Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ jobs:

- name: Publish GitHub release
if: startsWith(github.ref, 'refs/tags/')
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
with:
files: |
authentext-skill-artifacts.tar.gz
Expand Down
26 changes: 13 additions & 13 deletions conductor/github-mapping.json
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,8 @@
"tracks": 30,
"phases": 123,
"repository_issues": 162,
"open_tracks": 1,
"historical_tracks": 29
"open_tracks": 0,
"historical_tracks": 30
},
"verification": {
"verified_at": "2026-07-31",
Expand All @@ -26,22 +26,22 @@
{
"track_id": "bleeding-edge-agent-skills-conductor_20260731",
"title": "Bleeding-Edge Agent Skills and Conductor Alignment",
"path": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731",
"path": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731",
"priority": "P0",
"historical": false,
"metadata_status": "new",
"historical": true,
"metadata_status": "archived",
"parent_issue": {
"number": 66,
"node_id": "I_kwDORAMgA88AAAABK6xpRg",
"url": "https://github.com/edithatogo/authentext/issues/66",
"state": "open"
"state": "closed"
},
"phases": [
{
"phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase1",
"number": 1,
"title": "Portable contract and generated frontmatter",
"source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"reconstructed": false,
"issue": {
"number": 67,
Expand All @@ -54,7 +54,7 @@
"phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase2",
"number": 2,
"title": "Deterministic validation, tests, and CI",
"source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"reconstructed": false,
"issue": {
"number": 68,
Expand All @@ -67,7 +67,7 @@
"phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase3",
"number": 3,
"title": "Progressive disclosure and behavioral evaluation",
"source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"reconstructed": false,
"issue": {
"number": 69,
Expand All @@ -80,7 +80,7 @@
"phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase4",
"number": 4,
"title": "Identity, metadata, and host layers",
"source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"reconstructed": false,
"issue": {
"number": 70,
Expand All @@ -93,7 +93,7 @@
"phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase5",
"number": 5,
"title": "Conductor, GitHub, and experimental operations",
"source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"reconstructed": false,
"issue": {
"number": 71,
Expand All @@ -106,13 +106,13 @@
"phase_id": "bleeding-edge-agent-skills-conductor_20260731.phase6",
"number": 6,
"title": "Release-candidate verification and governed handoff",
"source": "conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"source": "conductor/tracks/archive/bleeding-edge-agent-skills-conductor_20260731/plan.md",
"reconstructed": false,
"issue": {
"number": 72,
"node_id": "I_kwDORAMgA88AAAABK6xv5g",
"url": "https://github.com/edithatogo/authentext/issues/72",
"state": "open"
"state": "closed"
}
}
]
Expand Down
2 changes: 1 addition & 1 deletion conductor/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ than guessing paths.

- [Roadmap](./roadmap.md)
- [Tracks Registry](./tracks.md)
- [Active Bleeding-Edge Track](./tracks/bleeding-edge-agent-skills-conductor_20260731/index.md)
- [Released Bleeding-Edge Track](./tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md)
- [GitHub Issue Mapping](./github-mapping.json)

## Capability Contract
Expand Down
2 changes: 1 addition & 1 deletion conductor/roadmap.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ publication, or release.
## Next: standards-compliant portable core

Primary track:
[`bleeding-edge-agent-skills-conductor_20260731`](./tracks/bleeding-edge-agent-skills-conductor_20260731/index.md),
[`bleeding-edge-agent-skills-conductor_20260731`](./tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md),
mirrored by [GitHub issue #66](https://github.com/edithatogo/authentext/issues/66).

- Repair generated frontmatter and portable metadata.
Expand Down
16 changes: 8 additions & 8 deletions conductor/tracks.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,7 @@ This file tracks all major tracks for the project. Each track has its own detail

## Active Tracks

- [~] **bleeding-edge-agent-skills-conductor_20260731** (P0) -
Standards-compliant portable skill, behavioral evaluation, current
Conductor protocol, native GitHub phase hierarchy, and governed
experimental channels. See
[`tracks/bleeding-edge-agent-skills-conductor_20260731/`](./tracks/bleeding-edge-agent-skills-conductor_20260731/index.md)
and [GitHub #66](https://github.com/edithatogo/authentext/issues/66).
No active tracks.

---

Expand All @@ -27,10 +22,15 @@ This file tracks all major tracks for the project. Each track has its own detail

## Archived Tracks

**Total archived track directories:** 25 (24 legacy + `modernization_20260610`)
**Total archived track directories:** 26

**Latest archives:**

- [x] **bleeding-edge-agent-skills-conductor_20260731** - Portable Agent Skills
conformance, behavioral evaluation, current Conductor/GitHub control plane,
governed experimental layers, and release `v3.2.0`. See
[`tracks/archive/bleeding-edge-agent-skills-conductor_20260731/`](./tracks/archive/bleeding-edge-agent-skills-conductor_20260731/index.md)
and [GitHub #66](https://github.com/edithatogo/authentext/issues/66).
- modernization_20260610 (Bleeding-edge modernization: upstream v2.8.0, sourceright extraction, Agent Skills migration)
- v4-architecture_20260415 (Modular V4 Architecture & Ecosystem Overhaul)
- upstream-pr-adoption_20260304 (Patterns 28-30 adopted)
Expand Down Expand Up @@ -193,4 +193,4 @@ Live self-improvement outputs (not a track): `conductor/self-improvement/`

Last updated: 2026-07-31.

Active P0 track: standards-compliant Agent Skills and Conductor alignment.
No active track. Latest release: `v3.2.0`.
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

- **Track ID:** `bleeding-edge-agent-skills-conductor_20260731`
- **Priority:** P0
- **Status:** Active
- **Status:** Archived — completed and released as `v3.2.0` on 2026-08-01
- **GitHub Project:** [Authentext Conductor Roadmap](https://github.com/users/edithatogo/projects/36)
- **Parent issue:** [#66](https://github.com/edithatogo/authentext/issues/66)

Expand All @@ -16,7 +16,11 @@
- [Phase 1 Verification](./phase1-verification.md)
- [Phase 2 Verification](./phase2-verification.md)
- [Phase 3 Verification](./phase3-verification.md)
- [Repository Roadmap](../../roadmap.md)
- [Phase 4 Verification](./phase4-verification.md)
- [Phase 5 Verification](./phase5-verification.md)
- [Phase 6 Verification](./phase6-verification.md)
- [Formal Review](./review.md)
- [Repository Roadmap](../../../roadmap.md)

## Outcome

Expand All @@ -28,9 +32,9 @@ coordination mirror.

## Evidence boundary

Creating this track and its GitHub hierarchy does not establish implementation,
passing CI, registry acceptance, publication, or release. Those states require
the evidence and explicit gates in the plan.
The repository implementation and GitHub Release are complete. npm publication
and separate skill-registry submission were outside the authorized release
scope and did not occur. See the Phase 6 receipt for exact hosted evidence.

## Native phase subissues

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,17 @@
"description": "Make Authentext a portable, standards-compliant, evidence-tested Agent Skill while aligning Conductor with current upstream Agent Skills protocols, native GitHub subissues, and governed experimental channels.",
"type": "modernization",
"priority": "P0",
"status": "in_progress",
"status": "archived",
"created_at": "2026-07-31",
"updated_at": "2026-08-01",
"current_phase": "Phase 6: Release-candidate verification and governed handoff",
"current_phase": "Complete",
"completed_at": "2026-08-01",
"release": {
"tag": "v3.2.0",
"target": "58d8ad1402d6383092dfc9425b82d0ff34e63fc3",
"workflow_run": 30684012674,
"url": "https://github.com/edithatogo/authentext/releases/tag/v3.2.0"
},
"depends_on": [],
"parallel_safe": false,
"moscow": {
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -53,11 +53,22 @@ CodeQL alerts 13 and 14 report their most recent instances as `fixed`. Their
top-level records remained open while GitHub processed the default-branch
state transition.

## Remaining gates
## Published release

- Public tag, release, and publication remain explicitly unapproved. Repository
integration is complete through merged PRs #218 and #220.
- The publish preview reports no active tag-protection ruleset.
- The user explicitly authorized the supported release scope in direct response
to the Phase 6 authorization question.
- Annotated tag `v3.2.0` targets verified `main` commit `58d8ad1`.
- Release run `30684012674` passed build, validation, packaging, artifact-surface
verification, artifact upload, and GitHub Release publication.
- [Authentext 3.2.0](https://github.com/edithatogo/authentext/releases/tag/v3.2.0)
is public with ZIP and TAR.GZ assets and GitHub-recorded SHA-256 digests.
- npm publication and separate skill-registry submission were not authorized
and did not occur; the npm package remains private.

Release notes are prepared at `docs/release-candidate-3.2.0.md`. This receipt is
not a release authorization.
The successful release run warned that the pinned release action declared
deprecated Node.js 20. Formal review upgraded it to upstream v3.0.2 at immutable
commit `3d0d9888cb7fd7b750713d6e236d1fcb99157228`, which uses Node.js 24. The
regression failed on the old pin and passed with the new pin; commit `49ea366`
also passed the full 73-test and integration gate.

Final release notes are recorded at `docs/release-3.2.0.md`.
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,7 @@ GitHub subissue:
- [x] Add current/history/Must/experimental Project views if supported.
(C-005)

## Phase 6: Release-candidate verification and governed handoff
## Phase 6: Release-candidate verification and governed handoff [checkpoint: 423928e]

GitHub subissue:
[#72](https://github.com/edithatogo/authentext/issues/72).
Expand All @@ -103,13 +103,19 @@ GitHub subissue:
- [x] Record remaining external, experimental, and human gates.
- [x] Prepare release notes without tagging, releasing, or publishing.
(M-017, W-006)
- [ ] Obtain separate explicit approval before any public release action.
(M-017)
- [x] Obtain separate explicit approval before any public release action and
publish the supported GitHub release. (M-017) [tag: v3.2.0; run:
30684012674]
- [x] Apply formal-review fix for the deprecated release-action runtime.
[commit: 49ea366]
- [x] Generalize Conductor validation across active and archived mapped paths.
[commit: 423928e]

## Handoff artifacts

- Standards-compliant generated Authentext package.
- Trigger and output evaluation corpus plus machine-readable results.
- Conductor/GitHub reconciliation command and mapping receipt.
- Host-layer schemas and validation evidence.
- Release-candidate verification receipt and explicit remaining gates.
- Release verification receipt, published GitHub artifacts, and explicit
boundary excluding npm or skill-registry publication.
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
# Review Report: Bleeding-Edge Agent Skills and Conductor Alignment

Reviewed: 2026-08-01

## Summary

The track satisfies its portable-skill, evaluation, Conductor, GitHub, and
governed-release requirements after one release-runtime maintenance finding was
fixed.

## Verification checks

- **Plan compliance:** Yes — every phase has repository and hosted evidence.
- **Style compliance:** Pass — repository style guides and configured linters
pass.
- **New tests:** Yes — portable contract, routing, evaluation, reconciliation,
host overlay, workflow, sync, literal-preservation, and release-action cases.
- **Test coverage:** Yes for the repository-defined behavioral and integration
gates; no unsupported numeric coverage claim is made.
- **Test results:** Passed — 73 aggregate tests, isolated test files, sync,
validation, lint, type, formatting, and integration checks.
- **Security:** Passed — CodeQL and the blocking alert gate passed on the final
integrated revision; alerts 13 and 14 have fixed latest instances.

## Resolved findings

### Medium: Release action declared deprecated Node.js 20

- **File:** `.github/workflows/release.yml`
- **Context:** Release run `30684012674` succeeded but GitHub forced the v2
action from Node.js 20 to Node.js 24.
- **Resolution:** Updated to upstream v3.0.2 commit
`3d0d9888cb7fd7b750713d6e236d1fcb99157228`, which declares Node.js 24, and
added a regression assertion in `test/workflow-integrity.test.js`.
- **Evidence:** Red test on the prior pin; green full gate at commit `49ea366`.

### Medium: Conductor validator hard-coded the former active track path

- **File:** `scripts/validate-conductor.js`
- **Context:** A correct archive move failed validation because the validator
ignored the authoritative path already stored in `github-mapping.json`.
- **Resolution:** Resolve required track artifacts from the mapped path so both
active and archived records validate without compatibility shims.
- **Evidence:** The existing handshake test failed after the archive move and
passed after the validator was generalized.

## Decision

Approved for archive. No Critical, High, or unresolved Medium findings remain.
20 changes: 13 additions & 7 deletions docs/release-candidate-3.2.0.md → docs/release-3.2.0.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
# Authentext 3.2.0 release candidate
# Authentext 3.2.0 release

Prepared: 2026-08-01

This candidate makes Authentext a single portable Agent Skill with generated
This release makes Authentext a single portable Agent Skill with generated
progressive-disclosure references, deterministic validation, behavioral
evaluation receipts, and an optional governed OpenAI host overlay.

Expand All @@ -20,7 +20,7 @@ evaluation receipts, and an optional governed OpenAI host overlay.
- Executable Conductor handshake and dry-run-first GitHub reconciliation for 30
tracks, 123 phases, Project membership, native subissues, and state receipts.

## Candidate verification
## Verification

- Sync, repository docs, host overlays, and Conductor validation: passed.
- Lint, Vale, ESLint, TypeScript, and Prettier: passed.
Expand All @@ -31,7 +31,7 @@ evaluation receipts, and an optional governed OpenAI host overlay.
- Live Conductor/GitHub reconciliation: clean for all 153 mapped nodes and 123
native parent/phase relationships.

## Explicit gates
## Release evidence

- PR #218 verified the candidate across CI, CodeQL, workflow lint, portable
validation, publish preview, behavioral evaluations, and
Expand All @@ -41,6 +41,12 @@ evaluation receipts, and an optional governed OpenAI host overlay.
- The exact final `main` revision passed CI (`30683241535`), skill distribution
validation (`30683241550`), workflow lint (`30683241565`), and CodeQL with its
blocking-alert gate (`30683241551`).
- No tag, GitHub release, npm publication, or skill publication has occurred.
- Public release actions require separate explicit approval.
- GitHub recommends an active tag-protection ruleset before immutable releases.
- Tag `v3.2.0` targets verified commit `58d8ad1`.
- Release workflow run `30684012674` passed and published the ZIP and TAR.GZ
assets with GitHub-recorded SHA-256 digests.
- [Authentext 3.2.0](https://github.com/edithatogo/authentext/releases/tag/v3.2.0)
was published on 2026-08-01.
- npm publication and separate skill-registry submission did not occur; the npm
package remains private.
- Formal review upgraded the release action to Node.js 24-based v3.0.2 for
future releases after the successful v3.2.0 run emitted a deprecation warning.
13 changes: 8 additions & 5 deletions scripts/validate-conductor.js
Original file line number Diff line number Diff line change
Expand Up @@ -47,13 +47,16 @@ for (const track of tracks) {
}
}

const active = tracks.find(
const bleedingEdgeTrack = tracks.find(
(track) => track.track_id === 'bleeding-edge-agent-skills-conductor_20260731'
);
if (!active) errors.push('active bleeding-edge track is absent from github mapping');
for (const artifact of ['requirements.md', 'design.md', 'plan.md', 'spec.md']) {
const relative = `conductor/tracks/bleeding-edge-agent-skills-conductor_20260731/${artifact}`;
if (!fs.existsSync(path.join(root, relative))) errors.push(`missing ${relative}`);
if (!bleedingEdgeTrack) {
errors.push('bleeding-edge track is absent from github mapping');
} else {
for (const artifact of ['requirements.md', 'design.md', 'plan.md', 'spec.md']) {
const relative = path.posix.join(bleedingEdgeTrack.path, artifact);
if (!fs.existsSync(path.join(root, relative))) errors.push(`missing ${relative}`);
}
}

if (errors.length) {
Expand Down
2 changes: 1 addition & 1 deletion test/conductor-handshake.test.js
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ import assert from 'node:assert/strict';
import path from 'node:path';
import { spawnSync } from 'node:child_process';

test('repaired Conductor handshake and active track artifacts validate', () => {
test('Conductor handshake and mapped current or archived track artifacts validate', () => {
const validator = path.join(process.cwd(), 'scripts', 'validate-conductor.js');
const result = spawnSync(process.execPath, [validator], { encoding: 'utf8' });
assert.equal(result.status, 0, result.stderr);
Expand Down
Loading