From 99e9f118bd6db8f27285076fa1b2d602258e1280 Mon Sep 17 00:00:00 2001 From: Affaan Mustafa Date: Mon, 18 May 2026 02:18:22 -0400 Subject: [PATCH] docs: refresh evidence head after billing mirror --- docs/ECC-2.0-GA-ROADMAP.md | 15 ++++++++------- .../2.0.0-rc.1/publication-evidence-2026-05-18.md | 10 +++++----- 2 files changed, 13 insertions(+), 12 deletions(-) diff --git a/docs/ECC-2.0-GA-ROADMAP.md b/docs/ECC-2.0-GA-ROADMAP.md index f786f7ff..b3a139fe 100644 --- a/docs/ECC-2.0-GA-ROADMAP.md +++ b/docs/ECC-2.0-GA-ROADMAP.md @@ -42,14 +42,15 @@ As of 2026-05-18: - The latest May 18 merge batch on `main` includes PR #1970 workflow-security validator bypass fixes, PR #1971 metrics bridge cost-reporting and warning de-dup fixes, PR #1972 `uncloud` skill activation structure, PR #1976 - OpenAI/AstraFlow provider response guards, and `80f6c279` provider-guard - merge evidence with a refreshed operator dashboard. + OpenAI/AstraFlow provider response guards, ECC-Tools Wrangler OAuth billing + readback mirror evidence, and `f010f783` release evidence with a refreshed + operator dashboard. - `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md` records the May 18 queue-zero state, current-head TanStack/Mini Shai-Hulud protection recheck, no-lifecycle npm install, npm audit/signature checks, AgentShield project `.claude` scan, Linear sync, work-items sync, operator dashboard - refresh, PR #1976 provider-guard validation, and current-head CI success for - `80f6c279`. + refresh, PR #1976 provider-guard validation, ECC-Tools Wrangler OAuth billing + readback evidence, and current-head CI success for `f010f783`. - `docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md` regenerates the ITO-44 prompt-to-artifact dashboard from live platform audit evidence: PR queue, issue queue, discussion queue, local worktree gate, @@ -78,8 +79,8 @@ As of 2026-05-18: - `npm run harness:audit -- --format json` reports 70/70 on current `main`. - `npm run observability:ready` reports 21/21 readiness on current `main`, including the GitHub/Linear/handoff/roadmap progress-sync contract. -- GitHub CI run `26014623528` completed successfully for - `80f6c27957cb2bee7614f093ec7237afd93c3c9f`, including Validate Components, +- GitHub CI run `26016495976` completed successfully for + `f010f7833212794da7ba74c0f88d8e05723efe1f`, including Validate Components, Coverage, Lint, Security Scan, and the full Node/package-manager matrix. - Supply-Chain Watch run `26009825837` completed successfully for `3b7e0ba30a027ffd3319c2f145c63076c296d80a`, including no-lifecycle install, @@ -665,7 +666,7 @@ is not complete unless the evidence column exists and has been freshly verified. | Manage repository discussions | Repo-family discussion recheck | Platform audit reports 0 discussion maintainer-touch gaps and 0 answerable Q&A missing accepted answers; trunk still has 58 total discussions | Complete | | Manage PR discussions | PR review/comment closure plus merge/close state | ECC #1976 merged after maintainer follow-up validation; no open tracked PRs remain | Complete | | Salvage useful stale work | `docs/stale-pr-salvage-ledger.md` plus `docs/legacy-artifact-inventory.md` | Ledger records salvaged, superseded, skipped, and manual-review tails; #1815-#1818 added cost tracking, skill scout, frontend design guidance, code-reviewer false-positive guardrails, and the May 12 gap pass; #1687, #1609, #1563, #1564, and #1565 localization tails are attached to Linear ITO-55 for language-owner review and no automatic import remains release-blocking | Complete; repeat legacy scan before release | -| ECC 2.0 preview pack ready | Release docs, quickstart, publication readiness, release notes | `docs/releases/2.0.0-rc.1/` and readiness docs are in-tree; May 18 evidence records queue-zero state, #1970/#1971/#1972/#1976 merge batch, supply-chain recheck, npm no-lifecycle install/audit/signature gates, Linear sync, refreshed operator dashboard, provider-guard validation, and successful current-head CI on `80f6c279` | Needs final clean-checkout release approval | +| ECC 2.0 preview pack ready | Release docs, quickstart, publication readiness, release notes | `docs/releases/2.0.0-rc.1/` and readiness docs are in-tree; May 18 evidence records queue-zero state, #1970/#1971/#1972/#1976 merge batch, supply-chain recheck, npm no-lifecycle install/audit/signature gates, Linear sync, refreshed operator dashboard, provider-guard validation, ECC-Tools Wrangler OAuth billing readback evidence, and successful current-head CI on `f010f783` | Needs final clean-checkout release approval | | Hermes specialized skills included safely | Hermes setup/import docs and sanitized skill surface | Hermes setup and import playbook are public; secrets stay local | Needs final release review | | Naming and rename readiness | Naming matrix across package/plugin/docs/social surfaces | `docs/releases/2.0.0-rc.1/naming-and-publication-matrix.md` records current package, repo, Claude plugin, Codex plugin, OpenCode, and npm availability evidence | Complete for rc.1; post-rc rename remains future work | | Claude and Codex plugin publication | Contact/submission path with required artifacts and status | Publication readiness, naming matrix, and May 12 dry-run evidence document plugin validation, clean-checkout Claude tag/install smoke, and Codex marketplace CLI shape | Needs explicit approval for real tag/push and marketplace submission | diff --git a/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md index dd3cdccd..38fc5ff1 100644 --- a/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md +++ b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md @@ -7,9 +7,9 @@ npm publication, plugin tag, marketplace submission, or announcement post. | Field | Evidence | | --- | --- | -| Upstream main | `80f6c27957cb2bee7614f093ec7237afd93c3c9f` | +| Upstream main | `f010f7833212794da7ba74c0f88d8e05723efe1f` | | Git remote | `https://github.com/affaan-m/everything-claude-code.git` | -| Evidence scope | Current `main` after PR #1970 workflow-security validator bypass fixes, PR #1971 metrics bridge cost-reporting fixes, PR #1972 `uncloud` skill merge, PR #1973 stale script cleanup, issue #1974 cost-reporting verification/closure, PR #1976 OpenAI/AstraFlow provider response guards, catalog/operator dashboard refresh, Mini Shai-Hulud/TanStack protection recheck, current-head CI/security scan, work-items sync, and Linear progress sync | +| Evidence scope | Current `main` after PR #1970 workflow-security validator bypass fixes, PR #1971 metrics bridge cost-reporting fixes, PR #1972 `uncloud` skill merge, PR #1973 stale script cleanup, issue #1974 cost-reporting verification/closure, PR #1976 OpenAI/AstraFlow provider response guards, catalog/operator dashboard refresh, ECC-Tools Wrangler OAuth billing readback mirror, Mini Shai-Hulud/TanStack protection recheck, current-head CI/security scan, work-items sync, and Linear progress sync | | Local status caveat | `git status --short --branch` showed `## main...origin/main` plus unrelated untracked `docs/drafts/`; generated evidence files are committed after the source snapshot they describe | The actual release operator should repeat all publish-facing checks from the @@ -24,7 +24,7 @@ final release commit with a strictly clean checkout before publishing. | Discussion audit | `npm run discussion:audit -- --json` | Ready; 58 sampled discussions in `affaan-m/everything-claude-code`, 0 needing maintainer touch, 0 answerable discussions missing accepted answer, and 0 fetch errors | | Platform audit | `node scripts/platform-audit.js --json --allow-untracked docs/drafts/` | Ready; tracked repos report 0 open PRs, 0 open issues, 0 discussion maintainer-touch gaps, 0 answerable Q&A missing accepted answers, and 0 blocking dirty files | | Work-items sync | `node scripts/work-items.js sync-github --repo ` for five tracked repos; `node scripts/status.js --json`; `node scripts/work-items.js list --json` | All five tracked repos synced with 0 open PRs/issues and no changed work items; local status reports 0 open, 0 blocked, and 0 closed work items | -| Operator dashboard | `node scripts/operator-readiness-dashboard.js --markdown --allow-untracked docs/drafts/ --write docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md` | Generated current dashboard for `80f6c27957cb2bee7614f093ec7237afd93c3c9f`; dashboard ready true, publication ready false because release, npm, plugin, billing, and announcement gates are approval-gated | +| Operator dashboard | `node scripts/operator-readiness-dashboard.js --markdown --allow-untracked docs/drafts/ --write docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md` | Generated current dashboard for `e53933de1bc62b748f6ecb2df9a64d4290742625`; dashboard ready true, publication ready false because release, npm, plugin, billing, and announcement gates are approval-gated | Tracked repositories in the platform audit and work-items sync were: @@ -62,7 +62,7 @@ Tracked repositories in the platform audit and work-items sync were: | npm signatures | `npm audit signatures` | 213 verified registry signatures; 17 verified attestations | | Workflow security | `node scripts/ci/validate-workflow-security.js` | Validated 8 workflow files | | AgentShield project scan | `npx --no-install ecc-agentshield scan --format json` | Grade A / 99; 0 critical, 0 high, 0 medium; 6 low docs-example skill telemetry/governance findings | -| Current-head CI security scan | `gh run view 26014623528 --repo affaan-m/everything-claude-code --json status,conclusion,jobs,url` | Completed successfully for `80f6c27957cb2bee7614f093ec7237afd93c3c9f`; 37/37 CI jobs passed, including lint, workflow/component validation, coverage, cross-platform package-manager tests, npm audit, and supply-chain IOC scan | +| Current-head CI security scan | `gh run view 26016495976 --repo affaan-m/everything-claude-code --json status,conclusion,jobs,url` | Completed successfully for `f010f7833212794da7ba74c0f88d8e05723efe1f`; 37/37 CI jobs passed, including lint, workflow/component validation, coverage, cross-platform package-manager tests, npm audit, and supply-chain IOC scan | | Latest Supply-Chain Watch | `gh run view 26010432490 --repo affaan-m/everything-claude-code --json status,conclusion,headSha,url` | Completed successfully for `25ac57ac40e9fc5a0606e76e6339e72c79748c99`; rerun from the final release commit before publication | ## Linear Progress Sync @@ -99,6 +99,6 @@ Tracked repositories in the platform audit and work-items sync were: The tracked public PR queue, issue queue, discussion queue, local work-items bridge, and Mini Shai-Hulud/TanStack protection loop are current on -May 18, 2026 for `80f6c279`. This improves publication readiness but does not +May 18, 2026 for `f010f783`. This improves publication readiness but does not replace the approval-gated release, package, plugin, billing, and announcement steps in `publication-readiness.md`.