v0.8.5

第三方工具包：
bundle-v1.8
GNU SDK 快照：
ci-freebsd-gnu-sdk-v1.3

0.8.5 — 2026-09-17

• Windows windows_amd64 Bundle 最终固定为七工具：zstd、NPB EP、NPB FT、OpenSSL、STREAM、fio 和官方 NextTrace Tiny v1.7.1 预编译资产 nexttrace-tiny_windows_amd64.exe。资产 SHA-256 锁定为 16e13532f6e8ee75f63db61a6a98fe1ca217b5431b76531c8c5d4bcdbe7e6f9b，构建、校验与打包保持官方字节不变；Bundle 从 bundle-v1.7 递增为 bundle-v1.8，软件版本从 v0.8.4 递增为 v0.8.5。
• Windows route / backtrace 通过生产 ecs.exe 路径接入与 Linux 共用的 canonical NextTrace 参数、nexttrace-json-v1 adapter 和 production parser；Windows Server 2022/2025 的 IPv4 gate 均真实执行，有 global IPv6 地址和 default route 时执行 IPv6，否则明确记录 capability missing。生产 route/backtrace 不使用 tracert.exe 或 host PATH fallback，并保留 engine、version、adapter、target、family、hops 与工具来源等 provenance。
• capability-aware CI 严格区分可用和不可测试：not-testable 只有在 native tracert 与 staged NextTrace 都成功执行并解析、但都没有合法公网 responding hop 时成立，并强制 live_network_not_proven=true；IPv6 能力不存在时记录 ipv6-unavailable，不伪造 probe facts。两 runner 的 JSON capability evidence、原始 stdout/stderr 以及 route/backtrace 报告均作为 diagnostics 保留。
• 完整 Windows Server 2022/2025 Actions 彩排已通过，覆盖 lock/check、native build/verify、NextTrace capability-aware network gate、package、两个 runner 的 artifact E2E 与 route/backtrace bootstrap assertions；这仍是发布准备彩排，不代表已创建正式 Release 或完成用户下载验证。

完整版本历史：CHANGELOG.md

---

Third-party Tool Package:
bundle-v1.8
GNU SDK snapshot:
ci-freebsd-gnu-sdk-v1.3

0.8.5 — 2026-09-17

• The Windows windows_amd64 Bundle is finalized at seven tools: zstd, NPB EP, NPB FT, OpenSSL, STREAM, fio, and the official NextTrace Tiny v1.7.1 prebuilt asset nexttrace-tiny_windows_amd64.exe. Its SHA-256 is pinned to 16e13532f6e8ee75f63db61a6a98fe1ca217b5431b76531c8c5d4bcdbe7e6f9b, and BUILD, VERIFY, and packaging preserve the official bytes; the Bundle increments from bundle-v1.7 to bundle-v1.8, while the software version increments from v0.8.4 to v0.8.5.
• Windows route / backtrace are wired through the production ecs.exe path with the Linux-shared canonical NextTrace arguments, nexttrace-json-v1 adapter, and production parser. The Windows Server 2022/2025 IPv4 gates both execute genuinely; IPv6 runs when a global IPv6 address and default route exist, otherwise capability missing is recorded explicitly. Production route/backtrace use neither tracert.exe nor a host PATH fallback, and retain engine, version, adapter, target, family, hop, and tool-provenance evidence.
• Capability-aware CI strictly distinguishes available from not-testable: not-testable is allowed only when both native tracert and staged NextTrace execute and parse successfully but neither observes a legal public responding hop, with live_network_not_proven=true; unavailable IPv6 is recorded as ipv6-unavailable without fabricated probe facts. JSON capability evidence, raw stdout/stderr, and route/backtrace reports from both runners are retained as diagnostics.
• The complete Windows Server 2022/2025 Actions rehearsal passed, covering lock/check, native build/verify, the NextTrace capability-aware network gate, package, artifact E2E on both runners, and route/backtrace bootstrap assertions; this remains release-preparation rehearsal evidence, not a formal Release or user-download validation.

Full version history: CHANGELOG.md

Third-party Tool Package · bundle-v1.8

bundle-v1.8

• Windows Server 2022+ x64 的 windows_amd64 Bundle 最终固定为七工具：zstd、NPB EP、NPB FT、OpenSSL、STREAM、fio 和官方 NextTrace Tiny v1.7.1 预编译资产 nexttrace-tiny_windows_amd64.exe。
• NextTrace 官方资产固定 SHA-256 为 16e13532f6e8ee75f63db61a6a98fe1ca217b5431b76531c8c5d4bcdbe7e6f9b；构建、VERIFY、打包和 artifact E2E 均校验来源与摘要并保持官方字节不变，manifest、许可证文件与原有六项 benchmark contract 继续保留。
• Windows route / backtrace 通过生产 ecs.exe 路径使用与 Linux 共用的 canonical NextTrace 参数、nexttrace-json-v1 adapter 和 production parser。Server 2022 与 2025 的 IPv4 gate 都真实执行；存在 global IPv6 地址和 default route 时执行 IPv6，否则明确记录 capability missing。生产 route/backtrace 不使用 tracert.exe 或 host PATH fallback，并保留 engine、version、adapter、target、family、hops 与工具来源证据。
• capability-aware CI 严格校验 not-testable 证据：只有 native tracert 与 staged NextTrace 都成功执行并解析、但都没有合法公网 responding hop 时才允许该结论，并强制 live_network_not_proven=true；IPv6 能力缺失使用 ipv6-unavailable 且不写入虚假的 probe facts。完整 Windows Server 2022/2025 Actions 彩排（lock/check、build/verify、网络 gate、package、artifact E2E 与 route/backtrace bootstrap）已通过；两 runner 的 JSON capability evidence、原始 stdout/stderr 和 route/backtrace 报告均保留为 diagnostics。

完整版本历史：CHANGELOG.md

---

bundle-v1.8

• The Windows Server 2022+ x64 windows_amd64 Bundle is finalized at seven tools: zstd, NPB EP, NPB FT, OpenSSL, STREAM, fio, and the official NextTrace Tiny v1.7.1 prebuilt asset nexttrace-tiny_windows_amd64.exe.
• The official NextTrace asset is pinned to SHA-256 16e13532f6e8ee75f63db61a6a98fe1ca217b5431b76531c8c5d4bcdbe7e6f9b; BUILD, VERIFY, packaging, and artifact E2E all verify its source and digest while preserving the official bytes, and the manifest, license files, and existing six benchmark contracts remain intact.
• Windows route / backtrace use the production ecs.exe path with the Linux-shared canonical NextTrace arguments, nexttrace-json-v1 adapter, and production parser. The Server 2022 and 2025 IPv4 gates both execute genuinely; IPv6 runs when a global IPv6 address and default route exist, otherwise capability missing is recorded explicitly. Production route/backtrace use neither tracert.exe nor a host PATH fallback, and retain engine, version, adapter, target, family, hop, and tool-provenance evidence.
• Capability-aware CI strictly validates not-testable evidence: the result is allowed only when both native tracert and staged NextTrace execute and parse successfully but neither observes a legal public responding hop, with live_network_not_proven=true; unavailable IPv6 is recorded as ipv6-unavailable without fabricated probe facts. The complete Windows Server 2022/2025 Actions rehearsal—lock/check, build/verify, network gates, package, artifact E2E, and route/backtrace bootstrap—passed; JSON capability evidence, raw stdout/stderr, and route/backtrace reports from both runners are retained as diagnostics.

Full version history: CHANGELOG.md

v0.8.4

第三方工具包：
bundle-v1.6
GNU SDK 快照：
ci-freebsd-gnu-sdk-v1.3

0.8.4 — 2026-09-15

• 新增 Windows Server 2022+ x64 的 windows_amd64 原生发布目标：主程序使用 ecs_windows_amd64.zip，匹配的工具 Bundle 使用 ecs-tools_windows_amd64.zip；system 使用 native Win32 system probes，latency 使用 native Win32 ICMP。
• Windows frozen benchmark set 固定为 zstd、NPB EP、NPB FT、OpenSSL、STREAM 和 fio；fio 的 Windows gate 要求并验证 windowsaio。sysbench、iperf3 与 Ookla 在 Windows unsupported。
• NextTrace 尚未通过独立真实 Windows network gate，因此不进入 Windows Bundle；Windows route / backtrace 明确 unsupported。Windows Server 2022 x64 与 Windows Server 2025 x64 的 GitHub Actions real gates（包括 native runtime、工具验证、打包 workloads 与当前 ZIP/bootstrap E2E）已通过彩排；这仍是发布前彩排，不代表正式 Release 已发布或用户已下载验证。
• 报告与比较标识继续保持 ecs.report/v1 与 ecs.compare/v1；同一 semantic field 的 Linux/FreeBSD/Windows 来源边界写入 schema 文档，主模块没有新增 Go dependency。工具包从 bundle-v1.5 递增为 bundle-v1.6，软件版本从 v0.8.3 递增为 v0.8.4。

完整版本历史：CHANGELOG.md

---

Third-party Tool Package:
bundle-v1.6
GNU SDK snapshot:
ci-freebsd-gnu-sdk-v1.3

0.8.4 — 2026-09-15

• Added a native Windows Server 2022+ x64 release target, windows_amd64: the main program uses ecs_windows_amd64.zip, the matching tools Bundle uses ecs-tools_windows_amd64.zip, system uses native Win32 system probes, and latency uses native Win32 ICMP.
• The Windows frozen benchmark set is exactly zstd, NPB EP, NPB FT, OpenSSL, STREAM and fio; the Windows fio gate requires and verifies windowsaio. sysbench, iperf3 and Ookla are unsupported on Windows.
• NextTrace has not yet passed an independent genuine Windows network gate, so it is not in the Windows Bundle; Windows route and backtrace are explicitly unsupported. The Windows Server 2022 x64 and Windows Server 2025 x64 GitHub Actions real gates—including native runtime, tool verification, packaged workloads and current ZIP/bootstrap E2E—have passed rehearsal; this remains only a release-preparation rehearsal, not a formal Release publication or user download validation.
• The report and comparison identifiers remain ecs.report/v1 and ecs.compare/v1; the schema documents the Linux/FreeBSD/Windows source boundary for the same semantic fields, and the main module has no new Go dependency. The tool package increments from bundle-v1.5 to bundle-v1.6, while the software version increments from v0.8.3 to v0.8.4.

Full version history: CHANGELOG.md

Third-party Tool Package · bundle-v1.6

bundle-v1.6

• 新增 Windows Server 2022+ x64 的 windows_amd64 工具 Bundle contract，资产格式为 ecs-tools_windows_amd64.zip；主程序对应的 Windows ZIP asset 为 ecs_windows_amd64.zip。
• Windows frozen benchmark set 只包含 zstd、NPB EP、NPB FT、OpenSSL、STREAM 和 fio；Windows gate 要求 fio 的 windowsaio engine，并保留每个工具的 manifest、PE/DLL allowlist 和上游许可证文件。
• Windows 的系统与 ICMP 事实由主程序的 native Win32 probes 提供，不在工具 Bundle 中增加 ping.exe；NextTrace 不进入 Bundle，Windows route/backtrace 仍 unsupported。Windows Server 2022 x64 与 Windows Server 2025 x64 的 GitHub Actions 真实 gates（包括 native runtime、工具验证、打包 workloads 与当前 ZIP/bootstrap E2E）已通过彩排。

完整版本历史：CHANGELOG.md

---

bundle-v1.6

• Added the Windows Server 2022+ x64 windows_amd64 tool Bundle contract, with ecs-tools_windows_amd64.zip as its asset; the corresponding Windows main-program ZIP asset is ecs_windows_amd64.zip.
• The Windows frozen benchmark set contains only zstd, NPB EP, NPB FT, OpenSSL, STREAM and fio; the Windows gate requires fio's windowsaio engine and retains each tool's manifest, PE/DLL allowlist and upstream license files.
• Windows system and ICMP facts come from the main program's native Win32 probes, so the tool Bundle adds no ping.exe; NextTrace is not in the Bundle, and Windows route/backtrace remain unsupported. The Windows Server 2022 x64 and Windows Server 2025 x64 GitHub Actions genuine gates—including native runtime, tool verification, packaged workloads and current ZIP/bootstrap E2E—have passed rehearsal.

Full version history: CHANGELOG.md

v0.8.3

第三方工具包：
bundle-v1.5
GNU SDK 快照：
ci-freebsd-gnu-sdk-v1.3

0.8.3 — 2026-09-14

• 优化 GitHub Actions FreeBSD 构建拓扑：VERIFY 通过后 REAL GATE 与 Bundle PACKAGE/E2E 并行，ASSEMBLE 等待两条路径；C/GNU 构建在同一 job/work-dir 内复用已下载并校验的 sysroot、依赖和 SDK。
• 固定公开标准 runner 与 FreeBSD 15.1 guest 均使用 4 vCPU；新增缓存 VM 的每次运行契约、精确 package 版本与 SHA256 lock，缓存不承担正确性；完整 REAL GATE、runtime、driver-chain 与 consumer gate 保留。
• 对预压缩 artifact 使用零压缩中转，普通 job 使用 shallow checkout 与固定 Go 1.27.1；不改变 CGO、build tags、发布 provenance、产物字节语义或双架构并行隔离。
• 修复 C/GNU 构建器在进入上游源码子目录后无法解析相对 sysroot、目标依赖和 SDK 路径的问题；两架构均通过重新构建与 VERIFY。
• 修复 FreeBSD 15.1 VM prepare 对 pkg add 错误传入 -y 的问题；双架构 REAL GATE 与 artifact E2E 均完整通过。
• 发布 immutable ci-freebsd-gnu-sdk-v1.3 与双架构 bundle-v1.5。

完整版本历史：CHANGELOG.md

---

Third-party Tool Package:
bundle-v1.5
GNU SDK snapshot:
ci-freebsd-gnu-sdk-v1.3

0.8.3 — 2026-09-14

• Optimized the GitHub Actions FreeBSD topology: REAL GATE and the Bundle PACKAGE/E2E path now run in parallel after VERIFY, while ASSEMBLE waits for both; the C/GNU builds reuse downloaded and verified sysroot, dependency, and SDK inputs within one job/work directory.
• Fixed public standard runners and FreeBSD 15.1 guests at 4 vCPUs; added a per-run contract for cached VMs plus exact package-version and SHA256 locking, with cache kept out of correctness ownership; all REAL GATE, runtime, driver-chain, and consumer gates remain intact.
• Enabled zero-compression transit only for pre-compressed artifacts, and use shallow checkout plus fixed Go 1.27.1 in ordinary jobs; CGO, build tags, release provenance, artifact-byte semantics, and dual-architecture failure isolation are unchanged.
• Fixed C/GNU builders losing relative sysroot, target-dependency, and SDK paths after entering upstream source directories; both architectures passed a fresh rebuild and VERIFY.
• Fixed FreeBSD 15.1 VM preparation passing the unsupported -y flag to pkg add; both architecture REAL GATE and artifact E2E paths passed completely.
• Released the immutable ci-freebsd-gnu-sdk-v1.3 snapshot and the dual-architecture bundle-v1.5 package.

Full version history: CHANGELOG.md

v0.8.2

第三方工具包：
bundle-v1.3
GNU SDK 快照：
ci-freebsd-gnu-sdk-v1.2

0.8.2 — 2026-09-14

• 修复 ecs run --version 在非法颜色配置下未提前短路的问题，并用契约测试保证 example iperf 时长与内置 15s 默认值一致。
• 统一 benchmark parse failure 语义，移除重复的 failure classifier；JSON ingress 现在严格接受单个完整值并执行 body hard limit，同时保留 provider 扩展字段容忍度以及 IP 地址族、代理和超时语义。
• 收拢 carrier identity 与 comparison evidence grade 的语义 owner，解除 HTML 对 terminal glyph 的语义反向依赖，并完成不改变平台行为的 Go 重复清理。
• 简化 run.sh 的 usability preflight 与 submit 参数组装，同时保留 Go 侧 atomic hard-link 发布、fsync、禁止覆盖和 symlink 防护。
• 拆分 FreeBSD GNU SDK 的发布与验证生命周期，保留 tree、hardlink、runtime probe、compiler driver-chain、NPB/STREAM 等完整门禁；发布 ci-freebsd-gnu-sdk-v1.2 与双架构 bundle-v1.3。

完整版本历史：CHANGELOG.md

---

Third-party Tool Package:
bundle-v1.3
GNU SDK snapshot:
ci-freebsd-gnu-sdk-v1.2

0.8.2 — 2026-09-14

• Fixed ecs run --version so it short-circuits before invalid color configuration is validated, and added a contract test keeping the example iperf duration aligned with the built-in 15s default.
• Unified benchmark parse-failure semantics and removed the duplicate failure classifier; JSON ingress now accepts only one complete value under a hard body limit while retaining provider extension-field tolerance and the existing IP-family, proxy, and timeout semantics.
• Consolidated the semantic owners for carrier identity and comparison evidence grades, removed HTML's reverse dependency on terminal glyphs for classification, and completed Go deduplication without changing platform behavior.
• Simplified run.sh usability preflight and submit argument assembly while retaining Go-side atomic hard-link publication, fsync, no-overwrite, and symlink protections.
• Split the FreeBSD GNU SDK publisher and verifier lifecycles while retaining the full tree, hardlink, runtime-probe, compiler-driver-chain, NPB, and STREAM gates; released ci-freebsd-gnu-sdk-v1.2 and the dual-architecture bundle-v1.3.

Full version history: CHANGELOG.md

FreeBSD GNU SDK snapshot (ci-freebsd-gnu-sdk-v1.3)

中文

FreeBSD GNU C/Fortran/OpenMP SDK immutable 快照，供 CI 按
tools/freebsd-gnu-openmp.lock.json 钉定的 SHA256 消费。

• 来源提交：22d81b1dd905e37ceb497bf6503ad9b01fdde3e9
• 生成日期（UTC）：2026-09-14T11:44:36Z
• GCC：14.2.0（source sha256: a7b39bc69cbf9e25826c5a60ab26477001f7c08d85cec04bc0e29cabed6f3cc9）
• Binutils：2.43.1（source sha256: 13f74202a3c4c51118b797a39ea4200d3f6cfbe224da6d1d95bb938480132dfd）
• Sysroot：FreeBSD 15.1-RELEASE
• Assets：ecs-freebsd-gnu-sdk-freebsd_amd64.tar.zst、
  ecs-freebsd-gnu-sdk-freebsd_arm64.tar.zst
• 校验：sha256sum -c SHA256SUMS

SDK 快照按递增版本 tag 发布（append-only；Immutable Releases 下同名
tag 不可删除重建），消费方始终以 SHA256SUMS 为准。

English

Immutable FreeBSD GNU C/Fortran/OpenMP SDK snapshot for CI consumers,
pinned by SHA256 in tools/freebsd-gnu-openmp.lock.json.

• Source commit: 22d81b1
• Generated (UTC): 2026-09-14T11:44:36Z
• GCC: 14.2.0 (source sha256: a7b39bc69cbf9e25826c5a60ab26477001f7c08d85cec04bc0e29cabed6f3cc9)
• Binutils: 2.43.1 (source sha256: 13f74202a3c4c51118b797a39ea4200d3f6cfbe224da6d1d95bb938480132dfd)
• Sysroot: FreeBSD 15.1-RELEASE
• Assets: ecs-freebsd-gnu-sdk-freebsd_amd64.tar.zst,
  ecs-freebsd-gnu-sdk-freebsd_arm64.tar.zst
• Verify: sha256sum -c SHA256SUMS

SDK snapshots use incrementing version tags (append-only; an existing
tag cannot be deleted and recreated under Immutable Releases), and
consumers always defer to SHA256SUMS.

FreeBSD GNU SDK snapshot (ci-freebsd-gnu-sdk-v1.2)

FreeBSD GNU C/Fortran/OpenMP SDK immutable 快照，供 CI 按
tools/freebsd-gnu-openmp.lock.json 钉定的 SHA256 消费。

• 来源 commit / Source commit: 94d7960
• 生成日期 / Generated (UTC): 2026-09-14T08:32:53Z
• GCC: 14.2.0 (source sha256: a7b39bc69cbf9e25826c5a60ab26477001f7c08d85cec04bc0e29cabed6f3cc9)
• Binutils: 2.43.1 (source sha256: 13f74202a3c4c51118b797a39ea4200d3f6cfbe224da6d1d95bb938480132dfd)
• Sysroot: FreeBSD 15.1-RELEASE
• Assets: ecs-freebsd-gnu-sdk-freebsd_amd64.tar.zst,
  ecs-freebsd-gnu-sdk-freebsd_arm64.tar.zst
• 校验 / Verify: sha256sum -c SHA256SUMS

SDK 快照按版本递增 tag 发布（append-only；Immutable Releases 下
同名 tag 不可删除重建），消费方始终以 SHA256SUMS 为准。SDK
snapshots are published under incrementing version tags
(append-only; an existing tag cannot be deleted and recreated
under Immutable Releases), and consumers always defer to
SHA256SUMS.

Third-party Tool Package · bundle-v1.5

bundle-v1.5

• 修复 FreeBSD C/GNU 构建器在复用相对 sysroot、目标依赖和 SDK 路径时，进入上游源码子目录后路径失效的问题；两架构构建现在统一解析为绝对路径。
• 修复 FreeBSD 15.1 VM prepare 对 pkg add 错误传入 -y 的问题，继续保留精确 package lock、SHA256 校验、4 vCPU guest、真实 REAL GATE 和 ARTIFACT E2E。
• Bundle 继续消费 immutable ci-freebsd-gnu-sdk-v1.3，保持双架构、8 个工具、manifest、运行参数和发布产物语义不变；本版本完整彩排已通过。

完整版本历史：CHANGELOG.md

---

bundle-v1.5

• Fixed FreeBSD C/GNU builders losing reused relative sysroot, target-dependency, and SDK paths after entering upstream source directories; both architectures now resolve these paths to absolute paths consistently.
• Fixed FreeBSD 15.1 VM preparation passing the unsupported -y flag to pkg add, while retaining the exact package lock, SHA256 checks, 4-vCPU guests, genuine REAL GATE, and ARTIFACT E2E.
• Bundle continues to consume the immutable ci-freebsd-gnu-sdk-v1.3 snapshot with the same two architectures, eight tools, manifest, runtime arguments, and release-artifact semantics; the complete rehearsal passed.

Full version history: CHANGELOG.md

Third-party Tool Package · bundle-v1.3

bundle-v1.3

• FreeBSD 工具包继续使用原有双架构、8 个工具和真实 FreeBSD 门禁；本版本收口私有构建 helper 的参数与调用链，不改变工具集合、运行参数或 manifest 语义。
• GNU SDK 发布器拆分为编排层与私有 publisher/verifier，保留 share/man/share/info 精确裁剪、host ELF debug strip、非 host 字节不变、硬链接组不变、driver-chain 证明，以及 NPB EP/FT + STREAM consumer gate；上述门禁已在 ci-freebsd-gnu-sdk-v1.2 双架构快照上通过。
• Bundle 发布链改为消费 lock 钉定的 ci-freebsd-gnu-sdk-v1.2 immutable SDK 快照；工具依赖、双架构并行拓扑和真实客户机验收合同不变。

完整版本历史：CHANGELOG.md

---

bundle-v1.3

• The FreeBSD tool package keeps the existing two architectures, eight tools and genuine FreeBSD gates; this release closes the private build-helper argument and call-chain cleanup without changing the tool set, runtime arguments or manifest semantics.
• The GNU SDK publisher is split into orchestration and private publisher/verifier layers while retaining exact share/man/share/info slimming, host-ELF debug stripping, non-host byte identity, hardlink-group identity, driver-chain proof, and the NPB EP/FT plus STREAM consumer gate; all of these gates passed on the dual-architecture ci-freebsd-gnu-sdk-v1.2 snapshot.
• The Bundle release path now consumes the lock-pinned ci-freebsd-gnu-sdk-v1.2 immutable SDK snapshot; tool dependencies, dual-architecture parallel topology and genuine-client acceptance contract are unchanged.

Full version history: CHANGELOG.md