Skip to content

P2 public product: harden stable EXE contract, screenshot metadata gate and SEO dates - #744

Merged
masarray merged 11 commits into
mainfrom
docs/p2-public-release-contract-and-trust-20261025
Oct 25, 2026
Merged

masarray merged 11 commits into
mainfrom
docs/p2-public-release-contract-and-trust-20261025

Conversation

@masarray

Copy link
Copy Markdown
Owner

P2 — Public stable EXE contract, media metadata gate, and sitemap freshness

Base main: c7c4ddc (P1 #743).

Changes

  • P2A: classify current ARSAS-Windows-x64-Portable.exe analytics downloads; separately classify historical tag-specific Portable ZIP links.
  • Validate modern (>=v1.6.42) portable EXE name and URL; retain legacy ZIP handling for historical versions and graceful malformed-manifest failure.
  • Redirect obsolete eight-page validate-built-landing.py to canonical 62-page validate-product-build.py.
  • Legacy ZIP-only publisher and ZIP-only SBOM backfill fail closed for v1.6.42+; modern authority remains release-windows.yml.
  • P2B: add read-only PNG/WebP hidden-metadata audit (8 current screenshots × PNG/WebP), focused negative fixtures, Pages gate and published CI artifact.
  • P4: update actual October 25 Quick Start, FAQ, Demo and Compatibility EN/ID sitemap lastmod dates.
  • Document manual sensitive-network/pixel-level image review still pending; hidden metadata gate cannot replace human approval.

Safety

No changes to app/runtime, engine, installer, release tag, VERSION, Windows release request, latest.json, published.json, or protected source-promotion PR #729 R7/R10 gates. No automatic asset replacement.

Required validation

Exact-head Build + Pages source and rendered CI, media metadata scan (and fixture tests). Verify live Pages version and public EXE after merge. If original image metadata fails, hold merge and seek operator-approved asset disposition.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-25T08:50:38.922057Z 3b9f834 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant