Forma 3.0.0 (final, M5)

[3.0.0] - Prepared; publication pending

• Prepare coordinated final versions, dependency locks and template source seeds from published RC.5 at12320f43, including the reviewed packed-qualification test-fixture repair. Preserve its product, tests and qualification harness unchanged.
• RC.5 passed its independent whole-release audit, exact-main CI and tagged61/61 P17, then published all seven verified packages through trusted publishing. Bind the final preparation to those actual RC.5 records. Final-delta review, exact final CI and trusted final publication remain required; the L-66-QUOTA post-final soak remains deferred with zero active credit until a separate authenticated completion receipt.

Milestone: final (M5), npm latest. All other gates are done. FORMA-145 soak is deferred until after this final release under L-66-QUOTA: 3,600 active seconds remain required on the authenticated RC; zero credit and no burn-in pass are claimed.

Pending before later milestones: none.

Commit: 2006423b21fe0f8dd5a510bd09bfe3b8748327a5 · run: 39364435446 · CI: 39363039636

Package	Version	SHA-256
forma-ir	3.0.0	8eaf4c9e9c9b63f9af733f02866d68298c520c8d3a4d95151e7746f54caac487
forma-ir-derive	3.0.0	5e4260656ed235c90a5d8ad46983e263acccecb9c9d2fe6b24b9378adac95dd9
forma-server	3.0.0	a213d81fddf98bd8e9f7a0cf70642fb5f6ce0a60df9edbf54bc276ea9bb4dfd0
@getforma/core	3.0.0	f62828e008cdc4e8985e9a4074b94d78759b1f54011ec99ddf95aceb9e99e669
@getforma/compiler	3.0.0	6f7edbfeac17e79cc10f70919b11d12ade3239ec50a44032a2d2d8ad026f3994
@getforma/build	3.0.0	b4570ed085c489f7bea776b8d78fc4174812e6688fc64e0b733d008493c99bfc
@getforma/create-app	3.0.0	a781edf7b938ff94eba40255d2b009b2d630dc24d96e7bb7d11de42bf7774f66

Contract versions: {"stage":"v3-development","fmir":3,"manifest":2,"props":"declared-v1","stateBlock":"declared-v1","versionWindow":"same major; writer minor at most reader minor; patch independent; package suffix omitted","version":"3.0.0","milestones":{"alpha":{"plan":"M2","tags":"v3.0.0-alpha.N: npm next, Cargo -alpha.N","gates":{"FORMA-110":{"status":"done","scope":"server functions, the WASM walker and Node rendering removed"},"FORMA-185":{"status":"done","scope":"FMIR v3 writer and reader on main, seeded-fault replay, the nightly fuzz observed"},"FORMA-112":{"status":"done","scope":"one version, the compatibility window checked at install, build and start"},"FORMA-102":{"status":"done","scope":"declared page data, the derived Rust type and the start-time bind"},"FORMA-107":{"status":"done","scope":"render returns the result, strict loading only, declared route modes, per-page limits"},"FORMA-109":{"status":"done","scope":"PageResponse only, Trusted Types enforced"},"FORMA-111":{"status":"done","scope":"the worker's digest checks, integrity on every tag, precache mode removed"},"FORMA-144 slice 1":{"status":"done","scope":"both templates on the 3.0 API, packed and verified by P17"}}},"beta":{"plan":"M3","tags":"v3.0.0-beta.N: npm next, Cargo -beta.N","gates":{"FORMA-103":{"status":"done","scope":"island props in one JSON block, compiler-bound seeding"},"FORMA-104":{"status":"done","scope":"adoption writes nothing on its first run, coded mismatch errors"},"FORMA-105":{"status":"done","scope":"islands only, literal registry, identity digest"},"FORMA-181":{"status":"done","scope":"keyed rows"},"FORMA-182":{"status":"done","scope":"the marker vocabulary and the seven value rules with shared vectors"},"FORMA-183":{"status":"done","scope":"the parity harness and its corpus, blocking in CI"},"FORMA-184":{"status":"done","scope":"renderBoth(component, state) in Forma's own suite"},"FORMA-144 slice 2":{"status":"done","scope":"island state adoption in the templates: the integrated packed adoption and static-route acceptance"},"FORMA-188 fixture applications":{"status":"done","scope":"the three fixture applications in P17"},"FORMA-021 ratchet":{"status":"done","scope":"the safe cuts landed and the size gate green at the restated ceiling"}}},"rc":{"plan":"M4","tags":"v3.0.0-rc.N: npm next, Cargo -rc.N","gates":{"FORMA-101":{"status":"done","scope":"the published server-renderable subset and coded build errors"},"FORMA-139":{"status":"done","scope":"the conformance corpus, a fixture and a near miss per code"},"FORMA-108":{"status":"done","scope":"the hostile corpus with zero executions"},"FORMA-186":{"status":"done","scope":"the deployment identity and inert-or-reload on a skew"},"FORMA-188 skew drill":{"status":"done","scope":"the skew drill green in P17"},"FORMA-190":{"status":"done","scope":"the size report green on both templates at the recorded ceiling"},"FORMA-141":{"status":"done","scope":"formaAlias warns once per build for every bare formajs importer and preserves the 3.x mapping; reviewed implementation 76df14bf in PR78"},"FORMA-145 documentation":{"status":"done","scope":"the complete 3.0 upgrade guide and stability record match the final public surface"},"FORMA-116":{"status":"done","scope":"reviewed governance source controls and actual SR14 security mutation probes; live rollout deferred by L-60"},"FORMA-189":{"status":"done","scope":"the recall script and SECURITY.md generated from the release record"},"FORMA-145 audit":{"status":"done","scope":"the whole-release audit on another model or a separate fresh-context reviewer under L-65, with an empty blocking list (D14)"}}},"final":{"plan":"M5","tags":"v3.0.0: npm latest, Cargo 3.0.0","gates":{"FORMA-144 slice 3":{"status":"done","scope":"final template and release cleanup"},"FORMA-191":{"status":"done","scope":"the per-release measurements in P17"},"FORMA-146":{"status":"done","scope":"Q10 to Q13 and Q14 to Q18 defaults confirmed by the founder in L-57 on 2026-10-15; see docs/release/3.0-GATE-DISPOSITIONS.md"},"FORMA-145 soak":{"status":"deferred","deferral":{"decision":"L-66-QUOTA","finalVersion":"3.0.0","reference":"docs/release/post-release-soak.json"},"scope":"L-62: at least 3600 seconds of continuous fault-free CI burn-in on the exact packed RC set, including stress, fuzzers and skew/upgrade drills, after RC P17 and the independent whole-release audit"}}}},"informational":{"decision":"L-57 (2026-10-15): application runs do not gate 3.0.0; no application repository is touched","FORMA-192":{"status":"not-run","scope":"optional external application builds; excluded from this release task"},"FORMA-147":{"status":"not-run","scope":"optional external login spike; excluded from this release task"},"FORMA-116 live rollout":{"status":"deferred","decision":"L-60 (2026-10-16)","owner":"Victor","scope":"beyond 3.0: separate agent GitHub identity and scoped credentials; new founder-only protection enforcement and distinct-identity denial drills; external alert receiver, scheduler and real delivery acceptance","risk":"agents continue using the founder identity, so GitHub does not independently separate their administrator/release authority; external alert delivery remains unavailable; these criteria are deferred, not passed"}},"trustedTypes":"enforced-v1","boundRender":"finalized-v1","assetIntegrity":"sha384-v1","sourceTemplates":"islands-v1","fixtureApps":"declared-v1","deploymentSkew":"native-v1","performance":"measured-v1"}

Tag-event run to acknowledged release write: 2460.1 seconds; target 1800 seconds. Full measurements and DS11 hashes are in the attached JSON.

P17 ran 1312 s of 1,800 s; the most Forma code on any fixture route is 27,887 B of 28,100 B gzip -9 (ksx /check); measured on Linux X64, 4 CPUs, Node v24.22.0. N1 slowest p99: 2,937,349 nodes/s; N5 median paired ratio 23.24; mobile worst p95 TBT 0.0 ms. Public decoder worst sample 23.20 ms at four-times CPU slowdown. All three client comparison engines and both public budget refusals are recorded; packed npm and crates; ordinary cargo release; N1 prepared typed inputs; Lighthouse13.5.0 applied mobile; serial Chromium/Firefox/WebKit comparison.

Actual final-source parity evidence

Measured source: 2006423b21fe0f8dd5a510bd09bfe3b8748327a5.

Engine	Actual run	Sampled states	P1 / P2 / P3 equal	P3 no-setter	Total time
Chromium	Main CI 39363039636	1,018	1,018 / 909 / 100	27	42.258 s
Firefox	Tagged release 39364435446	118	118 / 99 / 10	27	39.973 s
WebKit	Tagged release 39364435446	118	118 / 99 / 10	27	27.872 s

All reported comparisons passed, with no differences, server refusals or errors. Chromium covers ten declared-input fixtures with 100 states each plus eighteen fixed-input fixtures with one state each; secondary engines use ten states per declared-input fixture. The literal N6 target of 100 states for every component remains partly met. A no-setter result is not a successful update execution. These are framework fixtures, not migrated consumer applications.

Post-release soak completion

The L-66-QUOTA post-release verification gate passed in run 39372081554: 3,660 active seconds across 15 complete rounds, zero faults, and complete cleanup. The workload used the unchanged published RC.5 payload at 12320f4340d87cbb96575b5bb3b7eab42121d477; separately reviewed orchestration ran at 89927aacdcc514509aa011876b858fe4a4ce2d1b. All four fuzzers, hostile-input matrices, Chromium/Firefox/WebKit skew checks, and fixture/template checks passed.

The separate completion receipt and independent acceptance record the evidence. The original publication record and its then-deferred zero-credit disposition remain unchanged; failed earlier soak 39368193529 retains zero completion credit. No application migrations are included.