Skip to content

v0.5.0 — Platform qualification groundwork

Latest
Latest

Choose a tag to compare

View all tags
@abruption abruption released this 20 Oct 22:58
v0.5.0
12f98f2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Platform qualification groundwork

session-peer@0.5.0 is published from reviewed source 12f98f2793b78f647107368c06e83286c5026e05.

Changes

  • Select native observation profiles by exact platform/version tuples and retain procfs/storage inspection groundwork with a non-selectable Linux arm64 candidate (#153).
  • Prepare an unselected Windows process-tree backend and private-storage inspection guard. Production Windows process cleanup retains its direct-child behavior (#156).
  • Model Win32-OpenSSH ProxyCommand construction and preserve isolated no-network quoting evidence. Windows-client jump remains refused before effect (#154).
  • Preserve the four exact skill metadata profiles accepted by 0.4.0 in a finite 0.5.0 doctor row; retain the separate skill installation pin and refresh current multilingual version examples.
  • Exclude the deferred deployment harness (#155). Checklist-first minimum-contract redesign is tracked in #158 under still-open #23.

Qualification and upgrade notes

Native observation retains its documented macOS arm64/native-version/topology scope. Linux native observation, Windows handoff storage/native observation, Windows-client jump and automatic ACK remain unsupported. #130/#131/#20/#23 retain their remaining acceptance criteria. Side Session and steering experiments (#82/#142) are excluded. This release does not complete cross-platform qualification or add new live native/model/ACK evidence.

SSH peers must use exactly the same TypeScript version; update each endpoint with its existing manager. Queued/submitted/posted results do not establish receipt ACK, and an unknown outcome does not permit automatic resend. Runtime publication does not install, publish or repin the independently managed skill. No fleet/global installation is performed by this release process.

Publication verification

  • npm 0.5.0: latest=0.5.0; preview=0.1.0-preview.1 is preserved.
  • Stage-only workflow 39415871999 used the exact source above; the required human environment and final npm stage approvals were completed.
  • Reviewed local, retained Actions and public npm tarballs have identical SHA-256: 50f603d9e5b6db8a99b4bcab464767ad30ff38ecac3fbebc22fc03fdd4c66b1d.
  • Registry SHA-512 integrity: sha512-lLc7SFRUydY5TjcX8aE18kgfC88Wi4Mx/OXcbLlk0W9yH+JYLkxGwmZIiC7S1bczFgXzsP3xSe8DqiD7YplpDw==.
  • Registry signature/provenance audit and fresh isolated public installation, exact version, empty discovery and removal passed. All 77 archive files match the expected package and all 18 Markdown files match the publication source. Provenance payload/source linkage was independently checked against this repository, main, publish.yml and the publication run.
  • Exact-main CI 39414569590, attempt 2, and CodeQL 39414569065 passed. One initial macOS Node22 test returned refused where queued was expected; its detailed cause was not captured. A single failed-job rerun passed without source, timeout or assertion changes; the initial cause remains unproven.
  • The package's web publish-2FA-policy lookup was explicitly skipped for this release; it is not a fresh settings audit. Trusted Publisher stage-only permissions and required human gates were separately verified. No settings, protections or credentials were changed.
Assets 2
Loading