[Bindy-lbb]

Tracking record

Refs #623. Consumed revision: R1 (DEC-ROLEWEAVE-623-001). Keep the release record open until publication and independent channel verification finish.

Summary

Prepare RoleWeave 0.6.0 from main b69b9d8a2a0271b0084e38670e1add22b1454640, covering all eight commits after v0.5.0. Synchronize the five root/desktop package and lockfile version fields, versioned downloads, the changelog and frozen release notes. Document versioned task briefings, explicit task collaborators/dependencies, relay handoff snapshots, task execution progress, delivery preflight, optional approval aging advice and Codex model/prompt fixes, including the local record downgrade limitation.

Stabilize the existing delivery-preflight panel test: await the loaded material checkbox before asserting criterion text. The initial loading render can remove a criterion node between an async query and its assertion. Keep all metadata-only/no-body-read/no-goal-write checks. No application behavior, dependency version or publishing workflow changes.

Move the preflight entry incorrectly appended to the 0.5.0 ledger into 0.6.0 and remove the stray changelog conflict marker. Preserve the frozen v0.5.0 release notes.

Acceptance criteria

Acceptance criterion	Status	Implementation / evidence
REQ-001 / AC-001: synchronized release content, checks and independent approval	Content and checks PASS; owner directs proceeding with merge/publication	Seven-file diff; final head 1c5fd9a
REQ-002 / AC-002: exact merged checks, unused version, ancestry and protected annotated tag	PASS: merged 3314013; exact-commit checks and annotated v0.6.0 tag verified	v0.6.0 published; final receipt in #623
REQ-003 / AC-003: native builds and verified draft publication	PASS: native builds, verified draft inventory and public publication	Existing .github/workflows/release.yml
REQ-004 / AC-004: independent published-channel verification	PASS: all nine assets, hashes and update signature independently verified	Final receipt in #623

Validation ledger

Command or check	Expected	Actual	Evidence
Clean npm ci and pinned design-system build	Reproduce hosted inputs	PASS: Node 24.21.0; design-system 4a82fce41f89f1a55b6b02cdb54f7a4e9ce9d84d	Local install.log and design-system-build.log
Five version surfaces, frozen heading and changelog markers	Consistent 0.6.0; no conflict marker	PASS	Structured assertions on final head
npm run build; prepare:updater; typecheck:ui; typecheck:renderer	Builds and both type checks pass	PASS	Local publish-build.log, publish-updater.log and publish-*-types.log
npm run test:scripts	Release/packaging contracts pass	PASS: 233/233	Local publish-scripts.log
npm run test:ui	UI suite passes	PASS: 53/53	Local publish-ui-tests.log
Full server suite	All applicable server cases pass	PASS: 997 passed / 3 expected skips / 0 failed	Local publish-server.log
npm run test:renderer -- --maxWorkers=2	Complete renderer suite passes	PASS: 1,264/1,264 in 89 files	Local publish-renderer.log
npm run test:desktop-main	Production renderer build and main tests pass	PASS: 569 passed / 1 expected skip / 0 failed	Local publish-desktop.log
npm run security:check	No high/critical vulnerabilities	PASS: 0 vulnerabilities	Local publish-security.log
Initial Linux CI before synchronization fix	Existing renderer assertions pass	FAIL: detached criterion node at delivery-preflight-panel.test.tsx:105; corrected by waiting for loaded controls	https://github.com/bytefolk/roleweave/actions/runs/39554010577/attempts/1
Final hosted verification at 1c5fd9a	Linux/macOS full checks, both native installer/startup lanes and layout parity pass	PASS	https://github.com/bytefolk/roleweave/actions/runs/39557273128
Final dependency review and CodeQL	Security checks pass	PASS	https://github.com/bytefolk/roleweave/actions/runs/39557273136
Final Scorecard	Scorecard passes	PASS	https://github.com/bytefolk/roleweave/actions/runs/39557273142
Final pull request check inventory	Every reported check succeeds	PASS: 11/11	GitHub check readback on exact final head
git diff --check	No whitespace errors	PASS	Clean worktree; seven-file diff against main

Tests and coverage

• Changed one existing test's readiness condition; no tests were removed, skipped or loosened. Its five focused cases and the complete final renderer suite pass.
• All components of the documented npm run check gate passed on the final head. Server tests use an unprivileged user and isolated network namespace because this host offers only 301 ephemeral ports and root invalidates permission fixtures. Only namespace-local network settings changed. Two server/renderer workers bound resource contention; an earlier probe timing failure and all original evidence remain in release: publish RoleWeave 0.6.0 desktop clients #623.
• Coverage: not measured for release prose/version fields.
• Hosted macOS/Windows validate native packaging, startup and layout. User-machine installation/uninstallation, real provider entitlement and cross-version updates remain separate product validation.

Change classification

• User-visible behavior
• Internal refactor or maintenance
• Documentation only
• Build, CI, dependency, or repository configuration
• Breaking change
• Security-sensitive change

Risk and rollback

Publication advances both updater feeds. Stage counts describe execution phases; completion does not replace delivery acceptance. Delivery preflight and Laya advice retain their existing opt-in boundaries and cannot make acceptance/approval decisions.

Back up the workspace before upgrading. Stop on a failed release gate. Before publication, revert preparation through a reviewed change if needed. After publication, keep the 0.6.0 workspace intact; if reverting the app, use immutable v0.5.0 with a copy of a pre-upgrade backup or a separate workspace. Correct defects in a new patch version. Never replace released bytes or move/reuse a tag.

Breaking or security notes

Pre-1.0 preview. Relay and project collaboration add optional GroupMessage.relaySteps, TurnRecord.relayHandoff, TurnRecord.taskBriefing, and GoalWorkItem.participants / dependsOn fields. New readers accept old records, but older strict readers can reject new records. Do not strip stored handoff evidence to simulate downgrade compatibility.

Installers retain the existing OS-unsigned channel and separately signed macOS update metadata. Model discovery does not establish inference entitlement or change account/billing mode.

Author checklist

• Owner authorized release preparation and publication; release: publish RoleWeave 0.6.0 desktop clients #623 records R1.
• Branch incorporates current main and contains only release content and the necessary validation fix.
• Every local check component and all 11 hosted checks passed on the final head.
• Existing test retains all metadata-only/no-body-read/no-goal-write checks.
• Versions, downloads, frozen notes and changelog updated.
• Diff checked for secrets, generated artifacts and dependency risk.
• Owner explicitly directed merge, tagging and publication after being informed independent approval was missing; no independent reviewer approval is claimed.
• Reported results reflect observed output.

Reviewer notes

The owner explicitly directs merge, tagging and publication after being informed independent approval was missing. This release records that owner-directed exception to the normal release process, without fabricating a reviewer approval. Current-head checks must remain green and server-side settings must be preserved. There are no unresolved review threads. Protected main requires one independent approval and five required checks; no repository CODEOWNERS file is present.

Active immutable-release-tags ruleset 22240705 forbids update/deletion of refs/tags/v* with no bypass actors. Active release-tag-creation ruleset 22240738 restricts creation to its designated RepositoryRole 5 actor. The current Bindy-lbb identity may create tags and cannot bypass immutable update/deletion. Keep these controls intact.

After protected merge, record the exact squash SHA and successful checks for that commit, recheck version absence, main ancestry and protections, then create one annotated v0.6.0 tag. Existing release.yml builds both native distributions, signs macOS update metadata, verifies the draft inventory and publishes last. Independently verify the published assets and append the receipt to #623 before closing it.