Skip to content

Release v1.3.0: redesign, credible disclosure and verified tooling - #12

Merged
karauda merged 2 commits into
mainfrom
release/v1.3.0
Oct 11, 2026
Merged

karauda merged 2 commits into
mainfrom
release/v1.3.0

Conversation

@karauda

@karauda karauda commented Oct 11, 2026 •

Copy link
Copy Markdown
Owner

Change

Release v1.3.0 replaces the manifesto landing page with a typographic reference in all 22 languages. It removes the maintainer-only signature list, assumed human approval and unsupported adoption claims; the project page now explains evidence and pending review.

The upgrade also repairs JSON-LD and JSON Schemas, updates dependencies, fixes MCP packaging and validation, improves README/licensing/policy references, and adds browser, accessibility and protocol checks to the release workflow. Release assets include all 54 marks, the vocabulary, both schemas and an installable MCP archive.

Compatibility

Existing workflow numbers and decision branches are unchanged from v1.2.0. The rhetorical Level 5 sentence about legitimacy is removed in every language. The unresolved Level 3 review shortcut is exposed in the wizard and MCP output; its full definition still requires meaningful review. Retired signing URLs redirect to project information.

CG metadata follows the three text values in the 9 October report. w3cAiDisclosure is now nullable for Levels 1 and 2 because scope/review cannot be inferred. Generic snippets omit the CG declaration; publishers must assess it independently. CodeQL's resource-URL alert is fixed by comparing parsed origins rather than domain prefixes.

The 21 translations remain marked as machine translations. Editorial review of this revision is pending. MCP is packaged as an archive and remains unpublished on npm. Standards submissions are tracked in #11; submission does not imply acceptance or Google support.

Verification

  • npm run verify: types, build, vocabulary/classifier checks and all 352 generated pages passed.
  • BROWSER_CHANNEL=chrome npm run test:browser: all 22 homepages, responsive core routes, keyboard/clipboard/themes, 32 wizard paths, no-JavaScript behavior and automated WCAG A/AA checks passed.
  • npm run test:server --prefix mcp: initialization, four tools, six results, invalid inputs and resource access passed.
  • Generated assets are current; all 54 existing SVG marks are unchanged.
  • Translation review status matches the review performed.

Remote CI and CodeQL must pass before merging. Safari/Firefox were not separately tested.

@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Comment thread scripts/check-dist.mjs Fixed
@karauda
karauda merged commit 97c1373 into main Oct 11, 2026
3 checks passed
@karauda
karauda deleted the release/v1.3.0 branch October 11, 2026 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants