Phase 5 (deferred): source builds, snapshots/rollback, plugin gate

[tonythethompson]

Scope

Phase-level tracker for the remaining deferred lifecycle work after PR #6 shipped lockfile v2 plus update/remove/gc. Detailed implementation contracts now live in child issues so each safety boundary can be implemented and accepted independently.

Child issues

• Auditable opt-in source builds for explicitly named roots #20 — Auditable opt-in source builds for explicitly named roots
• Immutable activation snapshots and explicit rollback #21 — Immutable activation snapshots and explicit rollback
• Prove active-plugin lifecycle safety before enabling mutation #22 — Prove active-plugin lifecycle safety before enabling mutation

Ordering and gate

• Auditable opt-in source builds for explicitly named roots #20 is independent from active plugin mutation.
• Immutable activation snapshots and explicit rollback #21 supplies the exact-state recovery substrate used by lifecycle changes.
• Prove active-plugin lifecycle safety before enabling mutation #22 remains a hard feature gate: active-plugin update, remove, and deactivate stay refused until its real-Nu and fault-injection acceptance matrix is green.

Invariant

Numan must continue to prefer explicit, immutable, auditable state over best-effort mutation. No deferred feature may silently execute source code, rewrite non-Numan user configuration, or approximate recovery from ambiguous state.

References

• Issue Phase 5: lifecycle architecture and mandatory revisions #4 (closed) — mandatory architecture baseline
• PR Phase 5: lockfile v2, numan update/remove/gc #6 — shipped 5.1 + 5.4
• Phase5Plan.md and AGENTS.md — phase history/status

[tonythethompson]

Progress (2026-07-22)

Child status:

Child	Status
#21 snapshots/rollback	Closed (shipped)
#20 source builds	Still open / deferred
#22 active-plugin gate	Still open; prerequisite met (CI plugins activate routinely; dogfood @ Nu 0.113 on Win/Linux/macOS)

Also landed outside this tracker but relevant to lifecycle: official registry growth + CI-built plugins (#30 closed), .tar.xz install (#44).

Recommended next child: #22.

[tonythethompson]

Child Issue #22 is closed as completed. The active-plugin-gate work is delivered as a three-PR stack:

• fix: refuse remove --force for active plugins #46 (PR1)
• feat: journaled plugin deactivate with injectable unregister #47 (PR2)
• feat: orchestrate active plugin update (Issue #22) #48 (PR3, Closes Prove active-plugin lifecycle safety before enabling mutation #22)

Merge order: PR1 → PR2 → PR3.