Add Docker-only v0.1 evaluation and release manifest

.github/workflows/ci.yml

@@ -86,7 +86,8 @@ jobs:
         run: |
           docker compose --file compose.yaml config --quiet
           docker compose --file compose.yaml --file compose.router-nacos-secure.yaml --profile router-nacos-secure config --quiet
-          if grep -nE '^[[:space:]]+build:|image:[[:space:]].*(latest|:(main|master))([[:space:]"@]|$)' compose.yaml; then
+          docker compose --file compose.yaml --file compose.evaluation.yaml config --quiet
+          if grep -nE '^[[:space:]]+build:|image:[[:space:]].*(latest|:(main|master))([[:space:]"@]|$)' compose.yaml compose.evaluation.yaml; then
             echo 'Compose contains a source build or floating image.' >&2
             exit 1
           fi
@@ -228,7 +229,7 @@ jobs:
           for path in apps agents sdks src deploy tests/e2e; do
             test ! -e "$path"
           done
-          if grep -nE '^[[:space:]]+build:|image:[[:space:]].*(latest|:(main|master))([[:space:]"@]|$)' compose.yaml; then
+          if grep -nE '^[[:space:]]+build:|image:[[:space:]].*(latest|:(main|master))([[:space:]"@]|$)' compose.yaml compose.evaluation.yaml; then
             echo 'Compose contains a source build or floating image.' >&2
             exit 1
           fi

.github/workflows/release.yml

@@ -0,0 +1,149 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+  packages: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    timeout-minutes: 100
+    steps:
+      - name: Check out the tagged Stack revision
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00
+        with:
+          go-version-file: go.mod
+          cache-dependency-path: go.sum
+
+      - name: Verify release identity and source
+        shell: bash
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          [[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]
+          test "$(git cat-file -t "$RELEASE_TAG")" = tag
+          test "$(git rev-list -n 1 "$RELEASE_TAG")" = "$GITHUB_SHA"
+          go run ./cmd/manifest-validator components.json
+          go test ./...
+          go vet ./...
+
+      - name: Download component release evidence
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          mkdir -p evidence/core evidence/console evidence/sdk evidence/samples
+          gh release download "$RELEASE_TAG" --repo NeKiro-project/NeKiro --pattern images.json --dir evidence/core
+          gh release download "$RELEASE_TAG" --repo NeKiro-project/NeKiro-Console --pattern images.json --dir evidence/console
+          gh release download "$RELEASE_TAG" --repo NeKiro-project/nekiro-sdk-go --pattern release.json --dir evidence/sdk
+          gh release download "$RELEASE_TAG" --repo NeKiro-project/NeKiro-Samples --pattern images.json --dir evidence/samples
+
+      - name: Validate exact compatibility matrix
+        shell: bash
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          test "$(jq -r .commitSha evidence/core/images.json)" = "$(jq -r .components.core.commitSha components.json)"
+          test "$(jq -r .commitSha evidence/console/images.json)" = "$(jq -r .components.console.commitSha components.json)"
+          test "$(jq -r .commitSha evidence/sdk/release.json)" = "$(jq -r .components.sdkGo.commitSha components.json)"
+          test "$(jq -r .commitSha evidence/samples/images.json)" = "$(jq -r .components.samples.commitSha components.json)"
+          for file in evidence/core/images.json evidence/console/images.json evidence/sdk/release.json evidence/samples/images.json; do
+            test "$(jq -r .tag "$file")" = "$RELEASE_TAG"
+          done
+          test "$(jq -r .platformApiVersion evidence/core/images.json)" = v1
+          test "$(jq -r .platformApiVersion evidence/console/images.json)" = v1
+          test "$(jq -r .platformApiVersion evidence/sdk/release.json)" = 1
+
+      - name: Resolve immutable component image references
+        shell: bash
+        run: |
+          echo "CONTROL_IMAGE=$(jq -r '.images.controlPlane.reference + "@" + .images.controlPlane.digest' evidence/core/images.json)" >> "$GITHUB_ENV"
+          echo "ROUTER_IMAGE=$(jq -r '.images.a2aRouter.reference + "@" + .images.a2aRouter.digest' evidence/core/images.json)" >> "$GITHUB_ENV"
+          echo "CONSOLE_IMAGE=$(jq -r '.images.console.reference + "@" + .images.console.digest' evidence/console/images.json)" >> "$GITHUB_ENV"
+          echo "RUNTIME_A_IMAGE=$(jq -r '.images.runtimeA.reference + "@" + .images.runtimeA.digest' evidence/samples/images.json)" >> "$GITHUB_ENV"
+          echo "RUNTIME_B_IMAGE=$(jq -r '.images.runtimeB.reference + "@" + .images.runtimeB.digest' evidence/samples/images.json)" >> "$GITHUB_ENV"
+
+      - name: Authenticate to GHCR
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: echo "$GH_TOKEN" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
+
+      - name: Publish Stack-owned fixture image
+        shell: bash
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          docker buildx create --use
+          fixture_image="ghcr.io/nekiro-project/nekiro-nacos-secure-fixture:$RELEASE_TAG"
+          docker buildx build \
+            --file tests/fixtures/nacos-secure-fixture.Dockerfile \
+            --platform linux/amd64,linux/arm64 \
+            --provenance=mode=max --sbom=true \
+            --metadata-file fixture-metadata.json \
+            --tag "$fixture_image" --push .
+          fixture_digest=$(jq -r '.["containerimage.digest"]' fixture-metadata.json)
+          [[ "$fixture_digest" =~ ^sha256:[0-9a-f]{64}$ ]]
+          echo "FIXTURE_IMAGE=$fixture_image@$fixture_digest" >> "$GITHUB_ENV"
+
+      - name: Publish digest-pinned evaluator image
+        shell: bash
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          evaluator_image="ghcr.io/nekiro-project/nekiro-evaluation:$RELEASE_TAG"
+          docker buildx build \
+            --file tests/fixtures/evaluation.Dockerfile \
+            --platform linux/amd64,linux/arm64 \
+            --provenance=mode=max --sbom=true \
+            --build-arg "NEKIRO_CONTROL_PLANE_IMAGE=$CONTROL_IMAGE" \
+            --build-arg "NEKIRO_A2A_ROUTER_IMAGE=$ROUTER_IMAGE" \
+            --build-arg "NEKIRO_CONSOLE_IMAGE=$CONSOLE_IMAGE" \
+            --build-arg "NEKIRO_RUNTIME_A_IMAGE=$RUNTIME_A_IMAGE" \
+            --build-arg "NEKIRO_RUNTIME_B_IMAGE=$RUNTIME_B_IMAGE" \
+            --build-arg "NEKIRO_NACOS_SECURE_PROXY_IMAGE=$FIXTURE_IMAGE" \
+            --metadata-file evaluator-metadata.json \
+            --tag "$evaluator_image" --push .
+          evaluator_digest=$(jq -r '.["containerimage.digest"]' evaluator-metadata.json)
+          [[ "$evaluator_digest" =~ ^sha256:[0-9a-f]{64}$ ]]
+          echo "EVALUATOR_IMAGE=$evaluator_image@$evaluator_digest" >> "$GITHUB_ENV"
+
+      - name: Prove the published one-command evaluation
+        run: docker run --rm --privileged "$EVALUATOR_IMAGE"
+
+      - name: Write release manifest and exact command
+        shell: bash
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          printf 'docker run --rm --privileged %s\n' "$EVALUATOR_IMAGE" > evaluation-command.txt
+          jq -n \
+            --arg tag "$RELEASE_TAG" --arg commit "$GITHUB_SHA" \
+            --arg coreCommit "$(jq -r .components.core.commitSha components.json)" \
+            --arg consoleCommit "$(jq -r .components.console.commitSha components.json)" \
+            --arg sdkCommit "$(jq -r .components.sdkGo.commitSha components.json)" \
+            --arg samplesCommit "$(jq -r .components.samples.commitSha components.json)" \
+            --arg transportTag "$(jq -r .components.transportGo.tag components.json)" \
+            --arg transportCommit "$(jq -r .components.transportGo.commitSha components.json)" \
+            --arg controlImage "$CONTROL_IMAGE" --arg routerImage "$ROUTER_IMAGE" --arg consoleImage "$CONSOLE_IMAGE" \
+            --arg runtimeAImage "$RUNTIME_A_IMAGE" --arg runtimeBImage "$RUNTIME_B_IMAGE" --arg fixtureImage "$FIXTURE_IMAGE" --arg evaluatorImage "$EVALUATOR_IMAGE" \
+            '{schemaVersion:"1",tag:$tag,commitSha:$commit,platformApiVersion:"v1",support:{host:"Docker Linux container backend",architectures:["linux/amd64","linux/arm64"],profile:"evaluation",supported:["Register-Discover-Install-Invoke-Record","Gateway-only Console","exact Release routing","cross-Agent lineage"],experimental:["Docker-only evaluation profile"],deferred:["production deployment profile","Kubernetes packaging","Windows containers"]},components:{core:{tag:$tag,commitSha:$coreCommit,images:{controlPlane:$controlImage,a2aRouter:$routerImage}},console:{tag:$tag,commitSha:$consoleCommit,image:$consoleImage},sdkGo:{tag:$tag,commitSha:$sdkCommit},samples:{tag:$tag,commitSha:$samplesCommit,images:{runtimeA:$runtimeAImage,runtimeB:$runtimeBImage}},transportGo:{tag:$transportTag,commitSha:$transportCommit},stack:{tag:$tag,images:{nacosFixture:$fixtureImage,evaluator:$evaluatorImage}}}}' > release-manifest.json
+          sha256sum release-manifest.json evaluation-command.txt > checksums.txt
+
+      - name: Publish GitHub Release
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: gh release create "$RELEASE_TAG" release-manifest.json evaluation-command.txt checksums.txt --verify-tag --generate-notes --title "NeKiro Stack $RELEASE_TAG"

README.md

@@ -6,6 +6,34 @@ component manifest, Compose wiring, backend acceptance, production browser
 acceptance, and sanitized product logs. It does not own or copy component
 production source.
 
+The v0.1 product boundary exposes one Platform API namespace: `/v1`. Stack
+acceptance asserts that representative `/v2`, `/v3`, and `/v4` routes return
+404; no component probes or falls back to them. Independently versioned event,
+error, Agent Card, and A2A payload schemas keep their own schema versions.
+
+## Docker-only evaluation
+
+Each Stack GitHub Release contains `evaluation-command.txt`. Copying that one
+`docker run` command starts an isolated Docker-in-Docker evaluator, pulls only
+the release's tag-and-digest-pinned images, generates fresh credentials and
+PKI, and runs the complete lifecycle:
+
+```text
+Register -> Discover -> Install -> Invoke -> Record
+```
+
+The readable PASS summary includes `root_task_id`,
+`parent_invocation_id`, `trace_id`, and the observed
+`CAPABILITY_NOT_ALLOWED` failure. The evaluator starts Core, Console, two
+different Agent runtimes, PostgreSQL, and secured Nacos, then removes its
+nested containers, volumes, generated credentials, and PKI. Only Docker is
+required on the host; Git, Go, Node, and repository checkouts are not.
+
+The command uses `--privileged` only for a private daemon inside the disposable
+evaluator container. It never mounts the host Docker socket. This is an
+explicit `evaluation` profile, not a production deployment or configuration
+fallback.
+
 ## Components
 
 `components.json` records exact full commits for core, Console, Go SDK,
@@ -134,6 +162,24 @@ are mutually compatible, which backend/browser checks ran, and the observed
 success signals. A green manifest-only check is not evidence that the product
 loop passed.
 
+## Releases
+
+An annotated Stack semantic tag is accepted only after the same tag's Core,
+Console, SDK, and Samples release evidence matches every exact commit in
+`components.json`. The release workflow builds the Stack-owned secure-Nacos
+fixture and evaluator images with OCI provenance and SBOM attestations, runs
+the published evaluator by immutable digest, and attaches:
+
+- `release-manifest.json`: supported component tags, commits, image digests,
+  Platform API `/v1`, and host requirements;
+- `evaluation-command.txt`: the exact one-command evaluation entrypoint;
+- `checksums.txt`: checksums for both artifacts.
+
+The first release is supported on Docker's Linux container backend for
+`linux/amd64` and `linux/arm64`. Native Kubernetes packaging, Windows
+containers, and production hardening remain deferred rather than silently
+falling back to alternate components.
+
 ## Provenance
 
 The Stack history was exported from