PatchProof v0.1.0

PatchProof v0.1.0

首个公开 Alpha 版本：把 AI 生成补丁从“看起来合理”转化为可重复、可审计的四阶段验证协议。

First public alpha release: turn AI-generated patches from “looks plausible” into a repeatable, auditable four-phase validation protocol.

核心能力 / Highlights

• 仓库快照绑定的 Proposal Hash 与精确完整哈希审批。
• Repository-snapshot-bound proposal hashes and exact full-hash approval.
• 在一次性副本中应用 Unified Diff，真实仓库保持不变。
• Apply unified diffs in disposable copies while preserving the real repository.
• 补丁前失败复现、补丁后复现、完整回归、外置隐藏测试。
• Fail-before reproduction, pass-after reproduction, full regression, and external hidden tests.
• 固定镜像、断网、只读、非 root 和资源受限的 Docker Runner。
• Digest-pinned, network-disabled, read-only, non-root, resource-bounded Docker runner.
• 内容寻址 JSON 回执和中英双语 Markdown 报告。
• Content-addressed JSON receipts and bilingual Markdown reports.
• 两个可独立复用的 Codex Skills：verifiable-agent-audit 与 agent-eval-builder。
• Two independently reusable Codex Skills: verifiable-agent-audit and agent-eval-builder.

验证 / Verification

• 70 项自动化测试通过 / 70 automated tests pass.
• Python 3.11 与 3.12 CI 通过 / Python 3.11 and 3.12 CI pass.
• GitHub Actions 中真实 Docker 四阶段 Shadow Validation 通过 / Real Docker four-phase shadow validation passes in GitHub Actions.
• Wheel 已完成构建、隔离安装与版本导入验证 / The wheel is build-, isolated-install-, and version-import-verified.

边界 / Scope

v0.1 仅支持有界 UTF-8 文本、Unified Diff 和 Python unittest。Docker 加固不是生产级恶意多租户沙箱，审批人身份是声明式元数据，哈希回执提供完整性而不是签名者真实性。

v0.1 supports bounded UTF-8 text, unified diffs, and Python unittest only. Docker hardening is not a production hostile multi-tenant sandbox; approver identity is declared metadata, and hash receipts provide integrity rather than signer authenticity.