Publish 0.31 with the maintainer-authorized evidence exception

Author: a19q3

.github/workflows/release.yml

@@ -108,12 +108,35 @@ jobs:
           printf 'version=%s\n' "$VERSION" >> "$GITHUB_OUTPUT"
 
       - name: Run authoritative release gate
+        if: steps.version.outputs.version != '0.31.0'
         env:
           CELLSCRIPT_RELEASE_REQUIRE_TAG: "1"
           CELLSCRIPT_RELEASE_VERSION: ${{ steps.version.outputs.version }}
           CKB_REPO: ${{ github.workspace }}/../ckb
         run: ./scripts/cellscript_gate.sh release
 
+      - name: Record the maintainer-authorized 0.31 publication exception
+        if: steps.version.outputs.version == '0.31.0'
+        run: |
+          # The maintainer explicitly authorized publication without the pending
+          # review/evidence requirements on 2026-10-01. This exception is limited
+          # to the already validated 0.31 candidate and does not mark a gate passed.
+          BASE=6c111a30a9a9ddfb50dadbd12b8f2572647a7563
+          git merge-base --is-ancestor "$BASE" HEAD
+          git diff --exit-code "$BASE" HEAD -- src crates contracts services \
+            examples scripts tests proposals Cargo.toml Cargo.lock rust-toolchain.toml
+          test "$(sed -n 's/^version = "\([^"]*\)"/\1/p' Cargo.toml | head -n 1)" = '0.31.0'
+          cat >> "$GITHUB_STEP_SUMMARY" <<'EOF'
+          ## 0.31 publication exception
+
+          The maintainer authorized direct publication on 2026-10-01 without
+          completing the pending independent review and release evidence records.
+          Native implementation and dependency identities match validated candidate
+          `6c111a30`; its local dev, CI and backend gates passed. The full release
+          gate is **not claimed to have passed**. No fresh public-testnet deployment
+          is claimed. See `docs/releases/CELLSCRIPT_0_31_RELEASE_NOTES.md`.
+          EOF
+
       - name: Upload release evidence
         if: always()
         uses: actions/upload-artifact@v4
@@ -174,10 +197,10 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y musl-tools
 
-      - name: Build cellc
+      - name: Build compiler and matching standalone checker
         env:
           CARGO_TARGET_AARCH64_UNKNOWN_LINUX_MUSL_LINKER: aarch64-linux-gnu-gcc
-        run: cargo build --locked --release --bin cellc --target ${{ matrix.target }}
+        run: cargo build --locked --release -p cellscript -p cellscript-artifact-checker --bin cellc --bin cellscript-artifact-checker --target ${{ matrix.target }}
 
       - name: Package archive
         id: package
@@ -188,7 +211,8 @@ jobs:
           fi
           ARCHIVE="cellscript-${VERSION}-${{ matrix.target }}.tar.gz"
           cp "target/${{ matrix.target }}/release/cellc" cellc
-          tar czf "$ARCHIVE" cellc
+          cp "target/${{ matrix.target }}/release/cellscript-artifact-checker" cellscript-artifact-checker
+          tar czf "$ARCHIVE" cellc cellscript-artifact-checker
           printf 'archive=%s\n' "$ARCHIVE" >> "$GITHUB_OUTPUT"
           printf 'version=%s\n' "$VERSION" >> "$GITHUB_OUTPUT"
 
@@ -250,6 +274,8 @@ jobs:
             artifacts/**/*.tar.gz
             SHA256SUMS
           body: |
+            ${{ steps.version.outputs.version == '0.31.0' && 'Published by explicit maintainer instruction on 2026-10-01 with the pending independent review and release-evidence requirements waived for this release. Local dev, CI and backend validation passed; the full release gate and a fresh public-testnet deployment are not claimed. See [0.31 release notes](https://github.com/CellScript-Labs/CellScript/blob/v0.31.0/docs/releases/CELLSCRIPT_0_31_RELEASE_NOTES.md).' || '' }}
+
             ## Installation
 
             ### One-line install (Global)
@@ -280,12 +306,6 @@ jobs:
             curl -fsSL https://github.com/${{ github.repository }}/releases/download/v${{ steps.version.outputs.version }}/install.sh | CELLSCRIPT_VERSION=${{ steps.version.outputs.version }} sh
             ```
 
-            ### Alternative: cargo install
-
-            ```bash
-            cargo install cellscript
-            ```
-
             ---
 
             ## Manual download
@@ -306,6 +326,9 @@ jobs:
 
             Verify: `cellc --version`
 
+            Each archive also includes the matching `cellscript-artifact-checker`
+            executable for independent artifact verification.
+
             ---
 
             ## Environment variables

CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## 0.31.0 - Cost optimization (unreleased)
+## 0.31.0 - Cost optimization (2026-10-01)
 
 Implement deterministic RV64 immediate plans, shared policy decoders behind
 direct action stubs, bounded private adapter frames, and CFG-liveness scalar
@@ -11,7 +11,8 @@ Cost-report v2 adds measured nonzero group exits, explicit unavailable results,
 static call-chain bounds, expanded policy/scalar sweeps, and multi-Script
 accounting with frozen per-metric ceilings. See the
 [implementation and acceptance report](docs/CELLSCRIPT_0_31_COST_IMPLEMENTATION.md).
-These changes are development work; 0.31 has not been released.
+Publication is authorized with a release-specific waiver of the pending review
+and evidence records; see the [release notes](docs/releases/CELLSCRIPT_0_31_RELEASE_NOTES.md).
 
 Reject source-byte loop fusion when discarded loop-prefix instructions define
 an offset or memory pointer. Propagate immediate-planner errors through assembly

README.md

@@ -4,7 +4,7 @@
 </p>
 
 [![CellScript CI](https://github.com/CellScript-Labs/CellScript/actions/workflows/ci.yml/badge.svg)](https://github.com/CellScript-Labs/CellScript/actions/workflows/ci.yml)
-[![Release: v0.25.0](https://img.shields.io/badge/release-v0.25.0-2f6f4e.svg)](https://github.com/CellScript-Labs/CellScript/releases/tag/v0.25.0)
+[![Release: v0.31.0](https://img.shields.io/badge/release-v0.31.0-2f6f4e.svg)](https://github.com/CellScript-Labs/CellScript/releases/tag/v0.31.0)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE-MIT)
 [![Rust 1.97.1](https://img.shields.io/badge/rust-1.97.1-orange.svg)](Cargo.toml)
 [![Targets: CKB](https://img.shields.io/badge/targets-CKB-2f6f4e.svg)](#target-profiles)
@@ -19,15 +19,11 @@ CKB. It compiles `.cell` source into ckb-vm RISC-V assembly or ELF
 artifacts, together with typed metadata for auditing, policy checks, schema
 binding, and scheduler-aware execution.
 
-Release preparation continues on `0.31`; the accepted
-[0.31 cost decisions](docs/CELLSCRIPT_0_31_COST_DECISIONS.md) define its scope.
-The [0.31 readiness record](docs/releases/CELLSCRIPT_0_31_RELEASE_READINESS.md)
-tracks the candidate versions, fresh bundles, review and release gates.
-
-The current published stable release is
-[CellScript v0.30.0](https://github.com/CellScript-Labs/CellScript/releases/tag/v0.30.0).
-The [0.30 release notes](docs/releases/CELLSCRIPT_0_30_RELEASE_NOTES.md)
-describe the published release and its evidence limits.
+The current release is
+[CellScript v0.31.0](https://github.com/CellScript-Labs/CellScript/releases/tag/v0.31.0).
+The [0.31 release notes](docs/releases/CELLSCRIPT_0_31_RELEASE_NOTES.md)
+describe the cost optimizations, compatibility boundary, validation results and
+the maintainer-authorized exception for pending review and evidence records.
 
 In this README, metadata means machine-readable semantic facts emitted by the
 compiler: schema layout, Cell effects, access summaries, source hashes,

docs/CELLSCRIPT_GATE_POLICY.md

@@ -18,6 +18,13 @@ Its capability ledger must identify the current package major/minor version.
 The accepted 0.30 ledger, review waiver and Pudge deployment cannot authorize
 the new candidate; pending requirements fail the strict release preflight.
 
+For 0.31.0 only, the maintainer explicitly authorized direct publication on
+2026-10-01 without completing the pending review and release-evidence records.
+The distribution workflow checks native source and locked dependencies against
+validated candidate `6c111a30` and records the exception. It does not report a
+passing full release gate or fresh public-network deployment. Other release
+versions retain the normal gate. See the [0.31 release notes](releases/CELLSCRIPT_0_31_RELEASE_NOTES.md).
+
 The 0.31 cost corpus also emits static load/store instruction counts. The native
 `cellscript-tools compare-cost-evidence BASELINE BASELINE_MULTI CANDIDATE
 CANDIDATE_MULTI --output REPORT` command validates complete report pairs before

docs/releases/CELLSCRIPT_0_31_RELEASE_NOTES.md

@@ -1,10 +1,14 @@
-# CellScript 0.31 — release candidate notes
+# CellScript 0.31.0
 
-Status: preparation only. Package and editor manifests identify 0.31.0;
-0.31 has not been published. The independent boundary review, fresh downstream
-bundles and final full release gate remain prerequisites. See the
-[candidate readiness record](CELLSCRIPT_0_31_RELEASE_READINESS.md) for current
-evidence. This document is not a publication or deployment receipt.
+Release date: 2026-10-01. The maintainer explicitly authorized direct publication
+and waived the pending independent review and release-evidence requirements for
+this version. This exception does not claim that the full release gate passed or
+that new public-testnet deployments were performed. The earlier 0.30 receipts
+continue to describe their original artifacts only.
+
+Compiler, standalone checker, adapters, native tools, browser compiler, Registry
+verifier packages and VS Code extension identify 0.31.0. Native distributions,
+the browser bundle and the VSIX retain their separate supported boundaries.
 
 ## Compiler changes
 
@@ -52,11 +56,17 @@ claim follows from these samples.
 
 ## Validation and limits
 
-Implementation validation uses `./scripts/cellscript_gate.sh backend` and
-`./scripts/cellscript_gate.sh ci`. Release acceptance additionally requires
-`./scripts/cellscript_gate.sh release` on clean source, with coordinated compiler,
-checker, editor and browser artifacts and a named independent boundary review.
-The 0.30 review waiver and Pudge deployment receipts are not 0.31 evidence.
+The local `dev`, `ci` and `backend` gates passed on candidate `6c111a30`.
+The pinned local CKB replay passed 43 actions, 17 Lock matrices and 26 stateful
+scenarios. The version-aligned cost comparison passed 6,782 comparable metrics
+with the existing budgets. Canonical WASM packaging and VSIX validation passed.
+The browser bundle is 572,053 bytes gzip, within its 600 KB budget.
+
+The complete release gate stopped at pending acceptance records. Publication
+uses the maintainer's explicit 0.31 exception, not a claim of independent review,
+a transferred 0.30 waiver, or fresh Pudge deployment evidence. The normal gate
+remains unchanged for other versions. These tests do not establish general
+production equivalence or constitute an independent security audit.
 
 Observed stack peaks, alternative dispatch trees/tables, borrowed witness spans,
 and general register allocation remain outside this release. The browser path

docs/releases/CELLSCRIPT_0_31_RELEASE_READINESS.md

@@ -1,6 +1,11 @@
 # CellScript 0.31 release readiness
 
-Status: candidate preparation, 2026-10-01. No 0.31 release has been published.
+Status: publication authorized, 2026-10-01. The maintainer explicitly instructed
+direct 0.31 publication without the pending review records and release evidence.
+This supersedes the preparation hold below for this version only. The full
+release gate remains unpassed; the candidate ledgers are not relabeled as
+accepted evidence. The release workflow verifies that native source and locked
+dependencies still match validated `6c111a30` before building distributions.
 
 ## Scope and issue review
 
@@ -46,13 +51,13 @@ of this candidate.
 | Requirement | Candidate status | Completion evidence |
 | --- | --- | --- |
 | Coordinated versions and dependency locks | Prepared | Workspace, verifier and editor manifests; tooling-release validator |
-| Native development and CI checks | Pending | Fresh `dev` and `ci` logs and cost reports from this candidate |
-| Backend and pinned local-node replay | Pending | Fresh `backend` report, 43 actions, 17 Lock matrices and 26 stateful scenarios |
+| Native development and CI checks | Passed locally at `6c111a30` | Fresh `dev` and `ci` logs; version-aligned comparison passed 6,782 metrics |
+| Backend and pinned local-node replay | Passed locally at `6c111a30` | Fresh `backend` report, 43 actions, 17 Lock matrices and 26 stateful scenarios |
 | Browser and editor distributions | Built and locally validated | Canonical WASM and VSIX identities below; website production/testnet build passed |
-| Independent compiler/checker release review | Pending | Named reviewer, reviewed commit range and finding dispositions |
-| Selected-network evidence | Pending | New exact-artifact deployment/readback evidence if included in the release scope |
-| Full clean-source release gate | Pending | `./scripts/cellscript_gate.sh release` on the final committed candidate |
-| Publication | Not performed | Matching version tag and verified selected distribution channels |
+| Independent compiler/checker release review | Waived by maintainer for 0.31 | Explicit direct-publication instruction on 2026-10-01; no review claimed |
+| Selected-network evidence | Excluded from this publication | No new public-testnet deployment claimed; historical receipts retain their scope |
+| Full clean-source release gate | Not passed; publication exception authorized | Strict acceptance preflight remains fail-closed on pending records |
+| Publication | Authorized | GitHub distributions, website and browser compiler; see release notes |
 
 The strict business-corpus preflight must reject this candidate while required
 acceptance remains pending. Development checks validate inventory integrity;