From efda22657b328ea3e305d30a7564cb02bb842a25 Mon Sep 17 00:00:00 2001 From: Affaan Mustafa Date: Sun, 17 May 2026 23:26:56 -0400 Subject: [PATCH] docs: refresh rc1 evidence snapshot --- .../operator-readiness-dashboard-2026-05-18.md | 4 ++-- .../publication-evidence-2026-05-18.md | 17 ++++++++++------- .../2.0.0-rc.1/release-url-ledger-2026-05-18.md | 14 ++++++++------ 3 files changed, 20 insertions(+), 15 deletions(-) diff --git a/docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md b/docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md index 5a950f24..10c9b95c 100644 --- a/docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md +++ b/docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md @@ -2,8 +2,8 @@ This dashboard is generated by `npm run operator:dashboard`. It is an operator snapshot, not release approval. -Generated: 2026-05-18T03:07:55.408Z -Commit: 1e7e449a980a8f23d02bca60bb7fa60d6685eb15 +Generated: 2026-05-18T03:24:54.869Z +Commit: 81fca2cea6f1399c52c8faa70f9a17e42f0bd447 Status: work remaining ## Current Status diff --git a/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md index 251226ca..80db8de8 100644 --- a/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md +++ b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md @@ -7,9 +7,9 @@ npm publication, plugin tag, marketplace submission, or announcement post. | Field | Evidence | | --- | --- | -| Upstream main | `3b7e0ba30a027ffd3319c2f145c63076c296d80a` | +| Upstream main | `81fca2cea6f1399c52c8faa70f9a17e42f0bd447` | | Git remote | `https://github.com/affaan-m/everything-claude-code.git` | -| Evidence scope | Current `main` after PR #1970 workflow-security validator bypass fixes, PR #1971 metrics bridge cost-reporting fixes, PR #1972 `uncloud` skill merge, catalog/operator dashboard refresh, Mini Shai-Hulud/TanStack protection recheck, current-head Supply-Chain Watch, work-items sync, and Linear progress sync | +| Evidence scope | Current `main` after PR #1970 workflow-security validator bypass fixes, PR #1971 metrics bridge cost-reporting fixes, PR #1972 `uncloud` skill merge, PR #1973 stale script cleanup, issue #1974 cost-reporting verification/closure, catalog/operator dashboard refresh, Mini Shai-Hulud/TanStack protection recheck, current-head CI/security scan, work-items sync, and Linear progress sync | | Local status caveat | `git status --short --branch` showed `## main...origin/main` plus unrelated untracked `docs/drafts/`; generated evidence files are committed after the source snapshot they describe | The actual release operator should repeat all publish-facing checks from the @@ -24,7 +24,7 @@ final release commit with a strictly clean checkout before publishing. | Discussion audit | `npm run discussion:audit -- --json` | Ready; 58 sampled discussions in `affaan-m/everything-claude-code`, 0 needing maintainer touch, 0 answerable discussions missing accepted answer, and 0 fetch errors | | Platform audit | `node scripts/platform-audit.js --json --allow-untracked docs/drafts/` | Ready; tracked repos report 0 open PRs, 0 open issues, 0 discussion maintainer-touch gaps, 0 answerable Q&A missing accepted answers, and 0 blocking dirty files | | Work-items sync | `node scripts/work-items.js sync-github --repo ` for five tracked repos; `node scripts/status.js --json`; `node scripts/work-items.js list --json` | All five tracked repos synced with 0 open PRs/issues and no changed work items; local status reports 0 open, 0 blocked, and 0 closed work items | -| Operator dashboard | `npm run operator:dashboard -- --markdown --allow-untracked docs/drafts/ --write docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md` | Generated current dashboard for `3b7e0ba30a027ffd3319c2f145c63076c296d80a`; dashboard ready true, publication ready false because release, npm, plugin, billing, and announcement gates are approval-gated | +| Operator dashboard | `node scripts/operator-readiness-dashboard.js --markdown --allow-untracked docs/drafts/ --write docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md` | Generated current dashboard for `81fca2cea6f1399c52c8faa70f9a17e42f0bd447`; dashboard ready true, publication ready false because release, npm, plugin, billing, and announcement gates are approval-gated | Tracked repositories in the platform audit and work-items sync were: @@ -41,8 +41,10 @@ Tracked repositories in the platform audit and work-items sync were: | PR #1970 | Merged workflow-security validator fixes for quoted `write-all` and `refs/pull/*` checkout bypasses; main includes `e06d0382` and `7bb31720` from that slice | | PR #1971 | Merged metrics bridge cost-reporting fixes, full costs-file scan behavior, and persistent warning de-duplication across hook subprocesses; main includes commits through `9b1d8918` | | PR #1972 | Merged `skills/uncloud/SKILL.md` with activation structure and uncloud command references; main includes `8b6aed0`, `2e5f30f`, and `caee7cf` | -| Catalog/operator refresh | Pushed `3b7e0ba3` to refresh generated catalog count and operator dashboard state after #1972 | -| Public queues | Rechecked after the merge batch; 0 PRs, 0 issues, and 0 discussion gaps remain across tracked repos | +| PR #1973 | Merged stale `skills/strategic-compact/suggest-compact.sh` removal after confirming the active hook is `scripts/hooks/suggest-compact.js`; remote main includes `812d4d06` | +| Issue #1974 | Closed after verifying current `origin/main` already reads the latest cumulative metrics bridge cost row and focused cost/metrics tests pass | +| Catalog/operator refresh | Pushed `81fca2ce` to refresh generated catalog count, URL ledger, and operator dashboard state after #1973/#1974 | +| Public queues | Rechecked after the merge and issue-closure batch; 0 PRs, 0 issues, and 0 discussion gaps remain across tracked repos | ## Supply-Chain And Security Evidence @@ -58,7 +60,8 @@ Tracked repositories in the platform audit and work-items sync were: | npm signatures | `npm audit signatures` | 213 verified registry signatures; 17 verified attestations | | Workflow security | `node scripts/ci/validate-workflow-security.js` | Validated 8 workflow files | | AgentShield project scan | `npx --no-install ecc-agentshield scan --format json` | Grade A / 99; 0 critical, 0 high, 0 medium; 6 low docs-example skill telemetry/governance findings | -| Current-head Supply-Chain Watch | `gh workflow run supply-chain-watch.yml --ref main`; `gh run watch 26009825837 --exit-status` | Completed successfully for `3b7e0ba30a027ffd3319c2f145c63076c296d80a`, including no-lifecycle install, npm audit/signature verification, scanner fixtures, advisory source fixtures, IOC/advisory report generation, workflow-security validation, and artifact upload | +| Current-head CI security scan | `gh run view 26011460500 --repo affaan-m/everything-claude-code --json status,conclusion,jobs,url` | Completed successfully for `81fca2cea6f1399c52c8faa70f9a17e42f0bd447`; 37/37 CI jobs passed, including lint, workflow/component validation, coverage, cross-platform package-manager tests, npm audit, and supply-chain IOC scan | +| Latest Supply-Chain Watch | `gh run view 26010432490 --repo affaan-m/everything-claude-code --json status,conclusion,headSha,url` | Completed successfully for `25ac57ac40e9fc5a0606e76e6339e72c79748c99`; rerun from the final release commit before publication | ## Linear Progress Sync @@ -90,6 +93,6 @@ Tracked repositories in the platform audit and work-items sync were: The tracked public PR queue, issue queue, discussion queue, local work-items bridge, and Mini Shai-Hulud/TanStack protection loop are current on -May 18, 2026 for `3b7e0ba3`. This improves publication readiness but does not +May 18, 2026 for `81fca2ce`. This improves publication readiness but does not replace the approval-gated release, package, plugin, billing, and announcement steps in `publication-readiness.md`. diff --git a/docs/releases/2.0.0-rc.1/release-url-ledger-2026-05-18.md b/docs/releases/2.0.0-rc.1/release-url-ledger-2026-05-18.md index af2a5e11..6f11d98d 100644 --- a/docs/releases/2.0.0-rc.1/release-url-ledger-2026-05-18.md +++ b/docs/releases/2.0.0-rc.1/release-url-ledger-2026-05-18.md @@ -5,22 +5,24 @@ valid after the approval-gated release, package, plugin, and announcement steps. Regenerate it from the final release commit before posting any public announcement. -Captured from commit `25ac57ac40e9fc5a0606e76e6339e72c79748c99` on -2026-05-18. +Captured from source snapshot +`81fca2cea6f1399c52c8faa70f9a17e42f0bd447` on 2026-05-18. The ledger file +may be committed in a later docs-only refresh after the evidence snapshot it +describes. ## Live Now | Surface | URL | Verification | | --- | --- | --- | | Repository | | `git remote get-url origin` | -| Current evidence commit | | `git rev-parse HEAD` | -| Release pack folder | | Pushed to `main` at `25ac57ac` | +| Evidence source commit | | `git rev-parse HEAD` at evidence capture | +| Release pack folder | | Release pack evidence captured from `81fca2ce` | | Release notes draft | | In-tree release copy | | Hermes setup guide | | In-tree sanitized Hermes guide | | May 18 evidence snapshot | | Current strongest readiness evidence | | May 18 operator dashboard | | Prompt-to-artifact dashboard | -| Pushed-head CI | | CI passed for `25ac57ac` | -| Pushed-head Supply-Chain Watch | | Supply-Chain Watch passed for `25ac57ac` | +| Pushed-head CI | | CI passed 37/37 jobs for `81fca2ce`, including the supply-chain IOC scan job | +| Latest Supply-Chain Watch | | Supply-Chain Watch passed for `25ac57ac`; rerun from the final release commit before publication | | npm package page | | `npm view ecc-universal name version dist-tags --json` returned `latest: 1.10.0`; rc.1 is not published yet | | Codex marketplace CLI docs | | Official docs list `codex plugin marketplace add` for GitHub shorthand, Git URLs, SSH URLs, and local marketplace roots | | Codex official Plugin Directory status | | Official docs say public Plugin Directory publishing and self-serve management are coming soon |