AKTA 1.2: SCOPE native trust path and contracts 2.2.0

.github/workflows/ci.yml

@@ -52,6 +52,7 @@ jobs:
         run: |
           ruff check adapters/generic_rest tests/test_rest_api.py tests/test_rest_institutional.py \
             tests/test_release_pins.py tests/test_pilot_workflow.py tests/test_empirical_impact.py \
+            tests/test_preregistration_verification.py \
             --ignore E501
 
       - name: Mypy (security-critical modules fail-closed)
@@ -104,6 +105,9 @@ jobs:
       - name: Policy manifest / integrity tests
         run: pytest tests/test_policy_integrity_v05.py tests/test_policy_signing_modes.py -v
 
+      - name: Verify locked preregistration (never rewrite)
+        run: python -m evals.preregistration_lock
+
       - name: Empirical dry-run (no empirical completion claim)
         run: python -m evals.empirical_impact --dry-run --write-protocol
 
@@ -198,7 +202,7 @@ jobs:
                   "bomFormat": "CycloneDX",
                   "specVersion": "1.5",
                   "version": 1,
-                  "metadata": {"component": {"type": "library", "name": "akta-protocol", "version": "1.0.0"}},
+                  "metadata": {"component": {"type": "library", "name": "akta-protocol", "version": "1.2.0"}},
                   "note": "stub SBOM — install cyclonedx-bom for full generation",
               }, indent=2),
               encoding="utf-8",

.github/workflows/release-gate.yml

@@ -53,6 +53,31 @@ jobs:
           else
             echo "WARN: SCOPE_REPO_PATH missing pyproject.toml; CLI install skipped"
           fi
+      - name: Native SCOPE interop (wheel install + acceptance)
+        env:
+          SCOPE_REPO_PATH: ${{ env.SCOPE_REPO_PATH }}
+          AKTA_REQUIRE_NATIVE_SCOPE: "1"
+          AKTA_RELEASE_GATE: "1"
+          SOURCE_DATE_EPOCH: "1700000000"
+        run: |
+          set -euo pipefail
+          # Steps 1–3: install pinned contract / SCOPE / AKTA wheels into clean venv
+          python -m build
+          python -m venv /tmp/akta-native-scope
+          /tmp/akta-native-scope/bin/pip install --upgrade pip
+          /tmp/akta-native-scope/bin/pip install ./vendor/scientific-authorization-contracts
+          /tmp/akta-native-scope/bin/pip install -e "$SCOPE_REPO_PATH"
+          /tmp/akta-native-scope/bin/pip install dist/*.whl
+          /tmp/akta-native-scope/bin/pip install hypothesis pytest pyyaml
+          cp -a policy overlays /tmp/akta-native-scope/
+          cd /tmp/akta-native-scope
+          # Steps 4–14 via wheel smoke native phase (real SCOPE APIs, no invented fields)
+          SCOPE_REPO_PATH="$SCOPE_REPO_PATH" AKTA_REQUIRE_NATIVE_SCOPE=1 \
+            ./bin/python -m akta.wheel_smoke
+          # Required acceptance scenario
+          cd "${{ github.workspace }}"
+          SCOPE_REPO_PATH="$SCOPE_REPO_PATH" AKTA_REQUIRE_NATIVE_SCOPE=1 AKTA_RELEASE_GATE=1 \
+            /tmp/akta-native-scope/bin/python -m pytest tests/test_native_scope_acceptance_1_2.py -v
       - name: SCOPE live chain (python-import)
         env:
           SCOPE_REPO_PATH: ${{ env.SCOPE_REPO_PATH }}

CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to AKTA are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.2.0] - 2026-07-23
+
+### Added
+
+- Contract pin model v2: `wheel_sha256`, `source_archive_sha256`, `release_manifest_sha256`, `release_signer` with runtime verification in release/production/institutional modes
+- Package version agreement test across declared surfaces
+- Sibling release-pin checks: clean working tree, tag resolution, submodule consistency, compat-manifest agreement
+
+### Changed
+
+- Unified declared package identity to **1.2.0** (`pyproject.toml`, `akta.__version__`, README, CITATION.cff, compatibility manifest, CLI `--version`)
+- Release pins profile bumped to `akta-release-pins-v1.2` (SCOPE/contracts 2.2 co-release structured; incomplete wheel pins fail closed)
+
+### Notes
+
+- Canonical contracts **2.2** wheel hashes are not yet published; placeholders fail closed in release modes. Vendor tree remains the byte-identical 2.1.0 archive until the 2.2 wheel lands.
+
 ## [1.0.0] - 2026-06-29
 
 ### Added

CITATION.cff

@@ -1,7 +1,7 @@
 cff-version: 1.2.0
 title: AKTA — Open Scientific Action Protocol
-version: 1.0.0
-date-released: 2026-06-29
+version: 1.2.0
+date-released: 2026-07-23
 authors:
   - name: AKTA Contributors
 license: MIT
@@ -10,7 +10,7 @@ message: If you use AKTA in research, please cite this software.
 preferred-citation:
   type: software
   title: AKTA — Open Scientific Action Protocol
-  version: 1.0.0
+  version: 1.2.0
   year: 2026
   url: https://github.com/fraware/AKTA
   license: MIT

README.md

@@ -201,11 +201,11 @@ Read [CONTRIBUTING.md](CONTRIBUTING.md) for pull-request expectations, [GOVERNAN
 
 ## Project status
 
-**v1.0.0** (`akta-protocol`) is the current reference kernel on `release/v1.0`.
+**v1.2.0** (`akta-protocol`) is the current reference kernel targeting native SCOPE 2.2 consumption.
 
 | Claim | What CI proves | What requires local siblings |
 |-------|----------------|------------------------------|
-| Reference kernel + policy v1.0 | `make ci` on every PR (359+ tests, evals, demos) | — |
+| Reference kernel + policy v1.2 | `make ci` on every PR (359+ tests, evals, demos) | — |
 | AKTA-Bench v1 | `make eval-bench-v1` in release-gate (105 oracle scenarios, holdout, behavioral middleware) | — |
 | Live SCOPE pilot gate | Release-gate clones public SCOPE and runs python-import + pilot bundle | SCOPE CLI / akta-review modes need `scope` on runner |
 | PF / PCS / VSA / Memory / PCS-Bench matrix | Release-gate sibling job when clone URLs or `*_REPO_PATH` vars set | Full matrix locally: `python scripts/verify_v1_release.py` |