diff --git a/RELEASE_CHECKLIST.md b/RELEASE_CHECKLIST.md index 9dd258b..0e73aa2 100644 --- a/RELEASE_CHECKLIST.md +++ b/RELEASE_CHECKLIST.md @@ -26,6 +26,7 @@ This document walks maintainers through the build/sign/upload flow for each ipcp - [ ] **Run preflight checks**: `make release-preflight` This is the single authoritative gate. It runs, in order: + 1. Working tree clean check 2. `make prepush` — fmt, clippy, tests, cargo-deny, **version consistency** 3. `make version-check` — full consistency: `VERSION`, `Cargo.toml`, all TypeScript packages @@ -108,6 +109,7 @@ This document walks maintainers through the build/sign/upload flow for each ipcp ``` Confirm the PR actually updates libs across all platforms before merging: + - `bindings/go/ipcprims/lib//libipcprims_ffi.a` (all platforms) - `bindings/go/ipcprims/lib-shared//` (shared libs) - `bindings/go/ipcprims/include/ipcprims.h` (regenerated header) @@ -270,6 +272,7 @@ export IPCPRIMS_GPG_HOMEDIR=/path/to/gpg/homedir # optional ``` Validates: + - Checksums match artifacts - Signatures verify correctly - Exported keys are public-only (no secret key material) diff --git a/docs/decisions/SDR-0001-schema-validation-scope.md b/docs/decisions/SDR-0001-schema-validation-scope.md index 07ab42f..1c49412 100644 --- a/docs/decisions/SDR-0001-schema-validation-scope.md +++ b/docs/decisions/SDR-0001-schema-validation-scope.md @@ -27,6 +27,7 @@ ipcprims is also a general-purpose library used outside Lanyte. The schema valid - Load, compile, and store JSON Schema 2020-12 validators keyed by channel ID - Validate frame payloads against registered schemas - Configurable strictness via `RegistryConfig`: + - `strict_mode: bool` — when true, adds `deny_unknown_fields` semantics (additional properties rejected) - `fail_on_missing_schema: bool` — when true, frames on channels without a registered schema are rejected - `validate_on_send: bool` — validate outbound frames (default: true when registry attached)