Merge pull request #134 from engineeredsoftware/v38/gate-11-promotion-readiness

V38 Gate 11: Promotion Readiness

Author: geraldarthurdavis

.bitcode/v38-promotion-readiness-report.json

@@ -172,7 +172,15 @@ jobs:
               if [ -f scripts/check-v38-gate10-local-staging-inference-depository-search-rehearsal.mjs ]; then
                 node scripts/check-v38-gate10-local-staging-inference-depository-search-rehearsal.mjs --skip-branch-check --skip-package-tests # check:v38-gate10
               fi
+              if [ -f scripts/check-v38-gate11-promotion-readiness.mjs ]; then
+                node scripts/check-v38-gate11-promotion-readiness.mjs --promotion-mode --skip-branch-check --skip-package-tests # check:v38-gate11
+              fi
             fi
+          elif [ "$POINTER" = "V38" ]; then
+            node scripts/check-bitcode-canonical-inputs.mjs --current-target V38
+            node scripts/check-bitcode-canon-posture-drift.mjs --active-canon V38 --draft-target V39
+            node scripts/check-bitcode-spec-family.mjs --version V38 --mode promoted --current-target V38
+            node scripts/check-v38-gate11-promotion-readiness.mjs --promotion-mode --skip-branch-check --skip-package-tests
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2
             exit 1

.github/workflows/bitcode-canon-quality.yml

@@ -301,7 +301,15 @@ jobs:
               if [ -f scripts/check-v38-gate10-local-staging-inference-depository-search-rehearsal.mjs ]; then
                 node scripts/check-v38-gate10-local-staging-inference-depository-search-rehearsal.mjs --skip-branch-check --skip-package-tests # check:v38-gate10
               fi
+              if [ -f scripts/check-v38-gate11-promotion-readiness.mjs ]; then
+                node scripts/check-v38-gate11-promotion-readiness.mjs --promotion-mode --skip-branch-check --skip-package-tests # check:v38-gate11
+              fi
             fi
+          elif [ "$POINTER" = "V38" ]; then
+            node scripts/check-bitcode-spec-family.mjs --version V38 --mode promoted --current-target V38
+            node scripts/check-bitcode-canonical-inputs.mjs --current-target V38
+            node scripts/check-bitcode-canon-posture-drift.mjs --active-canon V38 --draft-target V39
+            node scripts/check-v38-gate11-promotion-readiness.mjs --promotion-mode --skip-branch-check --skip-package-tests
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2
             exit 1
@@ -408,6 +416,9 @@ jobs:
           if [ -f packages/protocol/test/v38-local-staging-inference-depository-search-rehearsal.test.js ]; then
             pnpm --dir packages/protocol exec node --test --test-force-exit test/v38-local-staging-inference-depository-search-rehearsal.test.js
           fi
+          if [ -f packages/protocol/test/v38-promotion-readiness.test.js ]; then
+            pnpm --dir packages/protocol exec node --test --test-force-exit test/v38-promotion-readiness.test.js
+          fi
           pnpm --filter @bitcode/protocol test
 
       - name: Test staged Reading route and Terminal harness contracts

.github/workflows/bitcode-gate-quality.yml

@@ -0,0 +1,169 @@
+name: V38 Canon Promotion
+
+on:
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+  pull-requests: read
+
+jobs:
+  promote-v38:
+    name: V38 Promotion Validation
+    if: >-
+      ${{
+        github.event_name == 'workflow_dispatch' ||
+        (
+          github.event.pull_request.base.ref == 'main' &&
+          github.event.pull_request.head.ref == 'version/v38' &&
+          github.event.pull_request.head.repo.full_name == github.repository
+        )
+      }}
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout version branch
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref || github.ref_name }}
+          token: ${{ github.token }}
+          fetch-depth: 0
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Validate V38 promotion readiness
+        run: |
+          POINTER="$(cat BITCODE_SPEC.txt)"
+          if [ "$POINTER" = "V37" ]; then
+            node scripts/check-bitcode-spec-family.mjs --version V38 --mode draft --current-target V37
+            node scripts/check-bitcode-canon-posture-drift.mjs --active-canon V37 --draft-target V38
+            node scripts/check-bitcode-canonical-inputs.mjs --current-target V37
+            node scripts/check-v38-gate1-inference-stack-roadmap-opening.mjs --skip-branch-check
+            node scripts/check-v38-gate2-inference-surface-inventory.mjs --skip-branch-check
+            node scripts/check-v38-gate3-ptrr-failsafe-thricified-stack.mjs --skip-branch-check
+            node scripts/check-v38-gate4-prompt-benchmark-report.mjs --skip-branch-check
+            node scripts/check-v38-gate5-inference-telemetry-disclosure-report.mjs --skip-branch-check
+            node scripts/check-v38-gate6-read-need-comprehension-inference-hardening.mjs --skip-branch-check --skip-package-tests
+            node scripts/check-v38-gate7-read-fits-finding-search-embeddings.mjs --skip-branch-check --skip-package-tests
+            node scripts/check-v38-gate8-assetpack-synthesis-economic-traceability.mjs --skip-branch-check --skip-package-tests
+            node scripts/check-v38-gate9-conversation-tool-prompt-inference-parity.mjs --skip-branch-check --skip-package-tests
+            node scripts/check-v38-gate10-local-staging-inference-depository-search-rehearsal.mjs --skip-branch-check --skip-package-tests
+            node scripts/check-v38-gate11-promotion-readiness.mjs --promotion-mode --skip-branch-check --skip-package-tests
+            node scripts/promote-bitcode-canon.mjs --version V38 --commit HEAD --dry-run
+          elif [ "$POINTER" = "V38" ]; then
+            node scripts/check-bitcode-spec-family.mjs --version V38 --mode promoted --current-target V38
+            node scripts/check-bitcode-canonical-inputs.mjs --current-target V38
+            node scripts/check-bitcode-canon-posture-drift.mjs --active-canon V38 --draft-target V39
+            node scripts/check-v38-gate11-promotion-readiness.mjs --promotion-mode --skip-branch-check --skip-package-tests
+          else
+            echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2
+            exit 1
+          fi
+          pnpm test:qa:v28:pipeline-readback
+          pnpm --filter @bitcode/protocol typecheck
+          pnpm --filter @bitcode/protocol test
+          pnpm --filter @bitcode/btd typecheck
+          pnpm --filter @bitcode/btd test
+          npm --prefix protocol-demonstration test
+          npm --prefix protocol-demonstration run test:v28-mvp-qa
+          pnpm --filter @bitcode/pipeline-asset-pack typecheck
+          pnpm --filter @bitcode/pipeline-hosts typecheck
+          pnpm --filter @bitcode/pipeline-asset-pack exec jest --config jest.config.cjs --passWithNoTests --forceExit
+          pnpm --filter @bitcode/pipeline-hosts exec jest --config jest.config.cjs --passWithNoTests --forceExit
+          pnpm --dir uapi exec jest --runTestsByPath \
+            tests/userDataRoute.test.ts \
+            tests/auxillariesWalletPane.test.tsx \
+            tests/auxillariesContent.access.test.tsx \
+            tests/auxillariesWorkspacePanels.access.test.tsx \
+            tests/auxillariesWorkspacePanels.test.tsx \
+            tests/api/auxillariesGithubConnectionRoute.test.ts \
+            tests/api/vcsRoutes.test.ts \
+            tests/auxillariesExternalsPane.test.tsx \
+            tests/profileStep.test.tsx \
+            tests/api/readReviewRoute.test.ts \
+            tests/api/pipelineHarnessRoute.test.ts \
+            tests/terminalPipelineHarnessClient.test.ts \
+            tests/terminalDepositReadWorkbench.test.ts \
+            tests/terminalTransactionQuery.test.ts \
+            tests/terminalTransactionReadModel.test.ts \
+            tests/terminalProtocolProjection.test.ts \
+            tests/terminalInterfaceIntegrationRegression.test.ts \
+            tests/terminalWalletBtcOperation.test.ts \
+            tests/terminalJournalReconciliation.test.ts \
+            tests/terminalOrganizationAuthority.test.ts \
+            tests/protocolCommercialBoundary.test.ts \
+            tests/terminalTransactionDetailCards.test.tsx \
+            tests/terminalTransactionDetailSnapshot.test.ts \
+            tests/terminalUxBrowserProof.test.tsx \
+            tests/bitcodeBrowserAccessibilityResponsiveProof.test.ts \
+            tests/pipelineExecutionLogHeader.test.tsx \
+            tests/api/conversationSessionRouteHistory.test.ts \
+            tests/api/conversationSessionRouteHistoryContract.test.ts \
+            tests/api/conversationStreamEventContract.test.ts \
+            tests/conversationStreamPipelineLog.test.tsx \
+            tests/conversationWritingWorkspace.test.tsx \
+            tests/conversationSourceSelector.test.tsx \
+            tests/conversationTerminalHandoff.test.tsx \
+            tests/api/conversationPersistencePrivacyRedaction.test.ts \
+            tests/conversationPersistencePrivacyPanel.test.tsx \
+            tests/api/conversationTelemetryProofHooks.test.ts \
+            tests/conversationTelemetryProofPanel.test.tsx \
+            tests/api/conversationRehearsal.test.ts \
+            tests/conversationRehearsalPanel.test.tsx \
+            --runInBand
+          git diff --check
+
+      - name: Promote V38 canon files
+        if: >-
+          ${{
+            github.event_name == 'pull_request' &&
+            github.event.pull_request.head.ref == 'version/v38'
+          }}
+        env:
+          HEAD_BRANCH: ${{ github.event.pull_request.head.ref }}
+        run: |
+          if [ "$(cat BITCODE_SPEC.txt)" = "V38" ]; then
+            echo "BITCODE_SPEC.txt already points to V38."
+            exit 0
+          fi
+          PROOF_SOURCE_COMMIT="$(git rev-parse HEAD)"
+          npm run promote:canon -- --version V38 --commit "$PROOF_SOURCE_COMMIT"
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add \
+            BITCODE_SPEC.txt \
+            BITCODE_SPEC_V38.md \
+            BITCODE_SPEC_V38_DELTA.md \
+            BITCODE_SPEC_V38_NOTES.md \
+            BITCODE_SPEC_V38_PARITY_MATRIX.md \
+            BITCODE_SPEC_V38_PROVEN.md \
+            protocol-demonstration/src/canon-posture.js \
+            protocol-demonstration/README.md \
+            packages/protocol/src/canon-posture.js \
+            packages/protocol/data/state.json \
+            packages/protocol/README.md \
+            .bitcode
+          git commit -m "Promote Bitcode canon to V38"
+          git push origin "HEAD:$HEAD_BRANCH"

.github/workflows/v38-canon-promotion.yml

@@ -8,7 +8,7 @@
 - Prior canonical anchor: `BITCODE_SPEC_V37.md`
 - Prior generated proof appendix: `BITCODE_SPEC_V37_PROVEN.md`
 - Active canonical pointer during draft opening: `BITCODE_SPEC.txt` -> `V37`
-- Generated structured artifact inventory: draft `.bitcode/v38-spec-family-report.json`, `.bitcode/v38-canonical-input-report.json`, `.bitcode/v38-canon-posture-drift-report.json`, `.bitcode/v38-inference-surface-inventory.json`, `.bitcode/v38-ptrr-failsafe-thricified-stack.json`, `.bitcode/v38-prompt-benchmark-report.json`, `.bitcode/v38-disclosure-boundary-report.json`, `.bitcode/v38-read-need-comprehension-inference-hardening.json`, `.bitcode/v38-read-fits-finding-search-embeddings.json`, `.bitcode/v38-assetpack-synthesis-economic-traceability.json`, `.bitcode/v38-conversation-tool-prompt-inference-parity.json`, `.bitcode/v38-local-staging-inference-depository-search-rehearsal.json`, V38 gate-quality workflow evidence, and future V38 generated proof artifacts as gates close
+- Generated structured artifact inventory: draft `.bitcode/v38-spec-family-report.json`, `.bitcode/v38-canonical-input-report.json`, `.bitcode/v38-canon-posture-drift-report.json`, `.bitcode/v38-inference-surface-inventory.json`, `.bitcode/v38-ptrr-failsafe-thricified-stack.json`, `.bitcode/v38-prompt-benchmark-report.json`, `.bitcode/v38-disclosure-boundary-report.json`, `.bitcode/v38-read-need-comprehension-inference-hardening.json`, `.bitcode/v38-read-fits-finding-search-embeddings.json`, `.bitcode/v38-assetpack-synthesis-economic-traceability.json`, `.bitcode/v38-conversation-tool-prompt-inference-parity.json`, `.bitcode/v38-local-staging-inference-depository-search-rehearsal.json`, `.bitcode/v38-promotion-readiness-report.json`, V38 gate-quality and promotion workflow evidence, and `BITCODE_SPEC_V38_PROVEN.md` generation support
 - Source parity state: V38 source-side inference stack, prompt benchmarking, Reading pipeline, depository-search, telemetry, rehearsal, workflow, and promotion surfaces are draft-required until their gates close
 - Notes companion: `BITCODE_SPEC_V38_NOTES.md`
 - Delta companion: `BITCODE_SPEC_V38_DELTA.md`
@@ -143,6 +143,9 @@ Gate 10 binds prior V38 Gates 2 through 9 artifact roots while preserving protec
 
 Gate 11 closes V38 with promotion readiness.
 It must generate V38 proof support, validate every V38 artifact, update promotion workflows, preserve V37 active / V38 draft to V38 active / V39 draft posture, and block promotion if inference, prompt benchmarking, search, telemetry, source-safety, or settlement traceability evidence is incomplete.
+Gate 11 is closed by the package-backed `V38InferencePromotionReadinessReport` source, deterministic `.bitcode/v38-promotion-readiness-report.json` artifact, V38 promotion workflow, promotion command dry-run support, generated proof appendix support, protocol test, generator, checker, and workflow wiring.
+The artifact has `source-safe-inference-promotion-readiness-metadata` disclosure posture and records all V38 gate artifacts, V38 generated proof outputs, promotion workflow coverage, gate/canon workflow coverage, promotion-script coverage, spec-family/runtime promotion support, V37 active / V38 draft pre-promotion posture, V38 active / draft V39 post-promotion posture, direct-main push denial, and blocked value-bearing mainnet posture without exposing protected source, raw protected prompts, raw provider response content, unpaid AssetPack source, credentials, wallet private material, or private settlement payloads.
+Draft-mode Gate 11 freshness checks validate the standalone readiness artifact; promoted-mode Gate 11 checks accept the proof-wrapped readiness artifact generated during canonical promotion while continuing to validate source-safety, posture, and generated-proof coverage.
 
 ## V38 non-goals
 
@@ -446,6 +449,7 @@ Validation canon includes `pnpm run check:v38-gate1`, `pnpm run check:v38-gate2`
 ## promotion canon
 
 Promotion canon requires all V38 gates to close, V38 proof support to exist, a V38 promotion workflow to pass, and the promotion commit to change only accepted canon artifacts and the `BITCODE_SPEC.txt` pointer from V37 to V38.
+The V38 promotion readiness canon is `.bitcode/v38-promotion-readiness-report.json`, `BITCODE_SPEC_V38_PROVEN.md`, `v38-canon-promotion.yml`, `check:v38-gate11`, `node scripts/promote-bitcode-canon.mjs --version V38 --commit HEAD --dry-run`, and the V38 active / draft V39 posture checks.
 
 ## appendices and canonical supporting material
 
@@ -506,6 +510,13 @@ Its current source-predicate contract is 69/69 passed predicates, 9 rows, 52 PTR
 
 V38 specifying generated artifacts include inference inventory, prompt benchmark, telemetry disclosure, depository search, AssetPack handoff, rehearsal, and promotion readiness reports.
 
+### V38InferencePromotionReadinessReport
+
+`V38InferencePromotionReadinessReport` is the Gate 11 source-safe V38 promotion readiness contract.
+It is owned by `packages/protocol/src/canonical/inference-promotion-readiness-report.js`, exported by `packages/protocol/src/index.js`, type-declared by `packages/protocol/src/index.d.ts`, tested by `packages/protocol/test/v38-promotion-readiness.test.js`, generated by `scripts/generate-v38-promotion-readiness-report.mjs`, checked by `scripts/check-v38-gate11-promotion-readiness.mjs`, and serialized to `.bitcode/v38-promotion-readiness-report.json`.
+It records `source-safe-inference-promotion-readiness-metadata`: all V38 gate artifacts, V38 generated proof outputs, promotion workflow coverage, gate/canon workflow coverage, promotion command support, spec-family/runtime promotion support, proven-generator support, V37 active / V38 draft pre-promotion posture, V38 active / draft V39 post-promotion posture, direct-main push denial, and blocked value-bearing mainnet posture.
+Its current source-predicate contract is all V38 Gate 2 through Gate 10 artifacts parseable and source-safe, documentation/source evidence complete, V38 promotion workflow wired, `BITCODE_SPEC_V38_PROVEN.md` generation supported, and no protected source, raw protected prompt, raw provider response content, unpaid AssetPack source, credentials, private wallet material, private settlement payload, or `_legacy/` source roots.
+
 ### V38ConversationToolPromptInferenceParity
 
 `V38ConversationToolPromptInferenceParity` is the Gate 9 source-safe Conversation and tool-definition prompt parity contract.

BITCODE_SPEC_V38.md

@@ -202,3 +202,11 @@ Closure acceptance:
 - V38 generated proof appendix support exists;
 - promotion workflow validates V38 and commits only the canonical pointer and generated promotion artifacts;
 - `pnpm run check:v38-gate11` validates promotion readiness, source-safety, generated artifacts, and V39 draft posture preparation.
+
+Closure implementation:
+
+- `V38InferencePromotionReadinessReport` is now package-backed in `packages/protocol/src/canonical/inference-promotion-readiness-report.js` and generated to `.bitcode/v38-promotion-readiness-report.json`.
+- The generated artifact is `source-safe-inference-promotion-readiness-metadata` and covers all V38 Gate 2 through Gate 10 artifacts, `BITCODE_SPEC_V38_PROVEN.md` support, V38 promotion command dry-run support, `v38-canon-promotion.yml`, gate/canon workflow postures, spec-family/runtime promotion support, proven-generator support, active V38 / draft V39 post-promotion readiness, and blocked value-bearing mainnet posture.
+- promotion scripts support V38 through `node scripts/promote-bitcode-canon.mjs --version V38 --commit HEAD --dry-run`, `scripts/prepare-bitcode-spec-family-promotion.mjs --version V38`, and `scripts/prepare-bitcode-runtime-canon-promotion.mjs --version V38 --next-draft V39`.
+- draft-mode Gate 11 freshness validates the standalone readiness artifact, while promoted-mode Gate 11 accepts the proof-wrapped readiness artifact emitted by the V38 canonical promotion generator.
+- The current closure contract is 9 V38 gate artifacts, 5 generated proof outputs, source-safe promotion evidence, and no protected source, raw protected prompt text, raw provider response content, unpaid AssetPack source, credentials, wallet private material, private settlement payload, production-mainnet value-bearing admission, or `_legacy/` source roots.