conductor alignment. +No active track. Latest release: `v3.2.0`. diff --git a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md index c0df491..13f016a 100644 --- a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md +++ b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md @@ -2,7 +2,7 @@ - **Track ID:** `bleeding-edge-agent-skills-conductor_20260731` - **Priority:** P0 -- **Status:** Active +- **Status:** Archived — completed and released as `v3.2.0` on 2026-08-01 - **GitHub Project:** [Authentext Conductor Roadmap](https://github.com/users/edithatogo/projects/36) - **Parent issue:** [#66](https://github.com/edithatogo/authentext/issues/66) @@ -16,7 +16,11 @@ - [Phase 1 Verification](./phase1-verification.md) - [Phase 2 Verification](./phase2-verification.md) - [Phase 3 Verification](./phase3-verification.md) -- [Repository Roadmap](../../roadmap.md) +- [Phase 4 Verification](./phase4-verification.md) +- [Phase 5 Verification](./phase5-verification.md) +- [Phase 6 Verification](./phase6-verification.md) +- [Formal Review](./review.md) +- [Repository Roadmap](../../../roadmap.md) ## Outcome @@ -28,9 +32,9 @@ coordination mirror. ## Evidence boundary -Creating this track and its GitHub hierarchy does not establish implementation, -passing CI, registry acceptance, publication, or release. Those states require -the evidence and explicit gates in the plan. +The repository implementation and GitHub Release are complete. npm publication +and separate skill-registry submission were outside the authorized release +scope and did not occur. See the Phase 6 receipt for exact hosted evidence. ## Native phase subissues diff --git a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/metadata.json b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/metadata.json index c84f4ab..f499512 100644 --- a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/metadata.json +++ b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/metadata.json @@ -4,10 +4,17 @@ "description": "Make Authentext a portable, standards-compliant, evidence-tested Agent Skill while aligning Conductor with current upstream Agent Skills protocols, native GitHub subissues, and governed experimental channels.", "type": "modernization", "priority": "P0", - "status": "in_progress", + "status": "archived", "created_at": "2026-07-31", "updated_at": "2026-08-01", - "current_phase": "Phase 6: Release-candidate verification and governed handoff", + "current_phase": "Complete", + "completed_at": "2026-08-01", + "release": { + "tag": "v3.2.0", + "target": "58d8ad1402d6383092dfc9425b82d0ff34e63fc3", + "workflow_run": 30684012674, + "url": "https://github.com/edithatogo/authentext/releases/tag/v3.2.0" + }, "depends_on": [], "parallel_safe": false, "moscow": { diff --git a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md index 84f0177..e429d04 100644 --- a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md +++ b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/phase6-verification.md @@ -53,11 +53,22 @@ CodeQL alerts 13 and 14 report their most recent instances as `fixed`. Their top-level records remained open while GitHub processed the default-branch state transition. -## Remaining gates +## Published release -- Public tag, release, and publication remain explicitly unapproved. Repository - integration is complete through merged PRs #218 and #220. -- The publish preview reports no active tag-protection ruleset. +- The user explicitly authorized the supported release scope in direct response + to the Phase 6 authorization question. +- Annotated tag `v3.2.0` targets verified `main` commit `58d8ad1`. +- Release run `30684012674` passed build, validation, packaging, artifact-surface + verification, artifact upload, and GitHub Release publication. +- [Authentext 3.2.0](https://github.com/edithatogo/authentext/releases/tag/v3.2.0) + is public with ZIP and TAR.GZ assets and GitHub-recorded SHA-256 digests. +- npm publication and separate skill-registry submission were not authorized + and did not occur; the npm package remains private. -Release notes are prepared at `docs/release-candidate-3.2.0.md`. This receipt is -not a release authorization. +The successful release run warned that the pinned release action declared +deprecated Node.js 20. Formal review upgraded it to upstream v3.0.2 at immutable +commit `3d0d9888cb7fd7b750713d6e236d1fcb99157228`, which uses Node.js 24. The +regression failed on the old pin and passed with the new pin; commit `49ea366` +also passed the full 73-test and integration gate. + +Final release notes are recorded at `docs/release-3.2.0.md`. diff --git a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md index a49a603..1e2d6ca 100644 --- a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md +++ b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md @@ -89,7 +89,7 @@ GitHub subissue: - [x] Add current/history/Must/experimental Project views if supported. (C-005) -## Phase 6: Release-candidate verification and governed handoff +## Phase 6: Release-candidate verification and governed handoff [checkpoint: 423928e] GitHub subissue: [#72](https://github.com/edithatogo/authentext/issues/72). @@ -103,8 +103,13 @@ GitHub subissue: - [x] Record remaining external, experimental, and human gates. - [x] Prepare release notes without tagging, releasing, or publishing. (M-017, W-006) -- [ ] Obtain separate explicit approval before any public release action. - (M-017) +- [x] Obtain separate explicit approval before any public release action and + publish the supported GitHub release. (M-017) [tag: v3.2.0; run: + 30684012674] +- [x] Apply formal-review fix for the deprecated release-action runtime. + [commit: 49ea366] +- [x] Generalize Conductor validation across active and archived mapped paths. + [commit: 423928e] ## Handoff artifacts @@ -112,4 +117,5 @@ GitHub subissue: - Trigger and output evaluation corpus plus machine-readable results. - Conductor/GitHub reconciliation command and mapping receipt. - Host-layer schemas and validation evidence. -- Release-candidate verification receipt and explicit remaining gates. +- Release verification receipt, published GitHub artifacts, and explicit + boundary excluding npm or skill-registry publication. diff --git a/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/review.md b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/review.md new file mode 100644 index 0000000..4bfc449 --- /dev/null +++ b/conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/review.md @@ -0,0 +1,49 @@ +# Review Report: Bleeding-Edge Agent Skills and Conductor Alignment + +Reviewed: 2026-08-01 + +## Summary + +The track satisfies its portable-skill, evaluation, Conductor, GitHub, and +governed-release requirements after one release-runtime maintenance finding was +fixed. + +## Verification checks + +- **Plan compliance:** Yes — every phase has repository and hosted evidence. +- **Style compliance:** Pass — repository style guides and configured linters + pass. +- **New tests:** Yes — portable contract, routing, evaluation, reconciliation, + host overlay, workflow, sync, literal-preservation, and release-action cases. +- **Test coverage:** Yes for the repository-defined behavioral and integration + gates; no unsupported numeric coverage claim is made. +- **Test results:** Passed — 73 aggregate tests, isolated test files, sync, + validation, lint, type, formatting, and integration checks. +- **Security:** Passed — CodeQL and the blocking alert gate passed on the final + integrated revision; alerts 13 and 14 have fixed latest instances. + +## Resolved findings + +### Medium: Release action declared deprecated Node.js 20 + +- **File:** `.github/workflows/release.yml` +- **Context:** Release run `30684012674` succeeded but GitHub forced the v2 + action from Node.js 20 to Node.js 24. +- **Resolution:** Updated to upstream v3.0.2 commit + `3d0d9888cb7fd7b750713d6e236d1fcb99157228`, which declares Node.js 24, and + added a regression assertion in `test/workflow-integrity.test.js`. +- **Evidence:** Red test on the prior pin; green full gate at commit `49ea366`. + +### Medium: Conductor validator hard-coded the former active track path + +- **File:** `scripts/validate-conductor.js` +- **Context:** A correct archive move failed validation because the validator + ignored the authoritative path already stored in `github-mapping.json`. +- **Resolution:** Resolve required track artifacts from the mapped path so both + active and archived records validate without compatibility shims. +- **Evidence:** The existing handshake test failed after the archive move and + passed after the validator was generalized. + +## Decision + +Approved for archive. No Critical, High, or unresolved Medium findings remain. diff --git a/docs/release-3.2.0.md b/docs/release-3.2.0.md index baf5f8f..cb092fd 100644 --- a/docs/release-3.2.0.md +++ b/docs/release-3.2.0.md @@ -1,8 +1,8 @@ -# Authentext 3.2.0 release candidate +# Authentext 3.2.0 release Prepared: 2026-08-01 -This candidate makes Authentext a single portable Agent Skill with generated +This release makes Authentext a single portable Agent Skill with generated progressive-disclosure references, deterministic validation, behavioral evaluation receipts, and an optional governed OpenAI host overlay. @@ -20,7 +20,7 @@ evaluation receipts, and an optional governed OpenAI host overlay. - Executable Conductor handshake and dry-run-first GitHub reconciliation for 30 tracks, 123 phases, Project membership, native subissues, and state receipts. -## Candidate verification +## Verification - Sync, repository docs, host overlays, and Conductor validation: passed. - Lint, Vale, ESLint, TypeScript, and Prettier: passed. @@ -31,7 +31,7 @@ evaluation receipts, and an optional governed OpenAI host overlay. - Live Conductor/GitHub reconciliation: clean for all 153 mapped nodes and 123 native parent/phase relationships. -## Explicit gates +## Release evidence - PR #218 verified the candidate across CI, CodeQL, workflow lint, portable validation, publish preview, behavioral evaluations, and @@ -41,6 +41,12 @@ evaluation receipts, and an optional governed OpenAI host overlay. - The exact final `main` revision passed CI (`30683241535`), skill distribution validation (`30683241550`), workflow lint (`30683241565`), and CodeQL with its blocking-alert gate (`30683241551`). -- No tag, GitHub release, npm publication, or skill publication has occurred. -- Public release actions require separate explicit approval. -- GitHub recommends an active tag-protection ruleset before immutable releases. +- Tag `v3.2.0` targets verified commit `58d8ad1`. +- Release workflow run `30684012674` passed and published the ZIP and TAR.GZ + assets with GitHub-recorded SHA-256 digests. +- [Authentext 3.2.0](https://github.com/edithatogo/authentext/releases/tag/v3.2.0) + was published on 2026-08-01. +- npm publication and separate skill-registry submission did not occur; the npm + package remains private. +- Formal review upgraded the release action to Node.js 24-based v3.0.2 for + future releases after the successful v3.2.0 run emitted a deprecation warning.