Skip to content

Release 0.15.0

Choose a tag to compare

View all tags
@cdcavell cdcavell released this 12 Sep 01:24
· 21 commits to main since this release
v0.15.0
a873236
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ASI Backbone Learning 0.15.0 is a repository-security, reproducibility, and sample-quality release. It strengthens the trustworthiness of the educational material while adding new guidance about audit evidence and repository-host controls.

Highlights

  • Published “Your Audit Log Is Not Evidence”, covering durable, verifiable decision evidence.
  • Added guidance for configuring and validating repository-host security controls.
  • Introduced CodeQL, OWASP Dependency-Check, OpenSSF Scorecard, and workflow-security analysis.
  • Documented and automated protected main branch controls.
  • Centralized sample package versions and added locked NuGet restores.
  • Pinned the .NET SDK used by local development and CI.
  • Made the VSTest runner explicit for the existing xunit.v3.mtp-off configuration.
  • Added repository-wide C# formatting rules and CI enforcement.
  • Added property-based replay-protection tests with FsCheck.
  • Standardized sample project layouts as Sample/ and Tests/.
  • Removed obsolete dependency-check suppressions for packages not used by Learning.
  • Added merged-branch retention and cleanup guidance.

Sample Reliability

The sample suite now has a more reproducible dependency and validation model:

  • Package versions are managed centrally.
  • Every sample project has a committed lock file.
  • CI restores packages using locked mode.
  • Formatting is validated before tests.
  • The SDK and test runner are explicitly selected.
  • Replay-protection invariants include property-based coverage.

Repository Security

This release adds layered repository-security validation:

  • CodeQL analysis for C#.
  • OWASP dependency analysis.
  • OpenSSF Scorecard monitoring.
  • GitHub Actions validation with actionlint and zizmor.
  • Pinned workflow dependencies.
  • Documented branch rules, review requirements, and administrative tooling.

Documentation and Publication

  • Added repository-host security documentation.
  • Clarified illustrative capability-validation examples.
  • Refreshed the roadmap and ongoing maintenance priorities.
  • Preserved strict DocFX, sitemap, RSS, link, and metadata validation.

Validation

Sample tests:          266 passed
Sample build:          0 warnings, 0 errors
DocFX pages:           110
DocFX validation:      0 warnings, 0 errors
Sitemap URLs:          110
RSS items:             17

Formatting, locked restore, CodeQL, dependency scanning, workflow-security, link, IndexNow, citation metadata, and publication-integrity checks passed.

Citation and Archival Metadata

Release metadata is synchronized as:

CITATION.cff
version: 0.15.0
date-released: 2026-09-11

.zenodo.json
version: 0.15.0

The stable concept DOI remains:

10.5281/zenodo.21938556

The version-specific 0.15.0 DOI should be recorded after Zenodo creates the archived snapshot.

Release Scope

Version 0.15.0 is a citable educational and architectural snapshot. It does not establish a runtime compatibility contract or introduce a production governance engine, compliance certification, legal standard, autonomous-agent runtime, or AI model.

Full changelog

Assets 5
Loading