@@ -393,6 +393,38 @@ the independent live-state readability/spendability versus authorization/
393393predicate-security axes. Merely resolving two nodes does not make conflicting
394394CellScript module/type identities compatible.
395395
396+ ## Website And Stable-Release Integrity
397+
398+ The 2026-08-13 production deployment audit found that the 0.24 website branch
399+ had diverged before the two website commits that published the 0.23 stable
400+ release identity. The resulting build contained the 0.24 Registry and
401+ Playground experience, but its homepage still advertised ` v0.22.0 ` , its
402+ Playground still loaded the 0.22 WASM bundle, and its distribution regression
403+ test incorrectly required those stale identities. A green website build was
404+ therefore not sufficient evidence that the public release identity was current.
405+
406+ The corrected website gitlink ` 00f0e2cb184c1343d2c6b57aa6a413028976a3e0 `
407+ closes that gap:
408+
409+ - the homepage release card names the current stable release ` v0.23.0 ` , its
410+ 2026-08-11 publication date, and the exact GitHub release URL;
411+ - the Playground loads the released 0.23 WASM asset identified by
412+ ` 20260811-v0.23.0-fa369818 ` and SHA-256
413+ ` fa369818631532c657e73e970b6138e3a231d532a073d428dfe7f61686135dd5 ` ;
414+ - the homepage and distribution checks reject a stale release link, tag,
415+ compiler asset version, compiler version, or WASM digest; and
416+ - the production site is built from the parent repository's exact website
417+ gitlink rather than from whichever branch happens to be checked out in a
418+ developer's submodule worktree.
419+
420+ Before any later website deployment, the checked-in GitHub activity snapshot
421+ must be regenerated and reviewed against GitHub's published release state, and
422+ the website branch must include the latest stable-release synchronization
423+ before feature work is layered on top. The homepage continues to advertise the
424+ latest stable tag; the 0.24 nightly branch and these development release notes
425+ do not turn into a stable release merely because their website changes are
426+ deployed.
427+
396428## Gate Integration
397429
398430### ` dev `
@@ -411,7 +443,8 @@ CellScript module/type identities compatible.
411443- package simulator and CKB-VM tests;
412444- source-map round-trip and semantic coverage fixtures;
413445- Registry worker/checker integration; and
414- - current website/WASM/package checks.
446+ - current website/WASM/package checks, including the stable release tag,
447+ compiler asset identity, and exact WASM digest.
415448
416449### ` backend `
417450
@@ -525,6 +558,9 @@ evidence from the remaining external handoff and promotion checkpoints:
525558 normalization have positive and fail-closed regressions.
526559- [x] Registry profile admission uses a versioned catalog and only
527560 ` cellscript_source ` is dependency-resolving.
561+ - [x] The production website advertises the actual current stable release,
562+ binds the matching released Playground WASM, and rejects stale release or
563+ compiler-asset identities in its build regressions.
528564- [ ] The Myelin adapter pins and verifies the upstream compiler/checker
529565 contract without vendoring compiler source or accepting raw-witness aliases.
530566 CellScript publishes and tests the versioned handoff contract; Myelin's exact
0 commit comments