[ShutenOishi]

English

Select the already-validated preparation main as the immutable unpublished 1.0.0-rc.1 source under ADR-0025.

• source: 3a253d924998193259210320a7365dbd5f4c3c5f
• exact source main CI: 37260328001, attempt 1, all 18 required jobs successful
• SDK: 10.0.100
• dependency profile: process-compat-v1
• RC lock SHA-256: 325325b23cc30597037e58b417885099a5c95f944762523cec3d8b95512555fd
• publication remains disabled
• historical alpha.2 source/CI/history is preserved

This PR must independently audit the actual rc.1 nupkg/snupkg, three PDB/DLL pairs, SourceLink negative cases, exact dependency/license scope, isolated consumers and the real-PostgreSQL matrix. It remains Draft until all 18 PR jobs pass on attempt 1 and artifacts are inspected. After merge, the exact selection main must pass the same gate again.

No tag, GitHub Release, Release asset or NuGet push is authorized by this PR.

日本語

ADR-0025に従い、検証済みの準備mainを未公開 1.0.0-rc.1 の不変sourceとして固定します。

• source: 3a253d924998193259210320a7365dbd5f4c3c5f
• sourceのexact-main CI: 37260328001、attempt 1、必須18ジョブすべて成功
• SDK: 10.0.100
• dependency profile: process-compat-v1
• RC lock SHA-256: 325325b23cc30597037e58b417885099a5c95f944762523cec3d8b95512555fd
• 外部公開は無効
• 旧alpha.2のsource／CI／履歴は保存

このPR自身でrc.1実nupkg/snupkg、PDB/DLL 3組、SourceLink異常系、依存・ライセンス範囲、隔離consumer、実PostgreSQL matrixを再監査します。attempt 1で全18PRジョブ成功＋成果物監査まではDraftのままにし、merge後のexact mainでも同一ゲートを再度必須とします。

このPRはtag・GitHub Release・Release asset・NuGet pushを許可しません。

[ShutenOishi]

English

Final PR selection receipt for unpublished 1.0.0-rc.1: head f8d5f9e48927fa87afd2e54aaeed3c814afd1694, PR merge checkout/control bb6b6b4feebba6ba41307a2624c892ad0d7ea77e, CI 37280670387, attempt 1. All 18 required jobs completed successfully: three deterministic OS jobs, native PostgreSQL 18 on Windows/macOS, Linux PostgreSQL 10–18, three RC candidate audits and the shared read-only preflight.

The RC manifest fixes immutable source 3a253d924998193259210320a7365dbd5f4c3c5f / exact-main CI 37260328001 (attempt 1, all 18 jobs), version 1.0.0-rc.1, SDK 10.0.100, profile process-compat-v1, publication disabled, and lock SHA-256 325325b23cc30597037e58b417885099a5c95f944762523cec3d8b95512555fd. The exact lock hash was independently rechecked from all three candidate artifacts and is now byte-identical on Windows/Linux/macOS.

Independently downloaded/digest-checked candidate artifacts:

• Ubuntu 11331863168: ZIP fa603c99e7852c5444bf2d5101eda65634be5627aaa584313f4cbabd22ec8645; nupkg fba36ecb62499426dfdf58e6e58bd41ee7adcc082e9efd7bb1d79cf5900beffb; snupkg c59234bdeba70caf1252b09c88d037eefeedca66216d0c847b4b2678ab366bbe.
• macOS 11332012558: ZIP d3ce271add2bdf4fd830989767bced2a315101a6e9e93067653900d9bd9b0058; nupkg b68f2577a5dd0a7dc7662ff3703ccc6f556468ac60f6e8fcd792cc5360dc6779; snupkg f76bf32d7bf7cd46e798e13e16ee1e34218b5e36e0c615b18c44776a7b80c438.
• Windows 11332826798: ZIP 8f8ee3c2eda7b8142aff5f0b9f848459c7bc8636d9c9b1ff638a5ee704ac20ff; nupkg a8f01c22936eec3fae8c5349b63e809b7982c3ae55dbfb3860810838c2ea0b0d; snupkg 3c38cf4fb2934324560a910ad265b82cdbe1740b2e80b61c46031a19b0824c44.
• Shared reviewed preflight artifact 11332955751: ZIP 4b27acca5ab99ab6adc060dba6881a270adc38b4363fe081527aecaa489aa1bd; reviewed nupkg b2cc995ec2d41de620c8bcd9a745d48980d64a2814c9105316179ddea1fda81d; snupkg a9f2167ab9c70e679540521bc8736c2bde26f468ca4ba97570bc84829bbe49b9.

Every candidate report records technical_audit_passed=true, publication_performed=false/publication_ready=false, no remaining shipped-payload license review, three verified portable PDB/DLL pairs, wrong-SHA and mismatched-DLL negative rejection, MIT package metadata, source commit above, and isolated consumer verification. The netstandard2.0 package dependency is System.Management 10.0.10; the inspected runtime graph also contains System.CodeDom 10.0.10. Cross-OS package byte determinism is not claimed; each OS audit verifies its actual package against its exact selected-source checkout.

Windows deterministic artifact 11332411474 (ZIP 6a142af4a5bd6498b371109d3302c82625e48e6bd621378e2bd7f0c974a72e10) contains 39 TRX / 2,172 Passed / zero failures. Stress records show exactly 36 starts and 36 finishes (net48 30, net8 3, net10 3), every actual exit 0, zero command timeouts, maximum 10.328s; 1,170 paired parent/child traces all contain completion-finished/eof/drained, CLR4 smoke markers are present, and no raw DMP is uploaded.

Native artifacts 11332353027 (Windows, ZIP 26d330ed7156933b40b734942a5942a7229e02aa0a651840140aa6f78df2468a) and 11331804683 (macOS, bdaf8a936ed8f74c7115845fb5baf52495c64ed87f61517a9ca529f292e6239b) report PostgreSQL 18.6/server 180006 and the representative public-wrapper scenario Passed. Linux PG10 artifact 11332122168 (3279370b0646bb47ab28c268652aaaa35e8f8f08cbb8d613e064c17685eddf0b) reports 10.23 and the configured applicable scenarios Passed. PG18 artifact 11332018782 (d49471aeb2f2e4ca83b2db2f5511e09058cd2d1efe0c9c80fd80567417d3912d) reports 18.6 plus rewind and 16.15→18.6 copy-upgrade scenarios Passed. Existing exclusions remain unchanged.

Failed selection runs are retained rather than retried into acceptance: 37261379729 exposed a stale regression assertion that incorrectly equated alpha.2 provenance with the preserved alpha.1 manifest; 37279821001 then exposed Windows CRLF conversion of the byte-pinned RC lock. The former was corrected to preserve both provenance chains separately; the latter was fixed by LF-pinning the RC lock in .gitattributes, not by weakening the hash check.

No tag, GitHub Release, public asset or NuGet push was performed. This completes the PR-side RC selection evidence only; exact-main CI remains required after merge, and 1.0 acceptance/publication remain separate gates.

日本語

未公開 1.0.0-rc.1 の最終PR選定証拠です。head f8d5f9e48927fa87afd2e54aaeed3c814afd1694、PR merge checkout/control bb6b6b4feebba6ba41307a2624c892ad0d7ea77e、CI 37280670387 はattempt 1で必須18ジョブすべて成功しました。3OS通常検証、Windows/macOS native PG18、Linux PG10〜18、3OSのRC候補監査、read-only preflightが全成功です。

manifestはsource 3a253d924998193259210320a7365dbd5f4c3c5f／exact-main CI 37260328001、1.0.0-rc.1、SDK 10.0.100、Process互換profile、公開無効、lock SHA-256 325325b23cc30597037e58b417885099a5c95f944762523cec3d8b95512555fd を固定しています。3OS成果物を独立取得し、lockの実バイトhashが全OSで完全一致することを再確認しました。各候補は実nupkg/snupkg、3組のPDB/DLL、SourceLink異常系、MIT、依存、isolated consumerを通過し、公開は実施されていません。

Windows成果物は39 TRX／2,172件成功／失敗0、30/3/3の36反復すべてexit 0、timeout 0、最大10.328秒、親子trace 1,170組すべてcompletion-finished/eof/drained、生DMPなしです。native Windows/macOSはPG18.6/server180006、Linux PG10=10.23、PG18=18.6を確認し、PG18ではrewindと16.15→18.6 copy-upgradeも成功しています。

旧失敗run 37261379729 と 37279821001 は成功扱いにせず保持します。前者はalpha.2と保存alpha.1を同一視した古いテスト前提、後者はWindowsのRC lock改行変換を検出しました。履歴検証を正しく分離し、RC lockをLF固定してbyte-exact hashを弱めず修正しました。

タグ・GitHub Release・公開asset・NuGet pushは実施していません。ここで完了するのはPR側のRC選定証拠で、merge後のexact-main CI、1.0受入、外部公開は別ゲートです。