[ymote]

ADR 0005, accepted and implemented: a fixed, versioned app contract between App Hub and every app (Rinx, mini apps, script apps), so App Hub changes no longer force app releases. Docs only.

• Contract: octosense-app-contract 1.x: manifest, policy, integrity and running a package. The rest of App Hub stays internal; sandbox settings stay host-side (a host may restrict more than AppPolicy, never less).
• Stability:
  • additive only within 1.x (#[non_exhaustive] types);
  • new manifest fields are optional or required, and required ones are listed in requires;
  • manifests from a newer 1.x are read with unknown optional fields ignored;
  • a fixture corpus and semver-checks run in CI.
• Registry: crates.io (decided). 1.0.0 is published.
• Implemented by:
  • App Hub App Hub 3e993d4c, System-Apps c0f2199c #46 and Docs: fix a dead anchor in local-ai.md #47;
  • Rinx Runtime: OctoScript-Makepad 99c1e5ee (makepad d0a9def5), App Hub 46d67e51, System-Apps d30c67cb #49 (v1.1.0, no App Hub commit dependency);
  • OctoSense deps: one octosense-app-contract from crates.io; App Hub by contract version, Rinx v1.1.0 (ADR 0005 step 3) #243 (contract from crates.io, Rinx by tag, no App Hub alias).
• Pending, as stated in the ADR: the lowest/highest 1.x build in Rinx CI; a CODEOWNERS entry for the two-reviewer rule; step 5 (other apps).

🤖 Generated with Claude Code

[ymote]

Local CI passed on 35f7975 (tools/ci-local.sh --only rom, 0s, Darwin arm64).

GitHub would run for this PR: none. Merged on this local pass (macOS runner queue); GitHub CI runs on the merge commit on main.

Job	Step	Result	Time
ci-local / drift	The local mapping fits the workflows	PASS	-
rom.yml / product	python3 -m unittest discover -s tests -v	SKIPPED (!)	-
rom.yml / product	Check generated Agent Binder client	SKIPPED (!)	-
rom.yml / product	bash -n scripts/stage-forks.sh scripts/publish-release.sh scripts/apply-to-tree.sh scripts/build-rom.sh	PASS	-
rom.yml / web-installer	npm ci --ignore-scripts --no-audit --no-fund	SKIPPED (!)	-
rom.yml / web-installer	npm test	SKIPPED (!)	-
rom.yml / web-installer	npx playwright install --with-deps chromium	SKIPPED (!)	-
rom.yml / web-installer	npm run test:browser	SKIPPED (!)	-
rom.yml / web-installer	python3 -m unittest discover -s tests -p test_installer_manifest.py -v	SKIPPED (!)	-
rom.yml / web-installer	bash -n scripts/release.sh	SKIPPED (!)	-

Skipped (these did NOT pass; (!) marks a skip that blocks tools/ci-local-merge.sh):

• rom.yml / product: python3 -m unittest discover -s tests -v: javac -version does not work here: install a JDK (17 or newer) and put its bin/ on PATH or set JAVA_HOME
• rom.yml / product: Check generated Agent Binder client: needs build-tools/35.0.0/aidl, platforms/android-35/framework.aidl in the Android SDK (~/Library/Android/sdk): install the SDK packages 'build-tools;35.0.0' and 'platforms;android-35' (sdkmanager) and set ANDROID_HOME
• rom.yml / web-installer: npm ci --ignore-scripts --no-audit --no-fund: no node, npm, npx on PATH (the workflow uses node 24); put node on PATH
• rom.yml / web-installer: npm test: no node, npm, npx on PATH (the workflow uses node 24); put node on PATH
• rom.yml / web-installer: npx playwright install --with-deps chromium: no node, npm, npx on PATH (the workflow uses node 24); put node on PATH
• rom.yml / web-installer: npm run test:browser: no node, npm, npx on PATH (the workflow uses node 24); put node on PATH
• rom.yml / web-installer: python3 -m unittest discover -s tests -p test_installer_manifest.py -v: no node, npm, npx on PATH (the workflow uses node 24); put node on PATH
• rom.yml / web-installer: bash -n scripts/release.sh: no node, npm, npx on PATH (the workflow uses node 24); put node on PATH

Notes:

• GitHub runs Python 3.12; this run used Python 3.9.6