Skip to content

Repository navigation

Release 0.1.0-alpha.12

Pre-release
Pre-release

Choose a tag to compare

View all tags
@cdcavell cdcavell released this 24 Oct 19:54
· 16 commits to main since this release
v0.1.0-alpha.12
2726bb4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

This prerelease completes the repository’s stable-readiness groundwork while remaining a 0.x prerelease. It adds production-shaped deployment validation, release-to-release upgrade testing, protected coverage floors, stronger governance observability, and a complete acknowledgment workflow.

Added

  • A production-shaped Docker Compose configuration with external authentication, explicit host and proxy trust, encrypted persistent Data Protection keys, separate migrations, and no Development-only components.
  • Automated upgrade validation from v0.1.0-alpha.11, including evidence preservation, schema parity, idempotency, backup guidance, and recovery boundaries.
  • A versioned stable-release policy defining the 1.x compatibility contract, graduation gates, release procedure, and seven-day candidate soak.
  • A complete host-owned acknowledgment workflow for consequential operations, including one-time challenges, actor binding, expiration, replay protection, and persisted evidence.
  • OpenTelemetry spans and metrics for governance decisions, lifecycle events, and audit reconciliation, with privacy-safe dimensions.
  • Repository-owned line and branch coverage gates for the total solution and both production assemblies.
  • A repository-specific security policy and an automated NCAT baseline reproducibility check.
  • Updated walkthrough package guidance and benchmark provenance checks.

Changed

  • SQLite is now the repository’s only supported database provider. Selecting SQL Server or another unsupported provider fails during service registration with explicit guidance.
  • Audit reconciliation is registered independently of the Development-only pipeline inspector.
  • The NCAT baseline is updated to 2.11.6, and AsiBackbone packages are updated to 7.5.1.
  • .NET SDK, ASP.NET container, GitHub Actions, and workflow-security dependencies are updated.

Fixed

  • Reconciliation no longer reports the audit-completion outbox’s own bookkeeping writes as missing completions.
  • Existing false-positive bookkeeping findings from v0.1.0-alpha.11 databases are resolved during reconciliation without weakening checks for governed records.

Upgrade notes

  • Database upgrades are supported from v0.1.0-alpha.11.
  • Back up both the SQLite database and Data Protection key ring before applying migrations.
  • Migrations are forward-only; do not run older application binaries against an upgraded database.
  • SQL Server is no longer presented as supported by this repository.

This remains a prerelease and does not yet establish the stable 1.x compatibility commitment.

Full changelog: v0.1.0-alpha.11...v0.1.0-alpha.12

Assets 2
Loading