From a4e48847cf7e8386b7a456ea626f825117c3f8b1 Mon Sep 17 00:00:00 2001 From: docushell-admin Date: Sun, 21 Jun 2026 16:44:30 +0530 Subject: [PATCH] Record package registry assembly evidence review Signed-off-by: docushell-admin --- ...one_e_package_publication_approval_prep.py | 1 + ...ation_registry_assembly_evidence_review.py | 191 ++++++++++++++++++ ...t_milestone_e_prep_guard_sequence_index.py | 1 + .../scripts/test_milestone_e_prep_scope.py | 1 + ...est_milestone_e_validation_record_index.py | 19 ++ .github/workflows/ci.yml | 2 + Makefile | 1 + docs/execution-status.md | 2 + ...e-e-package-publication-approval-prep.json | 3 +- docs/milestone-e-prep-scope.md | 6 + docs/roadmap.md | 6 + docs/validation/README.md | 5 + ...y-evidence-review-validation-2026-06-21.md | 119 +++++++++++ ...kage-publication-approval-prep.schema.json | 6 +- 14 files changed, 361 insertions(+), 2 deletions(-) create mode 100644 .github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py create mode 100644 docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md diff --git a/.github/scripts/test_milestone_e_package_publication_approval_prep.py b/.github/scripts/test_milestone_e_package_publication_approval_prep.py index c0d973c..3e7a436 100644 --- a/.github/scripts/test_milestone_e_package_publication_approval_prep.py +++ b/.github/scripts/test_milestone_e_package_publication_approval_prep.py @@ -95,6 +95,7 @@ "package_decision_input_packet": "docs/validation/milestone-e-package-publication-decision-input-packet-validation-2026-06-21.md", "package_approval_readiness_review": "docs/validation/milestone-e-package-publication-approval-readiness-review-validation-2026-06-21.md", "package_manifest_activation_diff_review": "docs/validation/milestone-e-package-publication-manifest-activation-diff-review-validation-2026-06-21.md", + "package_registry_assembly_evidence_review": "docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md", } EXPECTED_PUBLICATION_DECISION_INPUTS = { "decision_status": "not_approved_pending_exact_decision", diff --git a/.github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py b/.github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py new file mode 100644 index 0000000..3a29411 --- /dev/null +++ b/.github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py @@ -0,0 +1,191 @@ +#!/usr/bin/env python3 +# +# Copyright 2026 The Ethos maintainers +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +from __future__ import annotations + +import json +import re +import subprocess +import unittest +from pathlib import Path + +from makefile_guard import target_block + + +ROOT = Path(__file__).resolve().parents[2] +PREP = ROOT / "docs/milestone-e-package-publication-approval-prep.json" +RECORD = ( + ROOT + / "docs/validation/" + "milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md" +) +VALIDATION_README = ROOT / "docs/validation/README.md" +PREP_SCOPE = ROOT / "docs/milestone-e-prep-scope.md" +ROADMAP = ROOT / "docs/roadmap.md" +EXECUTION_STATUS = ROOT / "docs/execution-status.md" +CI_WORKFLOW = ROOT / ".github/workflows/ci.yml" + +SOURCE_COMMIT = "3f0f3ed7939b7b55d8f5eb86938fa10447dd58c9" +SOURCE_SHORT = "3f0f3ed" +SOURCE_TREE = "6c748cd6f4a8de7789e42666697d1f25aa99f6f9" +FORBIDDEN_SCOPE_EXPANSION = [ + "public reports are approved", + "public result wording approved", + "release-ready", + "release artifact approved", + "package-ready", + "package publication is approved", + "package publication approved", + "packages are published", + "published packages", + "production-ready", + "production positioning approved", + "benchmark-validated", + "public benchmark pass", + "speed validated", + "fastest", + "launch-ready", + "hosted surface approved", + "hosted demo approved", + "demo-ready", + "performance validated", + "quality validated", + "footprint validated", + "table-quality validated", + "parser-quality validated", +] + + +def read(path: Path) -> str: + return path.read_text(encoding="utf-8") + + +def normalized(path: Path) -> str: + return re.sub(r"\s+", " ", read(path)) + + +def load_json(path: Path) -> dict: + return json.loads(path.read_text(encoding="utf-8")) + + +def git(*args: str) -> str: + return subprocess.check_output( + ["git", *args], + cwd=ROOT, + encoding="utf-8", + stderr=subprocess.DEVNULL, + ).strip() + + +class MilestoneEPackagePublicationRegistryAssemblyEvidenceReviewTests(unittest.TestCase): + def test_evidence_review_record_is_indexed_and_source_bound(self) -> None: + prep = load_json(PREP) + readme = read(VALIDATION_README) + record = normalized(RECORD) + + self.assertIn(RECORD.name, readme) + self.assertIn("package publication registry-assembly evidence review validation", readme) + self.assertEqual( + "docs/validation/" + "milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md", + prep["follow_up_records"]["package_registry_assembly_evidence_review"], + ) + self.assertIn(f"Validated source HEAD before this record: `{SOURCE_SHORT}`", read(RECORD)) + self.assertIn(f"Registry assembly evidence review source commit: `{SOURCE_COMMIT}`", record) + self.assertIn(f"Registry assembly evidence review source tree: `{SOURCE_TREE}`", record) + self.assertEqual(SOURCE_COMMIT, git("rev-parse", SOURCE_SHORT)) + self.assertEqual(SOURCE_TREE, git("rev-parse", f"{SOURCE_SHORT}^{{tree}}")) + + def test_record_carries_evidence_requirements_without_activation(self) -> None: + record = normalized(RECORD) + + self.assertIn("Registry-backed dependent package assembly evidence after manifest activation remains required", record) + self.assertIn("reviewed candidate package artifacts for `ethos-doc-core`, `ethos-verify`, and `ethos-pdf`", record) + self.assertIn("The future `ethos-doc-core` candidate must be assembled before dependent candidates", record) + self.assertIn("resolve dependency key `ethos-core` to candidate package `ethos-doc-core`", record) + self.assertIn('features = ["grounding", "verify-types"]', record) + self.assertIn('features = ["full"]', record) + self.assertIn("No registry was created", record) + self.assertIn("No registry-backed assembly was activated", record) + self.assertIn("Package publication and public installation remained blocked", record) + self.assertIn("public-surface posture check after exact public installation wording changes remains required", record) + self.assertIn("claims gate after exact public installation wording changes remains required", record) + + def test_current_manifests_and_registry_state_stay_unactivated(self) -> None: + packet = load_json(PREP)["package_publication_decision_input_packet"] + workspace = read(ROOT / "Cargo.toml") + core_manifest = read(ROOT / "crates/ethos-core/Cargo.toml") + verify_manifest = read(ROOT / "crates/ethos-verify/Cargo.toml") + pdf_manifest = read(ROOT / "crates/ethos-pdf/Cargo.toml") + + for value in packet["candidate_package_tag_names"]: + tag = value.split(": ", maxsplit=1)[1].split(";", maxsplit=1)[0] + self.assertEqual("", git("tag", "--list", tag)) + self.assertIn('ethos-core = { path = "crates/ethos-core"', workspace) + self.assertNotIn('package = "ethos-doc-core"', workspace) + self.assertIn('name = "ethos-core"', core_manifest) + self.assertIn("publish = false", core_manifest) + self.assertIn('name = "ethos-verify"', verify_manifest) + self.assertIn("publish = false", verify_manifest) + self.assertIn('name = "ethos-pdf"', pdf_manifest) + self.assertIn("publish = false", pdf_manifest) + self.assertNotIn('package = "ethos-doc-core"', verify_manifest) + self.assertNotIn('package = "ethos-doc-core"', pdf_manifest) + self.assertFalse((ROOT / ".cargo/config.toml").exists()) + self.assertFalse((ROOT / "target/package-registry").exists()) + + def test_docs_reference_evidence_review_and_retained_blockers(self) -> None: + for path in (PREP_SCOPE, ROADMAP, EXECUTION_STATUS, VALIDATION_README): + doc = normalized(path) + + self.assertIn(RECORD.name, doc, str(path)) + self.assertIn("registry-assembly evidence review", doc.lower(), str(path)) + self.assertIn("package publication remains blocked", doc, str(path)) + self.assertIn("public installation remains blocked", doc, str(path)) + + def test_make_and_ci_run_evidence_review_after_manifest_diff_review(self) -> None: + make_block = target_block("milestone-e-prep") + ci = read(CI_WORKFLOW) + manifest_diff_guard = "test_milestone_e_package_publication_manifest_activation_diff_review.py" + evidence_guard = "test_milestone_e_package_publication_registry_assembly_evidence_review.py" + public_facing_guard = "test_milestone_e_public_facing_readiness_ledger.py" + + for text, prefix in ((make_block, "$(PYTHON) .github/scripts/"), (ci, "python3 .github/scripts/")): + self.assertIn(prefix + evidence_guard, text) + self.assertEqual(1, text.count(prefix + evidence_guard)) + self.assertLess(text.index(prefix + manifest_diff_guard), text.index(prefix + evidence_guard)) + self.assertLess(text.index(prefix + evidence_guard), text.index(prefix + public_facing_guard)) + + def test_record_avoids_scope_expansion_language_or_private_paths(self) -> None: + lower = normalized(RECORD).lower() + raw = read(RECORD) + + for phrase in FORBIDDEN_SCOPE_EXPANSION: + self.assertNotIn(phrase, lower) + self.assertNotIn("/Users/", raw) + self.assertNotIn("/private/tmp", raw) + self.assertNotIn("/private/var", raw) + self.assertNotIn("/var/folders", raw) + self.assertNotIn("saumildiwaker", raw) + self.assertNotIn("Desktop/Stuff", raw) + self.assertNotIn("project/repo/ethos", raw) + self.assertNotIn("docs/.roadmap.md.swp", raw) + self.assertNotIn("web/", raw) + + +if __name__ == "__main__": + unittest.main() diff --git a/.github/scripts/test_milestone_e_prep_guard_sequence_index.py b/.github/scripts/test_milestone_e_prep_guard_sequence_index.py index 375c292..3c8156a 100644 --- a/.github/scripts/test_milestone_e_prep_guard_sequence_index.py +++ b/.github/scripts/test_milestone_e_prep_guard_sequence_index.py @@ -110,6 +110,7 @@ "$(PYTHON) .github/scripts/test_milestone_e_package_publication_decision_input_packet.py", "$(PYTHON) .github/scripts/test_milestone_e_package_publication_approval_readiness_review.py", "$(PYTHON) .github/scripts/test_milestone_e_package_publication_manifest_activation_diff_review.py", + "$(PYTHON) .github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py", "$(PYTHON) .github/scripts/test_milestone_e_public_facing_readiness_ledger.py", "$(PYTHON) .github/scripts/test_milestone_e_public_beta_current_main_refresh_prep.py", "$(PYTHON) .github/scripts/test_milestone_e_public_beta_current_main_source_only_approval.py", diff --git a/.github/scripts/test_milestone_e_prep_scope.py b/.github/scripts/test_milestone_e_prep_scope.py index 93d307b..c754fc6 100644 --- a/.github/scripts/test_milestone_e_prep_scope.py +++ b/.github/scripts/test_milestone_e_prep_scope.py @@ -409,6 +409,7 @@ def test_make_target_is_narrow_and_guarded(self) -> None: "$(PYTHON) .github/scripts/test_milestone_e_package_publication_decision_input_packet.py", "$(PYTHON) .github/scripts/test_milestone_e_package_publication_approval_readiness_review.py", "$(PYTHON) .github/scripts/test_milestone_e_package_publication_manifest_activation_diff_review.py", + "$(PYTHON) .github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py", "$(PYTHON) .github/scripts/test_milestone_e_public_facing_readiness_ledger.py", "$(PYTHON) .github/scripts/test_milestone_e_public_beta_current_main_refresh_prep.py", "$(PYTHON) .github/scripts/test_milestone_e_public_beta_current_main_source_only_approval.py", diff --git a/.github/scripts/test_milestone_e_validation_record_index.py b/.github/scripts/test_milestone_e_validation_record_index.py index 6dec8af..7628262 100644 --- a/.github/scripts/test_milestone_e_validation_record_index.py +++ b/.github/scripts/test_milestone_e_validation_record_index.py @@ -274,6 +274,10 @@ class RecordCoverage: "milestone-e-package-publication-manifest-activation-diff-review-validation-2026-06-21.md", "test_milestone_e_package_publication_manifest_activation_diff_review.py", ), + RecordCoverage( + "milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md", + "test_milestone_e_package_publication_registry_assembly_evidence_review.py", + ), RecordCoverage( "milestone-e-public-facing-readiness-ledger-validation-2026-06-21.md", "test_milestone_e_public_facing_readiness_ledger.py", @@ -397,6 +401,9 @@ def test_index_guards_run_after_row_and_schema_records(self) -> None: package_manifest_diff_review_guard = ( "test_milestone_e_package_publication_manifest_activation_diff_review.py" ) + package_registry_evidence_review_guard = ( + "test_milestone_e_package_publication_registry_assembly_evidence_review.py" + ) readiness_guard = "test_milestone_e_public_facing_readiness_ledger.py" beta_refresh_guard = "test_milestone_e_public_beta_current_main_refresh_prep.py" command_guard = "test_milestone_e_validation_command_index_validation_record.py" @@ -473,11 +480,23 @@ def test_index_guards_run_after_row_and_schema_records(self) -> None: ) self.assertLess( text.index(prefix + package_manifest_diff_review_guard), + text.index(prefix + package_registry_evidence_review_guard), + ) + self.assertLess( + text.index(prefix + package_registry_evidence_review_guard), text.index(prefix + readiness_guard), ) self.assertLess(text.index(prefix + readiness_guard), text.index(prefix + beta_refresh_guard)) self.assertLess(text.index(prefix + beta_refresh_guard), text.index(prefix + command_guard)) self.assertLess(text.index(prefix + beta_refresh_guard), text.index(prefix + index_guard)) + self.assertLess( + text.index(prefix + package_registry_evidence_review_guard), + text.index(prefix + command_guard), + ) + self.assertLess( + text.index(prefix + package_registry_evidence_review_guard), + text.index(prefix + index_guard), + ) self.assertLess( text.index(prefix + package_manifest_diff_review_guard), text.index(prefix + command_guard), diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a7184fa..a6a4da5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -234,6 +234,8 @@ jobs: run: python3 .github/scripts/test_milestone_e_package_publication_approval_readiness_review.py - name: Milestone E package publication manifest-activation diff review tests run: python3 .github/scripts/test_milestone_e_package_publication_manifest_activation_diff_review.py + - name: Milestone E package publication registry-assembly evidence review tests + run: python3 .github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py - name: Milestone E public-facing readiness ledger tests run: python3 .github/scripts/test_milestone_e_public_facing_readiness_ledger.py - name: Milestone E public beta current-main refresh prep tests diff --git a/Makefile b/Makefile index 0bb49e3..24a082f 100644 --- a/Makefile +++ b/Makefile @@ -224,6 +224,7 @@ milestone-e-prep: $(PYTHON) .github/scripts/test_milestone_e_package_publication_decision_input_packet.py $(PYTHON) .github/scripts/test_milestone_e_package_publication_approval_readiness_review.py $(PYTHON) .github/scripts/test_milestone_e_package_publication_manifest_activation_diff_review.py + $(PYTHON) .github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py $(PYTHON) .github/scripts/test_milestone_e_public_facing_readiness_ledger.py $(PYTHON) .github/scripts/test_milestone_e_public_beta_current_main_refresh_prep.py $(PYTHON) .github/scripts/test_milestone_e_public_beta_current_main_source_only_approval.py diff --git a/docs/execution-status.md b/docs/execution-status.md index 5e56116..4729788 100644 --- a/docs/execution-status.md +++ b/docs/execution-status.md @@ -203,6 +203,8 @@ The package publication approval readiness review in `docs/validation/milestone- The package publication manifest-activation diff review in `docs/validation/milestone-e-package-publication-manifest-activation-diff-review-validation-2026-06-21.md` records the candidate manifest activation diff against source commit `89d24c8` / tree `21b263dca908ef7cc977e7669e40206096eef93e`. Current Cargo manifests remain unchanged, package publication remains blocked, and public installation remains blocked. +The package publication registry-assembly evidence review in `docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md` records registry-backed dependent package assembly evidence requirements against source commit `3f0f3ed` / tree `6c748cd6f4a8de7789e42666697d1f25aa99f6f9`. No registry is created, registry-backed assembly is not activated, package publication remains blocked, and public installation remains blocked. + | Work item | Current status | Remaining blocker | | --- | --- | --- | | PDFium Phase 1 profile | Landed: pinned profile, V8/XFA-disabled state, platform hashes, runtime library hashes, and provenance are recorded | Phase 2 project-maintained builds still block Public Beta | diff --git a/docs/milestone-e-package-publication-approval-prep.json b/docs/milestone-e-package-publication-approval-prep.json index 9c70369..cb814c0 100644 --- a/docs/milestone-e-package-publication-approval-prep.json +++ b/docs/milestone-e-package-publication-approval-prep.json @@ -82,7 +82,8 @@ "package_pre_approval_gap_ledger": "docs/validation/milestone-e-package-publication-pre-approval-gap-ledger-validation-2026-06-21.md", "package_decision_input_packet": "docs/validation/milestone-e-package-publication-decision-input-packet-validation-2026-06-21.md", "package_approval_readiness_review": "docs/validation/milestone-e-package-publication-approval-readiness-review-validation-2026-06-21.md", - "package_manifest_activation_diff_review": "docs/validation/milestone-e-package-publication-manifest-activation-diff-review-validation-2026-06-21.md" + "package_manifest_activation_diff_review": "docs/validation/milestone-e-package-publication-manifest-activation-diff-review-validation-2026-06-21.md", + "package_registry_assembly_evidence_review": "docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md" }, "publication_approval_decision_inputs": { "decision_status": "not_approved_pending_exact_decision", diff --git a/docs/milestone-e-prep-scope.md b/docs/milestone-e-prep-scope.md index 68e06fc..2a5141f 100644 --- a/docs/milestone-e-prep-scope.md +++ b/docs/milestone-e-prep-scope.md @@ -127,6 +127,12 @@ The package publication manifest-activation diff review is recorded in It records the candidate manifest activation diff for source commit `89d24c8` / tree `21b263dca908ef7cc977e7669e40206096eef93e` while current Cargo manifests remain unchanged, package publication remains blocked, and public installation remains blocked. +The package publication registry-assembly evidence review is recorded in +`docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md`. +It records registry-backed dependent package assembly evidence requirements for source commit +`3f0f3ed` / tree `6c748cd6f4a8de7789e42666697d1f25aa99f6f9` while no registry is created, +registry-backed assembly is not activated, package publication remains blocked, and public +installation remains blocked. The metadata-readiness follow-up record under `docs/validation/` covers README, NOTICE, manifest metadata, and include-list readiness for `ethos-core`, `ethos-verify`, and `ethos-pdf` only. `ethos-doc` and `ethos-rag` remain reserved placeholders without in-tree package manifests, and diff --git a/docs/roadmap.md b/docs/roadmap.md index a2cd08c..69f6ade 100644 --- a/docs/roadmap.md +++ b/docs/roadmap.md @@ -179,6 +179,12 @@ The package publication manifest-activation diff review is recorded in for source commit `89d24c8` / tree `21b263dca908ef7cc977e7669e40206096eef93e`. The candidate manifest activation diff is reviewed while current Cargo manifests remain unchanged, package publication remains blocked, and public installation remains blocked. +The package publication registry-assembly evidence review is recorded in +[`docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md`](validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md) +for source commit `3f0f3ed` / tree `6c748cd6f4a8de7789e42666697d1f25aa99f6f9`. Registry-backed +dependent package assembly evidence requirements are recorded while no registry is created, +registry-backed assembly is not activated, package publication remains blocked, and public +installation remains blocked. This prep only identifies tracked trust-loop fixture candidates and guard wiring for internal continuation; blocked-output alignment keeps the current trust-loop protocol, rehearsal/evidence matrix, blocker ledger, and matching schemas on the same explicit blockers, while evidence-lane diff --git a/docs/validation/README.md b/docs/validation/README.md index 20217bd..826c557 100644 --- a/docs/validation/README.md +++ b/docs/validation/README.md @@ -351,6 +351,11 @@ recording the exact current-main source candidate and required follow-up evidenc activation diff; the record binds the reviewed diff inputs to source commit `89d24c8` / tree `21b263dca908ef7cc977e7669e40206096eef93e` while package publication remains blocked and public installation remains blocked. +- `milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md` - + package publication registry-assembly evidence review validation for the registry-backed + dependent package assembly evidence requirements; the record binds the requirements to source + commit `3f0f3ed` / tree `6c748cd6f4a8de7789e42666697d1f25aa99f6f9` while package publication + remains blocked and public installation remains blocked. - `milestone-e-public-facing-readiness-ledger-validation-2026-06-21.md` - public-facing readiness ledger validation recorded `docs/milestone-e-public-facing-readiness-ledger.json` as a current-main refresh candidate and package-publication gap-retention artifact; current main diff --git a/docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md b/docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md new file mode 100644 index 0000000..c2d7d59 --- /dev/null +++ b/docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md @@ -0,0 +1,119 @@ +# Milestone E Package Publication Registry-Assembly Evidence Review Validation - 2026-06-21 + +## Purpose + +Record the registry-backed dependent package assembly evidence review boundary for the package +publication approval lane without creating a registry, activating registry-backed assembly, +changing Cargo manifests, selecting a package publication version, creating package tags, inviting +public installation, or approving package publication. + +## Status + +Status: **pass for package registry-assembly evidence review with publication blocked**. + +Decision: record registry-backed dependent package assembly evidence requirements only. + +Ethos remains source-only pre-alpha outside the approved GitHub source-repository public beta +surface. Package publication remains blocked. Public installation remains blocked. + +## Subject + +- Repository: `docushell/ethos` +- Validated source HEAD before this record: `3f0f3ed` +- Registry assembly evidence review source commit: `3f0f3ed7939b7b55d8f5eb86938fa10447dd58c9` +- Registry assembly evidence review source tree: `6c748cd6f4a8de7789e42666697d1f25aa99f6f9` +- Lane: package publication +- Reviewed manifest diff record: `docs/validation/milestone-e-package-publication-manifest-activation-diff-review-validation-2026-06-21.md` + +## Evidence Requirements + +- Registry-backed dependent package assembly evidence after manifest activation remains required. +- Any future evidence must bind reviewed candidate package artifacts for `ethos-doc-core`, + `ethos-verify`, and `ethos-pdf`. +- The future `ethos-doc-core` candidate must be assembled before dependent candidates. +- The future `ethos-verify` dependent candidate must resolve dependency key `ethos-core` to + candidate package `ethos-doc-core` and retain `features = ["grounding", "verify-types"]`. +- The future `ethos-pdf` dependent candidate must resolve dependency key `ethos-core` to + candidate package `ethos-doc-core`, retain `features = ["full"]`, and keep the PDFium boundary + confirmed. +- Any future assembly evidence must bind the exact source commit, source tree, candidate package + manifests, selected SemVer package version, exact package tag name set, and public-surface + posture and claims gates after exact wording changes. +- No registry-backed dependent package assembly evidence is activated by this record. + +## Current Source State + +- No Cargo manifest is changed by this record. +- No registry is created by this record. +- No registry-backed assembly is activated by this record. +- The current `crates/ethos-core/Cargo.toml` package name remains `ethos-core`. +- The current `crates/ethos-core/Cargo.toml`, `crates/ethos-verify/Cargo.toml`, and + `crates/ethos-pdf/Cargo.toml` manifests remain `publish = false`. +- The current `crates/ethos-verify/Cargo.toml` and `crates/ethos-pdf/Cargo.toml` manifests do not + reference `package = "ethos-doc-core"`. +- No candidate package tag is created for `ethos-doc-core`, `ethos-verify`, or `ethos-pdf`. + +## Approval Inputs Still Required + +- exact package publication approval decision record remains required +- decider signoff on the exact candidate version map remains required +- decider signoff on the exact package tag name set and source binding remains required +- package dependency manifest activation approval remains required +- registry-backed dependent package assembly evidence after manifest activation remains required +- public-surface posture check after exact public installation wording changes remains required +- claims gate after exact public installation wording changes remains required +- make milestone-e-prep after exact decision record remains required + +## Non-Approvals + +- this registry assembly evidence review does not select a package publication version +- this registry assembly evidence review does not create a package tag +- this registry assembly evidence review does not change Cargo manifests +- this registry assembly evidence review does not activate package dependency manifests +- this registry assembly evidence review does not create a registry +- this registry assembly evidence review does not activate registry-backed dependent package assembly +- this registry assembly evidence review does not invite public installation +- this registry assembly evidence review does not approve package publication + +## Retained Blockers + +- candidate package version map is recorded but no package publication version is selected +- candidate package tag names are recorded but no package tag is created +- candidate manifest activation diff is reviewed but no Cargo manifest is changed +- package dependency manifest activation remains blocked +- registry-backed dependent package assembly evidence remains required +- registry-backed dependent package assembly activation remains blocked +- public installation remains blocked +- package publication remains blocked +- real-version cargo publish remains blocked +- Public reports remain blocked +- Public result wording remains blocked + +## Commands + +```sh +python3 .github/scripts/test_milestone_e_package_publication_approval_prep.py +python3 .github/scripts/test_milestone_e_package_publication_manifest_activation_diff_review.py +python3 .github/scripts/test_milestone_e_package_publication_registry_assembly_evidence_review.py +python3 .github/scripts/test_public_surface_posture.py +python3 .github/scripts/claims_gate.py +cargo build --locked -p ethos-cli +make milestone-e-prep PYTHON=/bin/python +git diff --check +``` + +## Result + +```text +Package publication registry-assembly evidence review validation passed +Registry-backed dependent package assembly evidence requirements are recorded +No package version was selected +No package tag was created +No Cargo manifest was changed +No registry was created +No registry-backed assembly was activated +Package publication and public installation remained blocked +Public-surface posture and claims gates passed +Milestone E prep target passed +git diff --check passed +``` diff --git a/schemas/ethos-milestone-e-package-publication-approval-prep.schema.json b/schemas/ethos-milestone-e-package-publication-approval-prep.schema.json index 01fc176..d68922f 100644 --- a/schemas/ethos-milestone-e-package-publication-approval-prep.schema.json +++ b/schemas/ethos-milestone-e-package-publication-approval-prep.schema.json @@ -290,7 +290,8 @@ "package_pre_approval_gap_ledger", "package_decision_input_packet", "package_approval_readiness_review", - "package_manifest_activation_diff_review" + "package_manifest_activation_diff_review", + "package_registry_assembly_evidence_review" ], "additionalProperties": false, "properties": { @@ -341,6 +342,9 @@ }, "package_manifest_activation_diff_review": { "const": "docs/validation/milestone-e-package-publication-manifest-activation-diff-review-validation-2026-06-21.md" + }, + "package_registry_assembly_evidence_review": { + "const": "docs/validation/milestone-e-package-publication-registry-assembly-evidence-review-validation-2026-06-21.md" } } },