Skip to content

Prepare unpublished 1.0 rc scope and strict package audit controls - #27

Merged
ShutenOishi merged 4 commits into
mainfrom
chore/phase8-rc-preparation
Oct 5, 2026
Merged

ShutenOishi merged 4 commits into
mainfrom
chore/phase8-rc-preparation

Conversation

@ShutenOishi

Copy link
Copy Markdown
Owner

English

User chooses bug fixes, validation and documentation only until 1.0. ADR-0025 supersedes preview preparation ADR-0021 without erasing its source/history. Prepare unpublished 1.0.0-rc.1 documentation, notes and a separate Process-backend dependency lock (SHA256 325325b23cc30597037e58b417885099a5c95f944762523cec3d8b95512555fd). Keep the currently selected alpha.2 source and original lock unchanged during this first preparation step.

Candidate auditing now supports only two reviewed profiles (historical CliWrap / new Process Management dependency); unknown profiles and wrong dependency metadata fail. RC source must pass all18 first-attempt jobs including both native jobs, all9 Linux majors, 3OS deterministic/candidate audits and read-only preflight; duplicate/missing jobs fail. Lock digest pinning is required for RC. Python37 tests pass, git diff --check clean; no local VSTest execution. Source/lock/docs changes are coherent, no public API or production behavior changes.

Require final exact PR/main CI and actual artifacts. Only after this preparation main passes will a separate selection change pin it and audit actual RC packages on3OS. RC preparation is not RC acceptance, 1.0 promotion or publication permission. Existing source claims/exclusions and failed history remain. Publication stays disabled; no tags/Release/NuGet push.

日本語

1.0までは新機能を止め、不具合修正・検証・文書改善に絞ります。ADR-0025、日英RC説明、別依存lockとfail-closed監査を準備し、旧alpha.2固定ソースとlockは保持します。RCは両nativeを含む全18ジョブ・初回CI成功を必須にし、旧/未知profile、誤依存、CI不足・重複を拒否します。Python37件成功、差分検査成功。本番実装/APIは未変更、ローカルVSTestは未実行です。

最終PR/正確なmainのCI・実成果物を確認してから、その成功mainを別の候補選定変更で固定します。RC完了・1.0昇格・公開は別で、外部公開を無効のまま保持します。

Copy link
Copy Markdown
Owner Author

English

Local preparation checks: 37 Python regression tests, git diff --check, exact new-lock restore and Release build of netstandard2.0/net8/net10 all pass (zero warnings/errors). No local VSTest or database operation. New lock SHA256325325b23cc30597037e58b417885099a5c95f944762523cec3d8b95512555fd; original alpha2 lock SHA2562c2c59365e63b57a6b9f31e74ad2ef6b10d8a9fe1b54dbce31a72f6b1af7d348 unchanged. Head37c11fab23a6b137748e62937adcb3b1b6122615 / PR checkout83247050807243e70956a32f8367996cced39836 share tree0a2224ae7ef0f6d62b5996fa76ab777dfeec076a. CI37242487375 is pending. Only a fully verified preparation main will be selected as RC source.

日本語

Python37件、差分検査、新lock固定復元、3TFM Release buildは成功し警告/エラーゼロです。旧alpha2 lockは保持しています。ローカルVSTest/DB操作は未実行です。PR headとcheckoutは同じtreeで、CI37242487375を確認中です。RCソース固定は準備mainの検証後に行います。

Copy link
Copy Markdown
Owner Author

English

Blocked checkpoint at 2026-10-04 23:18 UTC (2026-10-05 08:18 JST): final preparation CI37242487375, head37c11fab23a6b137748e62937adcb3b1b6122615 / checkout83247050807243e70956a32f8367996cced39836 / tree0a2224ae7ef0f6d62b5996fa76ab777dfeec076a. Windows normal Test succeeded; stress step started23:07:22UTC and remains reported in progress beyond its10-minute cap. No Windows artifact is available. One job-log retrieval returns404 BlobNotFound. This does not prove a library stall, test failure or runner cause; it is not a passing receipt. No rerun or merge is performed.

Linux/macOS deterministic jobs and native Windows/macOS jobs pass. Native artifacts11316984115 /11317128941 and development package11317873710 were independently downloaded and digest/source/head/run/TRX checked; actual PG18.6 representative results and current2 legacy dependencies match. Nine-major Linux/candidate/preflight jobs await the Windows dependency gate. Local37 Python tests, strict3TFM build and new locked restore pass; publication manifests/alpha2 source/old lock remain unchanged.

GitHub connector has no cancellation operation. Browser fallback/CI inspection and cancellation need a separately requested permission before proceeding. RC selection is blocked pending verified preparation PR/main; keep this PR Draft. No 1.0 acceptance or publication is claimed.

日本語

08:18JST時点でWindows反復stepが10分上限後も実行中表示です。通常テストは成功しましたがWindows成果物は未取得、ログも404で取得できません。ライブラリ停止やrunner原因と断定せず、再実行・マージはしていません。両nativeの実PG18.6成果物と新開発パッケージは独立確認済みです。Linux9版と候補監査はWindows完了待ちです。Python37件・固定復元・3TFM警告/エラーゼロは成功しました。CI取消APIがないため、ブラウザーでの確認・取消は許可確認後に行います。RCの固定・1.0昇格・公開は未完、旧候補と無効公開設定を維持します。

Copy link
Copy Markdown
Owner Author

English

Final PR preparation receipt: head 8b275a4ae369a8a827e6924b9f7e005723c9580d, checkout 25f69353a566c77fc3a3226ef8aee8446c720081, CI 37259490297. All 18 jobs completed successfully on attempt 1: three deterministic OS jobs, native PostgreSQL 18 on Windows/macOS, Linux PostgreSQL 10–18, all three unpublished-candidate audits and the shared read-only preflight.

The fresh Windows deterministic artifact 11323469215 was independently downloaded and its GitHub SHA-256 matched (7862fb578b95ff07384da25c7fa2d6bfddd2bf8b55539a63fa91d5455837204f). It contains 39 TRX files with 2,172 Passed / zero failures. The stress record contains exactly 36 started and 36 finished commands (net48 30, net8 3, net10 3), all actual exit 0, no command timeout; maximum command duration was 13.172s. There are 1,170 paired parent/child traces with completion-finished/eof/drained and no raw DMP.

Native Windows artifact 11324570164 and macOS artifact 11323354198 were independently downloaded/digest-checked and report PostgreSQL 18.6/server 180006, tested head above, this workflow run and the representative scenario passed. Linux PG10 artifact 11324168167 reports 10.23 and the scoped scenarios passed; PG18 artifact 11324128530 reports 18.6 with representative, owned-cluster, rewind and 16→18 copy-upgrade scenarios passed. Existing exclusions remain explicit.

The three candidate-audit jobs are intentionally still auditing the preserved unpublished alpha.2 during this source-preparation gate; their artifacts report technical audit passed, no publication, no remaining shipped-payload license review, and verified PDB/DLL SourceLink negative tests. The next separate control change will select the successful exact preparation main as unpublished 1.0.0-rc.1 under ADR-0025 and apply the Process-backend lock. No tag, GitHub Release, asset publication or NuGet push was performed.

The earlier failed runs 37242487375 and 37259044557 remain documented and are not counted as passing evidence. The latter exposed the short control-fixture race; production code was not changed. Short timeout/cancellation tests now use a multi-second native command, while backpressure tests retain the owned infinite managed fixture.

日本語

最終PR head 8b275a4ae369a8a827e6924b9f7e005723c9580d、checkout 25f69353a566c77fc3a3226ef8aee8446c720081、CI 37259490297 はattempt 1で全18ジョブ成功しました。3OS通常検証、Windows/macOS native PostgreSQL 18、Linux PostgreSQL 10〜18、3OS候補監査、read-only preflightがすべて成功です。

Windows成果物 11323469215 はZIP hashを独立照合し、39 TRX/2,172件成功/失敗0、30/3/3の全36反復が実終了0、timeout 0、最大13.172秒でした。親子trace 1,170組は completion-finished/eof/drained が揃い、生DMPはありません。Windows/macOS nativeはPG18.6・server180006・対象head/run・代表シナリオ成功を確認しました。Linux PG10=10.23、PG18=18.6も確認し、PG18ではrewindと16→18 copy upgradeを含む設定済みscopeが成功しています。

この準備段階の3OS候補監査は意図どおり固定済みalpha.2を監査しています。次の別control変更で、今回の成功済みexact mainを未公開 1.0.0-rc.1 に固定し、Process backend用lockで監査します。公開フラグは無効のまま、タグ・GitHub Release・NuGet公開は実施していません。旧失敗runは履歴として保持し、成功扱いにしていません。

@ShutenOishi
ShutenOishi marked this pull request as ready for review October 5, 2026 03:39
@ShutenOishi
ShutenOishi merged commit 3a253d9 into main Oct 5, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant