Community v1.0.0 GA Publication Package

Community v1.0.0 GA Publication Package

This wiki page mirrors the public GA publication package for CAVRA Community v1.0.0. It now carries the final 1.0.0 package metadata bump, artifact build planning, verifier inputs, and announcement approval evidence. This is a historical dry-run preparation packet; final artifacts are now published and recorded in docs/release-verifications/community-v1.0.0-post-publication-verification.md.

Publication Target

Field	Value
Release	CAVRA Community v1.0.0
Target tag	community-v1.0.0
Target package version	1.0.0
Planned GitHub Release	https://github.com/Huzefaaa2/cavra/releases/tag/community-v1.0.0
Baseline release candidate	community-v1.0.0-rc.1
GA readiness packet	docs/community-v1.0.0-ga-readiness.md
Draft release notes	docs/releases/community-v1.0.0.md
Publication readiness verification	docs/release-verifications/community-v1.0.0-publication-readiness.md

Artifact Build Plan

Artifact	Planned Name	Required Verification
Python wheel	cavra-1.0.0-py3-none-any.whl	SHA-256 checksum, clean install smoke, cavra version returns cavra 1.0.0.
Source distribution	cavra-1.0.0.tar.gz	SHA-256 checksum, install from sdist, no private dependencies.
Checksum manifest	cavra-1.0.0-SHA256SUMS.txt	Contains wheel, sdist, and provenance checksums.
Provenance metadata	cavra-1.0.0.provenance.json	Records tag, commit, build command, Python version, and public artifact hashes.
Community Docker image	docker/Dockerfile.community	Builds only Community source and runs without a license key.

Verifier Inputs

tag: community-v1.0.0
version: "1.0.0"
wheel_sha256: "464e7146f74a039b89fe1f163f9b825df7a700942be480c32e611f00fe625914"
sdist_sha256: "851f28a38a6e9df6cbe7637a3963a1dc8eb535478730d3ff3eccf260a025d331"

Pre-Publication Build Smoke

The metadata-bump branch produced local artifacts with python3 -m build and verified a clean virtualenv wheel install. Observed output:

cavra 1.0.0

Final release checksums and provenance are recorded in docs/release-verifications/community-v1.0.0-post-publication-verification.md.

Announcement Approval Evidence

Draft announcement:

CAVRA Community v1.0.0 is the stable public Community baseline for Controlled Agentic Verification and Runtime Authority. It provides a verifiable public path for local policy evaluation, evidence generation, release integrity checks, and AI-agent governance adoption while preserving a strict open-core boundary around Enterprise source code and commercial modules.

Publication Checklist

• Draft final release notes exist at docs/releases/community-v1.0.0.md.
• Publication readiness verification exists at docs/release-verifications/community-v1.0.0-publication-readiness.md.
• Release index and dashboard include a dry-run GA publication row.
• README and wiki navigation link the GA publication package.
• Package metadata is bumped from 1.0.0rc1 to 1.0.0.
• Pre-publication local build and clean wheel install smoke return cavra 1.0.0.
• Final artifacts are built and attached to the GitHub Release.
• Final artifact SHA-256 checksums are recorded.
• Clean install smoke returns cavra 1.0.0.

Boundary Notice

This package covers public Community GA publication preparation only. It does not include Enterprise source code, paid policy packs, private trial packages, license-service internals, SaaS backend implementation, private signing keys, private registry credentials, customer records, or private deployment evidence.

Validation

python3 scripts/validate-community-v100-ga-publication-package.py

Decision

Decision: approve final GA artifact publication preparation.

Next Recommendation

Merge the Community v1.0.0 metadata bump, create the community-v1.0.0 tag from main, build and upload final GitHub Release assets, then record final checksums, provenance, verifier defaults, and post-publication verification.