From 6c8e909d630d233370160c10dad113b82002102c Mon Sep 17 00:00:00 2001 From: Affaan Mustafa Date: Fri, 15 May 2026 23:38:00 -0400 Subject: [PATCH] docs: record May 16 rc1 readiness evidence --- .../2.0.0-rc.1/preview-pack-manifest.md | 1 + .../publication-evidence-2026-05-16.md | 73 +++++++++++++++++++ .../2.0.0-rc.1/publication-readiness.md | 25 ++++--- 3 files changed, 88 insertions(+), 11 deletions(-) create mode 100644 docs/releases/2.0.0-rc.1/publication-evidence-2026-05-16.md diff --git a/docs/releases/2.0.0-rc.1/preview-pack-manifest.md b/docs/releases/2.0.0-rc.1/preview-pack-manifest.md index ee62295b..f9eb717b 100644 --- a/docs/releases/2.0.0-rc.1/preview-pack-manifest.md +++ b/docs/releases/2.0.0-rc.1/preview-pack-manifest.md @@ -21,6 +21,7 @@ surfaces, or posting announcements. | `docs/releases/2.0.0-rc.1/launch-checklist.md` | Operator launch checklist | Must remain approval-gated for release, package, plugin, and announcement actions | | `docs/releases/2.0.0-rc.1/publication-readiness.md` | Release gate | Requires fresh evidence from the exact release commit | | `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-15.md` | Current May 15 queue, roadmap, security, supply-chain watch, no-lifecycle CI install hardening, AgentShield #86 evidence-pack provenance, ECC Tools billing-gate, Actions cache purge, and `ecc2` test evidence through PR #1941 | Must be superseded by a final clean-checkout evidence file before real publication | +| `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-16.md` | Current May 16 queue cleanup, recsys skill merge, GateGuard triage, dashboard refresh, and combined Node/Rust/release-surface gate evidence through `cecab597` | Must still be repeated from a strict clean checkout before real publication | | `docs/releases/2.0.0-rc.1/naming-and-publication-matrix.md` | Naming, slug, and publication-path decision record | Keeps `Everything Claude Code / ECC`, npm `ecc-universal`, and plugin slug `ecc` for rc.1 | | `docs/releases/2.0.0-rc.1/x-thread.md` | X launch draft | Must replace placeholders with live URLs after release/package/plugin publication | | `docs/releases/2.0.0-rc.1/linkedin-post.md` | LinkedIn launch draft | Must replace placeholders with live URLs after release/package/plugin publication | diff --git a/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-16.md b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-16.md new file mode 100644 index 00000000..75a7c8fc --- /dev/null +++ b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-16.md @@ -0,0 +1,73 @@ +# ECC v2.0.0-rc.1 Publication Evidence - 2026-05-16 + +This is release-readiness evidence only. It does not create a GitHub release, +npm publication, plugin tag, marketplace submission, or announcement post. + +## Source Commit + +| Field | Evidence | +| --- | --- | +| Upstream main | `cecab59747346ef3988305e5178b00652cb6d042` | +| Git remote | `https://github.com/affaan-m/everything-claude-code.git` | +| Evidence scope | Current `main` after PR #1944, PR #1945, issue #1946 triage, ITO-57 sync, and operator dashboard refresh | +| Local status caveat | `git status --short --branch` showed `## main...origin/main` plus unrelated untracked `docs/drafts/` | + +The actual release operator should repeat all publish-facing checks from the +final release commit with a strictly clean checkout before publishing. + +## Queue And Discussion State + +| Surface | Command | Result | +| --- | --- | --- | +| Trunk PRs | `gh pr list --state open --json number,title,url --limit 20` | `[]` | +| Trunk issues | `gh issue list --state open --json number,title,url --limit 20` | `[]` | +| Platform audit | `node scripts/platform-audit.js --json --allow-untracked docs/drafts/` | Ready; open PRs 0, open issues 0, discussion maintainer-touch gaps 0, discussion missing-answer gaps 0, blocking dirty files 0 | +| Operator dashboard | `npm run operator:dashboard -- --json --allow-untracked docs/drafts/` | `dashboardReady: true`, `platformReady: true`, head `cecab59747346ef3988305e5178b00652cb6d042` | + +## Merge And Triage Batch + +| Item | Result | +| --- | --- | +| PR #1944 | Merged statusline ANSI palette update as `50ac061f9e72d7daa137f1bd08760cf74e9b577d`; targeted `node tests/hooks/ecc-statusline.test.js` and `node scripts/ci/validate-hooks.js` passed before merge | +| PR #1945 | Merged `recsys-pipeline-architect` community skill as `9e973b29fb1a2a0aeb9e6980017b67c3ddb05201`; maintainer patches synced catalog counts and removed emoji blocked by Unicode safety | +| Issue #1946 | Closed as triaged with a corrected maintainer comment; Linear `ITO-60` now tracks GateGuard proactive fact-forcing preflight UX | +| ITO-57 | Updated with PR #1947 advisory-source evidence, post-merge source refresh, IOC scan, npm audit/signature checks, and OpenAI app update caveat | +| ITO-44 | Updated with queue cleanup, dashboard refresh, and remaining macro gaps | + +## Release Gate Commands + +| Gate | Command | Result | +| --- | --- | --- | +| Root suite | `npm test` | 2469 passed, 0 failed | +| Rust `ecc2` suite | `cd ecc2 && cargo test` | 462 passed, 0 failed; existing dead-code/unused warnings only | +| Release surface | `node tests/docs/ecc2-release-surface.test.js` | 20 passed | +| Harness adapters | `npm run harness:adapters -- --check` | PASS; 11 adapters | +| Harness audit | `npm run harness:audit -- --format json` | 70/70, no top actions | +| Observability readiness | `npm run observability:ready` | 21/21, ready yes | +| Supply-chain IOC scan | `npm run security:ioc-scan` | Passed; 227 files inspected | +| npm audit | `npm audit --audit-level=moderate` | 0 vulnerabilities | +| npm signatures | `npm audit signatures` | 241 verified registry signatures; 30 verified attestations | +| Dashboard renderer | `node tests/scripts/operator-readiness-dashboard.test.js` | 7 passed, 0 failed | + +## Current Publication Blockers + +- GitHub prerelease `v2.0.0-rc.1` is still not created in this pass. +- npm `ecc-universal@2.0.0-rc.1` is still not published to the `next` dist-tag. +- Claude plugin tag and marketplace propagation remain approval-gated. +- Codex repo-marketplace distribution is verified for rc.1, but official + Plugin Directory publishing remains blocked on OpenAI's coming-soon + self-serve publishing surface. +- ECC Tools billing/native-payments copy remains blocked until live + Marketplace-managed test-account readback returns an announcement-ready gate. +- Release notes, X, LinkedIn, GitHub release, and longform copy still need final + live URLs after release/package/plugin URLs exist. +- The local checkout still has unrelated untracked `docs/drafts/`, so a strict + clean-checkout release pass remains required before real publication. + +## Result + +The public PR queue, issue queue, and discussion queue are clear, and the rc.1 +preview pack passed the main Node, Rust, release-surface, harness, observability, +and supply-chain gates on May 16, 2026. This improves publication readiness but +does not replace the approval-gated release, package, plugin, and announcement +steps in `publication-readiness.md`. diff --git a/docs/releases/2.0.0-rc.1/publication-readiness.md b/docs/releases/2.0.0-rc.1/publication-readiness.md index 1a05b5ba..841084f5 100644 --- a/docs/releases/2.0.0-rc.1/publication-readiness.md +++ b/docs/releases/2.0.0-rc.1/publication-readiness.md @@ -20,8 +20,11 @@ GitHub Actions cache purge, AgentShield release-verification, billing-gate, AgentShield #86 evidence-pack provenance, and `ecc2` current-dir guard evidence refresh through PR #1941, see [`publication-evidence-2026-05-15.md`](publication-evidence-2026-05-15.md). +For the May 16 queue cleanup, recsys skill merge, GateGuard issue triage, +operator dashboard refresh, and combined final-gate rerun on current `main`, see +[`publication-evidence-2026-05-16.md`](publication-evidence-2026-05-16.md). For the operator-facing prompt-to-artifact readiness dashboard from the same -May 15 pass, see +May 16 pass, see [`operator-readiness-dashboard-2026-05-15.md`](operator-readiness-dashboard-2026-05-15.md). ## Release Identity Matrix @@ -61,21 +64,21 @@ Record the exact commit SHA and command output before any publication action: | Evidence | Command | Required result | Recorded output | | --- | --- | --- | --- | -| Clean release branch | `git status --short --branch` | On intended release commit; no unrelated files | Pending final clean-checkout release pass; May 13 evidence branch still had unrelated untracked `docs/drafts/` | -| Harness audit | `npm run harness:audit -- --format json` | 70/70 passing | `publication-evidence-2026-05-13.md`: 70/70 | -| Adapter scorecard | `npm run harness:adapters -- --check` | PASS | `publication-evidence-2026-05-13.md`: PASS, 11 adapters | -| Observability readiness | `npm run observability:ready` | 21/21 passing | `publication-evidence-2026-05-13-post-hardening.md`: 21/21, ready true after release-safety gate refresh | +| Clean release branch | `git status --short --branch` | On intended release commit; no unrelated files | Pending final strict clean-checkout release pass; `publication-evidence-2026-05-16.md` records current `main` with unrelated untracked `docs/drafts/` | +| Harness audit | `npm run harness:audit -- --format json` | 70/70 passing | `publication-evidence-2026-05-16.md`: 70/70 | +| Adapter scorecard | `npm run harness:adapters -- --check` | PASS | `publication-evidence-2026-05-16.md`: PASS, 11 adapters | +| Observability readiness | `npm run observability:ready` | 21/21 passing | `publication-evidence-2026-05-16.md`: 21/21, ready yes | | Release safety gate | `npm run observability:ready -- --format json` | Release Safety category passing with publication readiness, supply-chain, workflow security, package surface, and release-surface evidence | `publication-evidence-2026-05-13-post-hardening.md`: Release Safety 3/3 | -| Supply-chain verification | `npm audit --json`; `npm audit signatures`; `cd ecc2 && cargo audit -q`; Dependabot alerts; GitGuardian Security Checks | 0 vulnerabilities/alerts, registry signatures verified, GitGuardian clean | `publication-evidence-2026-05-15.md`: npm registry signatures and attestations verified, 0 moderate-or-higher npm vulnerabilities, Mini Shai-Hulud/TanStack IOC scan clean | -| Root suite | `node tests/run-all.js` | 0 failures | `publication-evidence-2026-05-15.md`: 2442 passed, 0 failed | +| Supply-chain verification | `npm audit --json`; `npm audit signatures`; `cd ecc2 && cargo audit -q`; Dependabot alerts; GitGuardian Security Checks | 0 vulnerabilities/alerts, registry signatures verified, GitGuardian clean | `publication-evidence-2026-05-16.md`: npm registry signatures and attestations verified, 0 moderate-or-higher npm vulnerabilities, supply-chain IOC scan clean | +| Root suite | `node tests/run-all.js` | 0 failures | `publication-evidence-2026-05-16.md`: `npm test` passed 2469/2469, 0 failed | | Markdown lint | `npx markdownlint-cli '**/*.md' --ignore node_modules` | 0 failures | `publication-evidence-2026-05-13.md`: passed after zh-CN CLAUDE list-marker normalization | | Package surface | `node tests/scripts/npm-publish-surface.test.js` | 0 failures; no Python bytecode in npm tarball | `2/2` passed in May 12 evidence pass | -| Release surface | `node tests/docs/ecc2-release-surface.test.js` | 0 failures | `publication-evidence-2026-05-13.md`: 18/18 passed | -| Optional Rust surface | `cd ecc2 && cargo test` | 0 failures or explicit deferral | `publication-evidence-2026-05-15.md`: 462/462 passed, existing warnings only after PR #1935 current-dir guard | -| Queue baseline | `gh pr list` / `gh issue list` across trunk, AgentShield, JARVIS, ECC Tools, and ECC website | Under 20 open PRs and under 20 open issues | `publication-evidence-2026-05-15.md`: platform audit ready, 0 open PRs and 0 open issues across checked repos | +| Release surface | `node tests/docs/ecc2-release-surface.test.js` | 0 failures | `publication-evidence-2026-05-16.md`: 20/20 passed | +| Optional Rust surface | `cd ecc2 && cargo test` | 0 failures or explicit deferral | `publication-evidence-2026-05-16.md`: 462/462 passed, existing warnings only | +| Queue baseline | `gh pr list` / `gh issue list` across trunk, AgentShield, JARVIS, ECC Tools, and ECC website | Under 20 open PRs and under 20 open issues | `publication-evidence-2026-05-16.md`: platform audit ready, 0 open PRs and 0 open issues across checked repos | | Discussion baseline | `node scripts/discussion-audit.js --json` | No unmanaged active discussion queue and no answerable Q&A missing an accepted answer | `publication-evidence-2026-05-15.md`: 58 trunk discussions, 0 without maintainer touch; other tracked repos disabled or 0 | | Linear roadmap | Linear project and issue readback | Detailed roadmap exists with release, security, AgentShield, ECC Tools, legacy, and observability lanes | `publication-evidence-2026-05-15.md`: project and 16 issue lanes recorded | -| Operator readiness dashboard | `npm run operator:dashboard -- --allow-untracked docs/drafts/ --write docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-15.md` | Current queue state mapped to macro-goal deliverables and incomplete gaps | `operator-readiness-dashboard-2026-05-15.md`: generated live status, prompt-to-artifact checklist, Linear state, and next work order | +| Operator readiness dashboard | `npm run operator:dashboard -- --allow-untracked docs/drafts/ --write docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-15.md` | Current queue state mapped to macro-goal deliverables and incomplete gaps | `operator-readiness-dashboard-2026-05-15.md`: regenerated from `cecab597`, 0 open PRs, 0 open issues, 0 discussion gaps | ## Do Not Publish If