SDAQF v1.0.0-rc.1
Pre-releaseSDAQF v1.0.0-rc.1
Release status: PUBLISHED
Repository visibility evidence:
PUBLIC_OBSERVED
Candidate 9f14e2287da3afc078db787e823765320b1e23ac was published on
2026-07-31 as the annotated tag and GitHub prerelease v1.0.0-rc.1. The
repository is public, private vulnerability reporting is enabled, and actual
Gate G5 passed for this candidate.
The GitHub release body was reconciled with this tracked source note on
2026-08-03 so the remote record states the published status and exact candidate
identity.
Scope
SDAQF 1.0.0rc1 is an offline-first specification-driven development and
quality-assurance release candidate for framework evaluators and advanced
Codex users. It is a prerelease of the target V1 public API and is not for
production use.
The runtime dependency set remains empty. OpenAI API or Agents SDK adapters and
a management UI are deferred post-V1.
Installation
From an exact trusted source checkout with Python 3.12 or 3.13:
python -I -m pip install --no-deps .
python -m sdaqf --help
The Release Contract uses a stricter isolated, offline, no-index,
no-build-isolation target installation for candidate verification.
Compatibility and migration
The target public API, schema policy, platform scope, migration procedure,
deprecation boundary, and rollback rules are defined in
docs/compatibility.md.
Existing schema 1.0 release-candidate records remain historical and
unselected-license records. Selected Apache-2.0 candidates use schema 1.1;
records are never silently reinterpreted in place.
Verified platforms and exact evidence
The tagged candidate was verified on Windows and Linux with Python 3.12 and
3.13 by successful exact-SHA Actions run
30603953536.
macOS remains NOT_VERIFIED.
A duplicate tag-triggered run 30605092668 checked out the same commit in
detached-HEAD mode and failed the branch-only workspace audit in all four jobs.
The branch run above is the passing candidate evidence; the duplicate failure
is historical. The current workflow prevents tag-push jobs and validates pull
request head branches explicitly; PR #1 passed all four jobs as Actions run
30822231420.
Known limitations
- This is a release candidate and is not for production use.
- macOS is not verified.
- OpenAI API or Agents SDK integration is deferred post-V1.
- A management UI is deferred post-V1.
- External pull requests are not accepted during the release candidate.
- The authored comparison is not empirical, causal, blinded, randomized,
independently replicated, statistically powered, or cost-comparable.
Security and support
Bug and documentation issues are handled through GitHub Issues on a
best-effort basis for the latest release, with no SLA.
Do not disclose vulnerabilities in public issues. GitHub private vulnerability
reporting is enabled; see SECURITY.md and SUPPORT.md.
No prerelease backports are promised. A separately approved final 1.0.0
receives best-effort Critical security and data-loss fixes for six months.
License
SDAQF is licensed under Apache License 2.0. The exact public copyright holder is
guriguri215-lang. See LICENSE and NOTICE.
Release metadata and artifacts
- Tag:
v1.0.0-rc.1. - Prerelease: true.
- Latest release: false.
- Attached assets: none.
- Package-registry publication: none.
- Source archives: GitHub-provided tag archives only.
Exact candidate identity
The annotated tag resolves to
9f14e2287da3afc078db787e823765320b1e23ac. Later M5-M7 commits on main
are unreleased and do not inherit this candidate's Gate G5 or platform
evidence.