Skip to content

Commit 4278cba

Browse files
committed
Document the website release integrity correction
1 parent 1aeea3c commit 4278cba

4 files changed

Lines changed: 90 additions & 4 deletions

File tree

‎BRANCHES.md‎

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -37,12 +37,18 @@ nightly branch name.
3737
comparisons and an exact nightly branch for development-scope comparisons;
3838
do not infer release evidence from `main` alone.
3939

40-
## v0.22.0
40+
## v0.23.0
4141

42-
`v0.22.0` is the current stable release baseline. Use the exact tag ref
43-
`refs/tags/v0.22.0` for stable comparisons; later nightly branches describe
42+
`v0.23.0` is the current stable release baseline. Use the exact tag ref
43+
`refs/tags/v0.23.0` for stable comparisons; later nightly branches describe
4444
development work and do not supersede that stable boundary by themselves.
4545

46+
## v0.22.0
47+
48+
`v0.22.0` is the historical stable baseline for the type-and-set-theory line.
49+
Use the exact tag ref `refs/tags/v0.22.0` when reproducing that release rather
50+
than treating a later nightly branch as equivalent evidence.
51+
4652
## 0.16
4753

4854
0.16 is an audit-hardening preview. It is useful for tracing how earlier review

‎CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,13 @@
22

33
## Unreleased
44

5+
- Correct the 0.24 website release lineage after the first production build
6+
retained stale 0.22 release metadata and Playground assets. The homepage now
7+
advertises the official `v0.23.0` stable release and its 2026-08-11 date, the
8+
Playground loads the released 0.23 WASM bundle, and distribution checks bind
9+
the exact release URL, displayed tag, compiler asset identity, compiler
10+
version, and WASM SHA-256. Rebuild and redeploy the immutable static site from
11+
the corrected parent website gitlink.
512
- Add first-class LS-IDL publication and discovery for CKB Lock Scripts.
613
`cellc artifact ls-idl` validates the bounded 0.1 schema, appends
714
`SHA-256(raw idl.json)` to an executable, generates a publish-ready bundle,

‎docs/releases/CELLSCRIPT_0_24_RELEASE_NOTES.md‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -126,6 +126,33 @@ the same workbench but expands it to the viewport; mobile retains a compact
126126
panel switcher. The WASM boundary remains metadata-only: the Playground does
127127
not claim to emit or execute a production ELF.
128128

129+
## Website Release Integrity Correction
130+
131+
A production review on 2026-08-13 found that the first 0.24 website deployment
132+
had been built from a feature branch that diverged before the 0.23 website
133+
release synchronization. The deployed homepage therefore still labelled
134+
`v0.22.0` as the latest release, the Playground still loaded the 0.22 WASM
135+
bundle, and the distribution regression test incorrectly asserted those stale
136+
values. The server was serving the requested new directory; the error was in
137+
the source lineage and its matching test expectation.
138+
139+
The corrected website now:
140+
141+
- links the homepage release card to the official
142+
[CellScript v0.23.0 release](https://github.com/CellScript-Labs/CellScript/releases/tag/v0.23.0),
143+
published on 2026-08-11;
144+
- loads the released 0.23 Playground asset identified by
145+
`20260811-v0.23.0-fa369818`, with WASM SHA-256
146+
`fa369818631532c657e73e970b6138e3a231d532a073d428dfe7f61686135dd5`;
147+
- asserts the release URL, displayed tag, compiler version, cache-busting asset
148+
identity, and exact WASM digest during the website build; and
149+
- remains explicit that `nightly-0.24` is a development line. Advertising the
150+
latest stable `v0.23.0` release does not claim that 0.24 itself has shipped.
151+
152+
The corrected parent commit is
153+
`1aeea3cc2e41644873ec31b12ef5e2dc8138f230`, which pins website commit
154+
`00f0e2cb184c1343d2c6b57aa6a413028976a3e0`.
155+
129156
## Integration Status
130157

131158
- The CellScript side of the Myelin 0.24 handoff is versioned and tested. The
@@ -277,6 +304,16 @@ copied into the parent repository. Commit
277304
`main` branch, and the parent repository binds the same gitlink, so a clean
278305
clone can reconstruct the exact evidence tree that passed `backend`.
279306

307+
After the website release-integrity correction, `npm run build` passed with
308+
Node 22 in a clean parent worktree. That run covered the Registry and
309+
Playground tests, Astro checks and production build, homepage and LS-IDL
310+
regressions, documentation links, exact distribution identities, and the
311+
production deployment contract. The resulting static site was deployed at
312+
`https://cellscript.dev/` from the immutable server directory
313+
`/data/cellscript/releases/release-023-00f0e2c-1aeea3cc`; the unmodified public
314+
homepage returned HTTP 200 with the `v0.23.0` link and date, and the site
315+
container returned `running healthy`.
316+
280317
## Detailed References
281318

282319
- [Verified artifact boundary](../CELLSCRIPT_VERIFIED_ARTIFACT_BOUNDARY.md)

‎roadmap/CELLSCRIPT_0_24_ROADMAP.md‎

Lines changed: 37 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -393,6 +393,38 @@ the independent live-state readability/spendability versus authorization/
393393
predicate-security axes. Merely resolving two nodes does not make conflicting
394394
CellScript module/type identities compatible.
395395

396+
## Website And Stable-Release Integrity
397+
398+
The 2026-08-13 production deployment audit found that the 0.24 website branch
399+
had diverged before the two website commits that published the 0.23 stable
400+
release identity. The resulting build contained the 0.24 Registry and
401+
Playground experience, but its homepage still advertised `v0.22.0`, its
402+
Playground still loaded the 0.22 WASM bundle, and its distribution regression
403+
test incorrectly required those stale identities. A green website build was
404+
therefore not sufficient evidence that the public release identity was current.
405+
406+
The corrected website gitlink `00f0e2cb184c1343d2c6b57aa6a413028976a3e0`
407+
closes that gap:
408+
409+
- the homepage release card names the current stable release `v0.23.0`, its
410+
2026-08-11 publication date, and the exact GitHub release URL;
411+
- the Playground loads the released 0.23 WASM asset identified by
412+
`20260811-v0.23.0-fa369818` and SHA-256
413+
`fa369818631532c657e73e970b6138e3a231d532a073d428dfe7f61686135dd5`;
414+
- the homepage and distribution checks reject a stale release link, tag,
415+
compiler asset version, compiler version, or WASM digest; and
416+
- the production site is built from the parent repository's exact website
417+
gitlink rather than from whichever branch happens to be checked out in a
418+
developer's submodule worktree.
419+
420+
Before any later website deployment, the checked-in GitHub activity snapshot
421+
must be regenerated and reviewed against GitHub's published release state, and
422+
the website branch must include the latest stable-release synchronization
423+
before feature work is layered on top. The homepage continues to advertise the
424+
latest stable tag; the 0.24 nightly branch and these development release notes
425+
do not turn into a stable release merely because their website changes are
426+
deployed.
427+
396428
## Gate Integration
397429

398430
### `dev`
@@ -411,7 +443,8 @@ CellScript module/type identities compatible.
411443
- package simulator and CKB-VM tests;
412444
- source-map round-trip and semantic coverage fixtures;
413445
- Registry worker/checker integration; and
414-
- current website/WASM/package checks.
446+
- current website/WASM/package checks, including the stable release tag,
447+
compiler asset identity, and exact WASM digest.
415448

416449
### `backend`
417450

@@ -525,6 +558,9 @@ evidence from the remaining external handoff and promotion checkpoints:
525558
normalization have positive and fail-closed regressions.
526559
- [x] Registry profile admission uses a versioned catalog and only
527560
`cellscript_source` is dependency-resolving.
561+
- [x] The production website advertises the actual current stable release,
562+
binds the matching released Playground WASM, and rejects stale release or
563+
compiler-asset identities in its build regressions.
528564
- [ ] The Myelin adapter pins and verifies the upstream compiler/checker
529565
contract without vendoring compiler source or accepting raw-witness aliases.
530566
CellScript publishes and tests the versioned handoff contract; Myelin's exact

0 commit comments

Comments
 (0)