Univeracity · jeremydixon22 · Aug 11, 2026 · Aug 11, 2026
@@ -10,6 +10,15 @@ Describe the portable behavior or documentation changed and why.
 - [ ] No credentials, customer data, local paths, generated artifacts, or deployment identities are included.
 - [ ] Release artifacts and public export were rehearsed when a package, client, container, or workflow changed.
 
+## Public information review
+
+Does this change expose new public information? **No / Yes**
+
+If yes, identify the newly public design, strategy, operational detail, example,
+diagram, evidence, or roadmap material and record why publication is intentional.
+Internal planning and private operational context remain outside the public
+repository unless their publication is explicitly authorized.
+
 ## Compatibility and operations
 
 Call out breaking behavior, migrations, new permissions, deployment changes, and known limits. Write

@@ -0,0 +1,60 @@
+name: AWS Live Qualification
+
+on:
+  workflow_dispatch:
+    inputs:
+      provider_version:
+        description: AWS managed-service version label for the redacted receipt
+        required: true
+        type: string
+
+permissions:
+  contents: read
+  id-token: write
+
+concurrency:
+  group: aws-live-qualification
+  cancel-in-progress: false
+
+jobs:
+  qualify:
+    name: S3, DynamoDB, and SQS live gate
+    runs-on: ubuntu-latest
+    timeout-minutes: 35
+    environment: aws-live-qualification
+    env:
+      DOTNET_CLI_TELEMETRY_OPTOUT: "1"
+      DOTNET_NOLOGO: "1"
+      VYRAL_AWS_LIVE_PROVIDER_VERSION: ${{ inputs.provider_version }}
+      VYRAL_AWS_LIVE_AUTH_MODE: github_oidc
+      VYRAL_AWS_LIVE_RESULT_PATH: artifacts/qualification/aws-live-gate.json
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Authenticate with a short-lived AWS role session
+        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
+        with:
+          role-to-assume: ${{ secrets.AWS_LIVE_ROLE_ARN }}
+          aws-region: ${{ secrets.AWS_LIVE_REGION }}
+          role-session-name: vyral-live-qualification
+          mask-aws-account-id: true
+
+      - name: Set up .NET
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+        with:
+          dotnet-version: 10.0.x
+
+      - name: Restore
+        run: dotnet restore Vyral.sln
+
+      - name: Run isolated AWS live qualification
+        run: scripts/validate-aws-live-qualification.sh
+
+      - name: Upload redacted live evidence
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: aws-live-gate-${{ github.sha }}
+          path: artifacts/qualification/aws-live-gate.json
+          if-no-files-found: warn
@@ -80,6 +80,9 @@ jobs:
           # This module intentionally has no go.sum yet; setup-go's cache lookup warns on it.
           cache: false
 
+      - name: Verify the install-free source quickstart
+        run: python -I scripts/verify-source-quickstart.py
+
       - name: Test JavaScript client
         working-directory: clients/javascript
         run: |
@@ -119,6 +122,7 @@ jobs:
           python3 scripts/verify-public-sdk-surface.py
           python3 scripts/verify-public-contract-schemas.py
           python3 scripts/verify-markdown-links.py
+          python3 scripts/verify-publication-cohort.py
           python3 scripts/verify-publication-policy.py
           python3 scripts/generate-sdk-types.py
           python3 scripts/sync-python-runtime-contracts.py

@@ -43,6 +43,9 @@ jobs:
           cache: pip
           cache-dependency-path: runtimes/python/pyproject.toml
 
+      - name: Verify the install-free source quickstart
+        run: python -I scripts/verify-source-quickstart.py
+
       - name: Install qualification tooling
         run: >-
           python -m pip install

@@ -1,5 +1,5 @@
 {
-  "fileCount": 837,
+  "fileCount": 844,
   "files": [
     {
       "mode": "644",
@@ -49,12 +49,17 @@
     {
       "mode": "644",
       "path": ".github/pull_request_template.md",
-      "sha256": "ac9923dbb8f62d8b8daef7742187a99cdbade669c4c728de3c297e5e3915b48d"
+      "sha256": "2329c64ad1437e0590b25827751bb075b50c6b1bcb26aa07b9dc472553221827"
+    },
+    {
+      "mode": "644",
+      "path": ".github/workflows/aws-live-qualification.yml",
+      "sha256": "4f6ce30537ce142d0140a24a435e75f66e9c07e3cc4665ea0a35640102418c98"
     },
     {
       "mode": "644",
       "path": ".github/workflows/ci.yml",
-      "sha256": "f2ee6e2e92d2cd36fe5fc65928be57e2c77620c062c75ce7e867320937a66036"
+      "sha256": "56c55a1fa8d81450b3332c67dad30974568fe431a3e91e76530153c57d52df74"
     },
     {
       "mode": "644",
@@ -84,7 +89,7 @@
     {
       "mode": "644",
       "path": ".github/workflows/python-runtime-qualification.yml",
-      "sha256": "8593187e599e4a4d3659c68aa2a0db339dbdc2df00558169fd48b6da8816e326"
+      "sha256": "31ad9f66d0d3207ab026809cc4f6c8d6d74459aa1218bced85134347e8a22868"
     },
     {
       "mode": "644",
@@ -134,7 +139,7 @@
     {
       "mode": "644",
       "path": "README.md",
-      "sha256": "4181ac731be532f77e8044780902d57f925da784e169d147094ccc4a3311840e"
+      "sha256": "918e59fa888aab5ec1951d4522feda022dc324e938ca5ef4f3c715841ecfe16a"
     },
     {
       "mode": "644",
@@ -174,7 +179,7 @@
     {
       "mode": "644",
       "path": "benchmarks/retrieval/README.md",
-      "sha256": "2eb3d5e8bdb8518fa3ddadf29b4deb6d29d1fb465f1172a63c0648cc46669b94"
+      "sha256": "12d5f1486cb4b3a8b142882a080d9d4e144e24af0d26ada479b004f467352d68"
     },
     {
       "mode": "644",
@@ -184,7 +189,7 @@
     {
       "mode": "644",
       "path": "benchmarks/retrieval/ripgrep-vs-vyral-local-2026-08-11.json",
-      "sha256": "20fd30ca51b43ca7ac8a36a95be3dff346fd94af39c3d6fdc57ad1d0c2c4c273"
+      "sha256": "8bfcc43b4ba24f02be810860c7bc011814aa4f5d45a67df3a99fa95900687ba3"
     },
     {
       "mode": "644",
@@ -604,12 +609,12 @@
     {
       "mode": "644",
       "path": "docs/guides/source-native-retrieval.md",
-      "sha256": "3bc7161ed4b1d83ee3a8461968bf7bc681ca49a38b4535ec81763629ce0e941e"
+      "sha256": "c6e22d6137d6d1544d752b722dc634c69f4429207cd298f2b590948528ba54a7"
     },
     {
       "mode": "644",
       "path": "docs/maintainers/releasing.md",
-      "sha256": "a63504fa1f48133f87dc0f3871a5b925bfa1f29a0472f7684938568b44732f43"
+      "sha256": "888945792fed15e89bd1241c6d828b758a6daaba9130a79eeeff74bd8fc375ab"
     },
     {
       "mode": "644",
@@ -634,7 +639,7 @@
     {
       "mode": "644",
       "path": "examples/README.md",
-      "sha256": "6ebe3db180f7c8c18bfa35fb433168cc6e4e8523848b39e0c20b15d7b570ef01"
+      "sha256": "a6b9159b28ace04cb37f1398e863235dd8ba87030e70899cedaf70ac5e5fd79f"
     },
     {
       "mode": "644",
@@ -666,6 +671,11 @@
       "path": "examples/python/rag_quickstart.py",
       "sha256": "6210fcbcfaa8419b30576096cc48f82ff87a8c1de04e0acb3aa64d7edfdc7559"
     },
+    {
+      "mode": "644",
+      "path": "examples/python/retrieval_migration.py",
+      "sha256": "dc7ae7b1fb37aacb9df88116535e8baf4261067775963eb5546638c34224d2f4"
+    },
     {
       "mode": "644",
       "path": "examples/python/source_native_search.py",
@@ -676,10 +686,15 @@
       "path": "packaging/nuget/README.md",
       "sha256": "bb1b13e60a8bb75ef79976cf530f32719b4d37fabb1a8a0e9dc9570cb370751a"
     },
+    {
+      "mode": "644",
+      "path": "packaging/publication-cohort.json",
+      "sha256": "fbb6e176bc2fdeff3b8fb071ee34565577ce4e13d8bacdf392fb6e830ef684fc"
+    },
     {
       "mode": "644",
       "path": "qualification/README.md",
-      "sha256": "1adbe334d87252798238886fda01c0eb477f1e59f95831ed30c99de1aa4aea01"
+      "sha256": "dc72562fe45928550130c661474035f2f92eef0ca9ae82b58967d2ad70ee0759"
     },
     {
       "mode": "644",
@@ -699,7 +714,7 @@
     {
       "mode": "644",
       "path": "runtimes/python/README.md",
-      "sha256": "f2ae828afaf0af80241b1acfc38f2f536d02d217fe129a6c08190707fe536b20"
+      "sha256": "7a092b02573f2b01bfa4ae5b53227db9e0075a5bae7047db8eafe4f8b9a6574e"
     },
     {
       "mode": "644",
@@ -839,7 +854,7 @@
     {
       "mode": "644",
       "path": "runtimes/python/src/vyral_runtime/_starter.py",
-      "sha256": "7c628c66603796ecfc3e083221cccb9a4ba54da6739323e4cbd13b064349f5a4"
+      "sha256": "2f0a5b393b97cc813462199aa46f19c527bcb9f35726a02087ecf852f01bf96c"
     },
     {
       "mode": "644",
@@ -1019,7 +1034,7 @@
     {
       "mode": "644",
       "path": "runtimes/python/src/vyral_runtime/host/cli.py",
-      "sha256": "a4216db3116918da043902525d84a8a73a1d9563e016b933310818636de813f0"
+      "sha256": "e9d168517ba4fa3b73368af7982f5175c7104101eec498c69435a522d8e1e530"
     },
     {
       "mode": "644",
@@ -1254,7 +1269,7 @@
     {
       "mode": "644",
       "path": "runtimes/python/tests/test_host_cli.py",
-      "sha256": "38776f48036cd936a80a95e99a71361e290362d03c79caa37ad05c68243731cc"
+      "sha256": "1e81661bf783c45fa1f719a330ab435307ed2a9481c7e96319260d98581229ee"
     },
     {
       "mode": "644",
@@ -1459,7 +1474,7 @@
     {
       "mode": "644",
       "path": "scripts/audit-github-launch-controls.py",
-      "sha256": "5a76b0a411c0ca89becfbbbf37cdcce5ffc8a7b637129d42a8ded8233afdf349"
+      "sha256": "56c8d03cbabbaa7bee80a5c73c23ac7a10bf4a44a38fa15503c8adc23d246750"
     },
     {
       "mode": "755",
@@ -1484,7 +1499,7 @@
     {
       "mode": "755",
       "path": "scripts/export-public-tree.py",
-      "sha256": "3854825cf1d2c38c4a87633479d6b1a68f4209644430b78dcc0f487f70fc0ff5"
+      "sha256": "d846346a72c2c748f070c01ca544c5be9824339b0be86263b7c5cd90b1d65bd9"
     },
     {
       "mode": "755",
@@ -1574,7 +1589,7 @@
     {
       "mode": "644",
       "path": "scripts/test-audit-github-launch-controls.py",
-      "sha256": "4314da8422e7ffa65f62c3c142deebf43dbbaf25b156c4affc12afc0ef2aecc3"
+      "sha256": "87b8ad83721e5c3ad30b00b1470c7bff04940594cb502aa580af5130c48f2bb5"
     },
     {
       "mode": "755",
@@ -1616,6 +1631,11 @@
       "path": "scripts/test-scan-release-secrets.sh",
       "sha256": "9989cdae3cb02028d9b4a61750f3ee0dbfcd4bf9cbcf31cf29f13252d9c8a962"
     },
+    {
+      "mode": "755",
+      "path": "scripts/test-validate-aws-live-qualification.sh",
+      "sha256": "74bc95e68629d76cea581c950e7fbc07c59b029491a6c8508e9a97845991145d"
+    },
     {
       "mode": "755",
       "path": "scripts/test-validate-aws-opensearch-live.sh",
@@ -1646,6 +1666,11 @@
       "path": "scripts/validate-aws-execution-live.sh",
       "sha256": "567bcb9753925874312829c3054143045e8aa18809124731918c4957a1189d18"
     },
+    {
+      "mode": "755",
+      "path": "scripts/validate-aws-live-qualification.sh",
+      "sha256": "652819a9a14acc628996525f065d9ed1427281b3fd8a41c892263576e1e71200"
+    },
     {
       "mode": "755",
       "path": "scripts/validate-aws-opensearch-live.sh",
@@ -1766,10 +1791,15 @@
       "path": "scripts/verify-public-sdk-surface.py",
       "sha256": "342889e432211f89016bc3cdb0770140e531f4c12c120fded0a5fb4fd4a60aea"
     },
+    {
+      "mode": "644",
+      "path": "scripts/verify-publication-cohort.py",
+      "sha256": "7855de2e76c8db7a456858c1a845d30424723fb0f6065a5d2a8cb646129f2385"
+    },
     {
       "mode": "644",
       "path": "scripts/verify-publication-policy.py",
-      "sha256": "aaebed0e149ce65eb36333961abfa78a212dc8a5ac39b61c7e8d7c900e8eebff"
+      "sha256": "49657eb43f9963eff79c10f760c419c719016a9389d047daaedcf29473e5393f"
     },
     {
       "mode": "755",
@@ -1799,7 +1829,7 @@
     {
       "mode": "755",
       "path": "scripts/verify-python-runtime-install.py",
-      "sha256": "e58289de89a7b26a1ec86cb30413351532f6f011d736814bf43e30150f8235fe"
+      "sha256": "857db8f58f699da296fc13e8c8117e11e5741d03cc551dfe73a3cd4b3278dba9"
     },
     {
       "mode": "755",
@@ -1829,7 +1859,7 @@
     {
       "mode": "755",
       "path": "scripts/verify-release-artifacts.sh",
-      "sha256": "b84d3aa20a74f49ebce0f34b18c79099335dea9f6c9808eb9182febfc65cc92e"
+      "sha256": "35fa42e39f087c7a68ed50e357edbad3f9595ca01720d5c5a138a78ebca6d0c0"
     },
     {
       "mode": "755",
@@ -1841,6 +1871,11 @@
       "path": "scripts/verify-runtime-conformance.py",
       "sha256": "14f4e46a8093804e522982f980d474441ce3829413cbb7b6923bddb7fac5764d"
     },
+    {
+      "mode": "644",
+      "path": "scripts/verify-source-quickstart.py",
+      "sha256": "b04c73826aa710f4e9b5b9ed711cf178f918adc9edf4812ebc1aa4c1f4dce01b"
+    },
     {
       "mode": "755",
       "path": "scripts/verify-version-policy.py",
@@ -4189,5 +4224,5 @@
   ],
   "schemaVersion": 1,
   "sourceDirty": false,
-  "treeSha256": "e6b7959543b600c6eed8e33b420b1cecd373519e2a212af9f81f7817bc9f5058"
+  "treeSha256": "1bb721ab03e70d9fefeaa9581469cb8755da58764705bca6a36b1e81acdd9aa4"
 }
@@ -42,7 +42,7 @@ Create a small editable application when you are ready to build:
 
 ```bash
 ./scripts/vyral init
-python ./vyral_app.py
+./scripts/vyral run ./vyral_app.py
 ```
 
 The installed command is simply `vyral`; `vyral-runtime` remains a compatibility