VeriRepro v0.8.3

Metadata finalization and current-main certification

This patch release finalizes PyPI-facing package metadata and certifies the current hardened main with fresh source-bound evidence.

About PyPI 0.8.2: the verirepro==0.8.2 production package succeeded, but its immutable PyPI long description retained a pre-publication status snapshot. That historical distribution is preserved unchanged; it is not modified, yanked, or re-uploaded.

What 0.8.3 does:

• replaces version-sensitive PyPI long-description status wording with release-state-neutral, time-stable wording, so future releases no longer require README release-status rewrites (the root-cause fix for metadata drift);
• records per-release certification authority in docs/EVIDENCE.md and this Release rather than in the package description;
• includes the already-merged repository-maintenance hardening present on current main;
• receives a fresh source-bound certification of the current hardened main;
• no intentional scientific reproduction semantics change; no historical tag, release, evidence, or evidence value was rewritten.

Certification authority

Item	Value
S5 (certified source)	572d51f6725d161efb937bf85f7181c2439e9989
F5 (release-source SHA-256)	d0cc3c6791cc6c62a0dd379f6010cdf27f0c113c7c5693bef8ef943c13950b28
Validation5	GitHub-hosted VeriRepro validation run 33338588016
E5 (evidence commit)	932c88313f887b0786fb8e636bbd69259bc096bf
Tests / coverage	805 tests; 86.4% statement / 79.9% branch
Discovery / planning / ReproBench	15/15 top-1 anchored · 3/3 planned · 1 success / 1 partial / 0 failures

Tag v0.8.3 is a signed annotated SSH tag by the XiantingWu release signer (ED25519 SHA256:qx8lD44v8Y0IXKzxDHRa379+0W/UXnGwOWhwbMqKixo), verified against .github/release-signers.

PyPI publication proceeds through protected GitHub-hosted Trusted Publishing (OIDC) only.

VeriRepro v0.8.2

VeriRepro v0.8.2 completes the public release-truth and metadata correction.

Highlights:

• synchronized public release-status documentation;
• made PyPI installation the primary user path;
• refreshed source-bound 0.8.2 evidence;
• no intentional scientific runtime or public API semantics change.

Certification:

• certified source S4: 96fc930
• release-source fingerprint F4: 95904277df77db6e97e83cafe57a351a100c4b3084453c7083edf6cd0baeb324
• Validation4: 33333603696
• evidence authority E4: 028bb7e
• 803 tests; 86.4% statement coverage; 79.9% branch coverage

Production outcome:

• GitHub Release: published;
• PyPI verirepro==0.8.2: published successfully through the protected GitHub-hosted Trusted Publishing workflow;
• Publish run: 33334230170;
• clean PyPI install: PASS.

VeriRepro v0.8.1

VeriRepro v0.8.1 is a release-delivery correction following the public
v0.8.0 GitHub release.

Highlights:

• corrects the PyPI Trusted Publishing action pin to the dereferenced
  v1.14.2 release commit;
• adds regression coverage for annotated GitHub Action tag resolution;
• adds exact publisher runtime-image validation before release
  certification;
• preserves the scientific/runtime behavior certified by the current
  v0.8.1 evidence chain.

Quality:

• 803 tests
• 86.4% statement coverage
• 79.9% branch coverage
• Python 3.11-3.13

This GitHub release does not by itself indicate that the package has been
published to PyPI.

Production outcome:

• production PyPI publication completed successfully;
• Publish run: 33325816551;
• Trusted Publishing was used.

VeriRepro v0.8.0

VeriRepro 0.8.0 is the first public beta release.

Highlights:

• evidence-grounded computational paper reproduction
• deterministic scientific PASS / FAIL / PARTIAL semantics
• repository-grounded execution planning
• reproducible environment reconstruction
• dataset and model-artifact provenance
• hardened non-root Docker runtime
• default-deny experiment networking
• explicit GPU/network authorization
• ReproBench evidence contracts
• signed releases and PyPI Trusted Publishing

Supported Python:
3.11–3.13

Install:
pip install verirepro==0.8.0

Known limits:
See SECURITY.md, ROADMAP.md, and docs/EVIDENCE.md for the explicitly documented scientific and isolation boundaries.

Historical correction:

• v0.8.0 was released on GitHub but was not published to PyPI;
• the old pip install verirepro==0.8.0 instruction is historical and not valid;
• use v0.8.1 or later for PyPI installation.