1C ERP Diagnostics v0.3.8 — Deterministic Accounting and State Integrity

1C ERP Diagnostics v0.3.8 — Deterministic Accounting and State Integrity

Overview

Version 0.3.8 adds executable accounting, effect-classification and case-state controls derived from the reviewed 1C cost-allocation case. It preserves the evidence-first Gate 0–10 contract: arithmetic validation can reject inconsistent data, but it cannot establish a 1C root cause without independent Gate 7 evidence.

Accounting and state controls

• exact fact/plan equality, share sum, deterministic allocation, residual, row coverage and observed-allocation checks without float arithmetic;
• independent before/after flags for completeness, allocation proportion, analytic key, cardinality and no material change;
• explicit business_basis_required when a proposal changes allocation proportions;
• executable cross-entity identity, run/input/tool/output freshness, lineage and downstream invalidation validation;
• MXL/XLSX property trees remain metadata until explicitly bound row evidence is available.

Security and regression coverage

• bounded fail-closed XLSX/ZIP metadata and package scanning, including local/central header differences, credentials and user-machine paths;
• release-tree and complete reachable-history checks for unsafe paths, credentials, containers and symlinks;
• 10 new accounting/state/security regressions, expanding the validated synthetic EVAL_RESULT_JSON suite to 26 cases;
• the synchronized v0.3.8 candidate passes 143 repository unit and regression tests locally.

Preserved ecosystem

• 32 packaged skills and marketplace ID one-c-erp-diagnostics-marketplace;
• Unica aefc880f9bab606a5c55ed11af563b740054a549 (v0.12.0);
• 1C Skills PowerShell 8cb7868145281d8e353831512cc1ffa72f1b5c89;
• 1C Skills Python c1f79f5ac9f31c620b8508f75464f8c42c559ae4;
• approved Velis assets and independent-project trademark boundary.

Validation

• Python 3.10/3.12, CodeQL, package, marketplace, deterministic lock, publication-history and all 143 repository tests: PASS.
• Exact installed candidate clean-session acceptance: 26/26 and RUNTIME ACCEPTANCE: PASS.
• Public marketplace main at 826aae46ed278e42c182c1be3e3c93cc2a53766c: 26/26 clean sessions and RUNTIME ACCEPTANCE: PASS.
• Runtime evidence establishes conformance to the synthetic Gate 0–10 contract; it does not establish a real 1C root cause without case-specific evidence and independent Gate 7.

1C ERP Diagnostics v0.3.0 — Public Preview

Overview

Version 0.3.0 adds optional local SonarQube evidence for reproducible static analysis of 1C BSL source. SonarQube findings remain hypotheses inside the existing Gate 0–10 evidence workflow and do not by themselves establish an ERP cause or authorize code changes.

Highlights

• adds the optional sonarqube-bsl-local capability and a dedicated packaged skill;
• packages 32 diagnostic and control skills;
• preserves the stable marketplace ID and the existing four-plugin ecosystem;
• adds executable evaluation and strict clean-session runtime-acceptance controls;
• records tool, analysis and result provenance while keeping credentials out of Git, files, logs and case state;
• adds a regression case proving that a static finding without runtime and document-to-register evidence stays below УСТАНОВЛЕНО.

Verified release evidence

• protected PR #14 passed Python 3.10, Python 3.12 and CodeQL;
• PR #14 was squash-merged through the protected main ruleset;
• all post-merge main workflows completed successfully;
• local public-package, marketplace, 14-case evaluation and 31-test regression checks passed;
• the marketplace still contains exactly one-c-erp-diagnostics, Unica, 1C Skills PowerShell and 1C Skills Python.

Current pre-release boundary

• exact-version clean-session runtime acceptance remains pending;
• an authenticated sanitized local SonarQube scan remains confirmation_required until an existing scoped project, profile and least-privilege credentials are available;
• no SonarQube token or project was created and no scan result was simulated;
• global Plugin Directory publication is a separate later workflow.

Upgrade

Refresh the existing one-c-erp-diagnostics-marketplace installation after publication. No marketplace uninstall or ID migration is intended.

Full release notes: https://github.com/akim-kaneyev/1c-erp-diagnostics/blob/v0.3.0/docs/RELEASE_NOTES_v0.3.0.md

1C ERP Diagnostics v0.2.3 — Public Preview

1C ERP Diagnostics v0.2.3 — Velis Branding and Repository Hardening

Overview

Version 0.2.3 is a public-preview patch release. It aligns the distributed package with the approved Velis mascot identity and records the completed GitHub security controls without changing the Gate 0–10 diagnostic contract, companion sources, permissions or production-risk model.

Included

• plugin and project version synchronized at 0.2.3;
• approved white-dog Velis mascot artwork for composerIcon, logo and logoDark;
• exactly one Velis medallion on the collar; the redundant draft medallion is excluded;
• original visual identity without reproduction of the corporate 1C graphic logo;
• stable marketplace installation ID one-c-erp-diagnostics-marketplace;
• unchanged verified ecosystem: 1C ERP Diagnostics, Unica, 1C Skills PowerShell and 1C Skills Python;
• unchanged immutable companion SHAs and independent permissions/licenses;
• active main ruleset requiring Pull Request, squash merge, linear history, resolved conversations, current branch state, Python 3.10/3.12 checks and CodeQL results;
• deletion and force-push protection for main;
• private vulnerability reporting, dependency graph, Dependabot alerts/security updates, secret scanning and push protection;
• CodeQL default setup for GitHub Actions and Python with a successful initial scan and zero open alerts at release preparation time.

Diagnostic behavior

No accounting, warehouse, production, access-rights or closed-period behavior changed in this patch. The evidence standard remains:

document → movement → register/record → consuming mechanism → accounting/stock/access result → symptom

Final УСТАНОВЛЕНО still requires Gate 7 adversarial review. Production/accounting/access/closed-period actions remain R3 and require exact scope, explicit approval, rollback and Gate 9 validation.

Marketplace refresh

Existing marketplace installations should be refreshed after 0.2.3 is available. The patch version bump is intentional so host caches receive the approved assets and aligned package metadata rather than retaining the previous 0.2.2 card/icon.

The internal marketplace ID remains unchanged for upgrade compatibility:

one-c-erp-diagnostics-marketplace

The visible marketplace title remains:

1C ERP Diagnostics Ecosystem

Verified companion sources

• Unica: IngvarConsulting/unica-marketplace, SHA aefc880f9bab606a5c55ed11af563b740054a549, path plugins/unica.
• 1C Skills PowerShell: Nikolay-Shirokov/cc-1c-skills, SHA 8cb7868145281d8e353831512cc1ffa72f1b5c89.
• 1C Skills Python: Nikolay-Shirokov/cc-1c-skills, SHA c1f79f5ac9f31c620b8508f75464f8c42c559ae4.

Validation required before release

• public-package validator passes;
• ecosystem-marketplace validator passes;
• regression tests pass on Python 3.10 and 3.12;
• CodeQL result is present for the release Pull Request;
• no critical self-audit control is FAIL;
• marketplace refresh succeeds;
• Gate 0, under-evidenced-case and scoped R3 / NO-GO smoke tests are repeated in a clean session.

Distribution boundary

The public GitHub repository and repository marketplace do not automatically create a global Plugin Directory listing. Directory publication remains a separate supported OpenAI-side publish action. A skills-only or local/Codex-specific plugin may require import or workspace publication before it can be selected broadly in ChatGPT.