Skip to content

Align final preview release evidence #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
s1korrrr merged 1 commit into from
Jul 20, 2026
Merged

Align final preview release evidence #3

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,9 @@ All notable changes to DevScope are documented here. The format follows

### Fixed

- Blocking process waits and pipe drains no longer occupy Swift cooperative
executor workers, preserving timeout and cancellation behavior on constrained
hosted runners.
- Recovery-cache payload limits now account for JSON escaping and reject oversized encoded metadata before writing, so every accepted save remains readable.
- Sensitive HTTP header redaction now removes complete Digest, AWS signature, proxy-authorization, and cookie values.
- Partial filesystem mutations now expose exact local recovery locations with Copy Path and Reveal in Finder actions.
Expand Down
2 changes: 1 addition & 1 deletion docs/release/0.1.0/RELEASE_MANIFEST.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
},
"tests": {
"command": "swift test -Xswiftc -warnings-as-errors",
"executed": 669,
"executed": 671,
"failures": 0
},
"sourcePublication": {
Expand Down
4 changes: 2 additions & 2 deletions docs/release/0.1.0/RELEASE_STATUS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ packaging passes, but the sandbox product is not feature-equivalent.
| Deterministic source gate | PASS | `script/check_open_source_readiness.sh` |
| Public history and tree | PASS BY CONSTRUCTION | Canonical publication uses fresh history from the exact sanitized source archive; legacy private objects and author metadata are not transferred; exact-tree Gitleaks remains required |
| Dependency declaration | PASS | Swift package dependency graph is empty; third-party notices and SBOM agree |
| Strict test suite | PASS | 669 tests, 0 failures, warnings treated as errors |
| Strict test suite | PASS | 671 tests, 0 failures, warnings treated as errors |
| Strict release build | PASS | Production build completed with warnings treated as errors |
| Exact development runtime | PASS | Exact staged bundle launched, matched to its running executable, and passed strict bundle-signature verification; Processes and Automations received a real UI smoke |
| Universal full-access package | PASS (local) | `x86_64 arm64`, Apple Events entitlement, App Sandbox absent, signature/policy validation passed, license notices embedded |
Expand All @@ -37,7 +37,7 @@ packaging passes, but the sandbox product is not feature-equivalent.
| Notarization | BLOCKED:EXTERNAL | No `devscope-notary` Keychain profile or equivalent App Store Connect credentials are configured |
| Repository publication settings | OWNER ACTION | Verify public visibility, default-branch protection, private vulnerability reporting, and security settings after organization import |
| Remote required checks | VERIFY ON PUBLIC PR | Record organization-run results; do not inherit the legacy personal repository's billing failure as code evidence |
| Exact hardened-source archive | PASS (local) | The source tree passed readiness, 669 strict tests, warnings-as-errors release build, and exact-tree Gitleaks from a clean `git archive`; repeat from the exact public commit |
| Exact hardened-source archive | PASS (local) | The source tree passed readiness, 671 strict tests, warnings-as-errors release build, and exact-tree Gitleaks from a clean `git archive`; repeat from the exact public commit |

## Log boundary

Expand Down
4 changes: 2 additions & 2 deletions docs/release/0.1.0/TEST_EVIDENCE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,14 +10,14 @@
## Source verification

- `./script/check_open_source_readiness.sh`: passed.
- `swift test -Xswiftc -warnings-as-errors`: 669 tests, 0 failures.
- `swift test -Xswiftc -warnings-as-errors`: 671 tests, 0 failures.
- `swift build -c release -Xswiftc -warnings-as-errors`: passed.
- `bash -n script/*.sh`: passed.
- `plutil -lint Resources/PrivacyInfo.xcprivacy config/*.entitlements`: passed.
- GitHub YAML parsed with Ruby Psych: all workflow, issue-form, funding, and Dependabot files passed.
- `gitleaks dir --redact --no-banner --no-color .`: approximately 81.15 MB, no pattern findings.
- Public snapshot `gitleaks dir --redact --no-banner --no-color .`: required at the exact organization PR commit.
- Clean `git archive` verification: readiness, all 669 strict tests, the warnings-as-errors release build, and exact-tree Gitleaks must pass from the exact public commit extraction.
- Clean `git archive` verification: readiness, all 671 strict tests, the warnings-as-errors release build, and exact-tree Gitleaks must pass from the exact public commit extraction.
- Public history inspection: the organization repository is seeded from a fresh source snapshot and must contain no legacy private commits or deleted objects.
- Hosted Secret Scan and Release Gates results must be recorded from the exact organization PR rather than inherited from the legacy personal repository.
- Official Apache-2.0 text comparison: byte-for-byte match.
Expand Down
Loading