MergePilot v0.1.0 Preview 4

MergePilot v0.1.0 Preview 4

Fourth preview of the MergePilot isolated review stack. Built from merged main (5bb2635); the final candidate was byte-identical and passed same-machine black-box full-lifecycle acceptance. Formal release assets are the accepted candidate bytes, unchanged.

Scope of this Preview

• Platform: Windows 11 + WSL2 (distro MergePilot-Test); not tested on other platforms.
• Network posture: loopback-only publication (127.0.0.1:8600, 127.0.0.1:8090).
• Transport: wsl-user-relay user-space TCP relays (WSL 6.18 bridge netfilter defect workaround); direct_routing_verified=false.
• Offline images: 9 images shipped (images-oci.tar, ~847 MB) — 8 built mergepilot-isolated-* services plus the digest-pinned pgvector/pgvector:pg16. No network pull needed at Install.
• Standalone lifecycle: Check / Install / Doctor / Start / Status / Stop / Cleanup via bootstrapper.ps1 — no source checkout, no git clone.

Behavior notes

• First Start preflight: the preflight container is an exit=0 run-to-completion task, not an abnormal exit. A clean exit of the preflight container during startup is expected behavior.
• Docker probe noise: during Cleanup you may see transient docker image-inspect rc=1 / Error response from daemon lines while recorded refs resolve across storage backends; the final state (owner images deleted, truthful report) is what matters.
• Non-owner images are retained fail-closed: Cleanup deletes exactly the 8 images recorded in the install manifest. pgvector/pgvector:pg16 and any pre-existing images are never claimed and never deleted.

Acceptance status

• Same-machine full-lifecycle acceptance: PASSED (Check → Install → Doctor OK(ok) → Start healthy → smoke 200/405/404/403 → Stop → re-Start → Cleanup ×2 contract → zero residue).
• Independent physical-machine acceptance: EXTERNAL_BLOCKED (remains blocked; only the original test machine has validated this candidate).

Uninstall / cleanup

powershell -ExecutionPolicy Bypass -File <extract-dir>\bootstrapper.ps1 -Action Cleanup
# run twice: first reports the consumed install manifest, second confirms clean state

To also remove the pinned pgvector base (never owner-deleted by design): wsl -u root -d MergePilot-Test --exec docker rmi pgvector/pgvector:pg16.

Feedback

Open an issue at https://github.com/nghqqa/MergePilot/issues (no secrets, PATs, or machine paths in reports, please).

Package integrity

• No secrets are included in any asset (built from allowlisted sources).
• Verify with sha256sum -c checksums.sha256 (3 entries) and SHA256SUMS (217 entries); per-file digests in asset-sha256.json.
• Truth boundaries (frozen): application_integration_verified=false, database_verified=false, production_verified=false, revision_producer_contract=NOT_VERIFIED, audit_producer_contract=NOT_VERIFIED, direct_routing_verified=false, transport_profile=wsl-user-relay. This Preview is not production-ready.

v0.1.0-preview.4 FINAL CANDIDATE (merged main) — 非正式 preview.4，仅供最终字节验收

NOT the formal v0.1.0-preview.4 release

This is the merged-main final candidate for byte-level acceptance by the original external test machine. The formal v0.1.0-preview.4 tag is created ONLY after this candidate passes the full lifecycle regression externally.

• git_commit: 5bb2635624585318aa005a0fc1d8c2b302c8a183 (merged main)
• lineage: PR #209 merge dac9fca (RC.5 fix branch 23 commits) → release-prep 1d6f7f5 → truth-boundary header fix 5bb2635
• images: 9/9 identity-identical to RC.5 (recomputed from shipped tar, not assumed)
• gate: 2471 passed / 0 failed / 20 skipped (re-run live at merged main)

Dev-machine verification (this round)

Check → Install → Doctor OK(ok) → Status absent → Start (healthy, page/api 200, 405/404/403) → Stop → re-Start → Cleanup #1 (install manifest removed (was present and consumed by cleanup --apply)) → Cleanup #2 (no install manifest found from the start) → zero residue.

Truth boundaries (frozen, unchanged)

application_integration_verified=false · database_verified=false · production_verified=false · revision_producer_contract=NOT_VERIFIED · audit_producer_contract=NOT_VERIFIED · direct_routing_verified=false · transport_profile=wsl-user-relay

MergePilot v0.1.0-preview.3 (Pre-release)

MergePilot v0.1.0-preview.3

Windows 11 + WSL2 Preview · 裁决：SAME_MACHINE_ACCEPTED / EXTERNAL_BLOCKED（外部物理机验收未完成）· 非 production ready

本版修复（相对 preview.2 的 Known blocker）

• Windows 浏览器可达性（核心阻断解除）：显式 Windows loopback 发布边——仅监听 127.0.0.1:8600/8090 的转发边（token 身份、WSL IP 轮换自愈、fail-closed 回滚），实测页面/API 双 200 与真浏览器渲染
• 离线闭环：tar 精确 9 镜像（8 构建 + 锁定 pgvector，847MB）；install 前三重先验（checksum/集合/config-ID）；空白镜像缓存可装可跑
• 生命周期：Start 前 journal 所有权预持久化；失败保留 journal、Created 孤儿按名回收；keepalive/forwarder 身份化有界拆解；休眠有界唤醒；恢复提示可执行（cleanup --apply）
• 诊断：11 项稳定错误码；failed* 永不输出 OK；Doctor 首败+码；wsl argv 截断检测

已知限制

• Cleanup 不移除 planner 钉的 pgvector 基础镜像（单命令 docker rmi pgvector/pgvector:pg16）
• pg16 上游 tag 已漂移；本版钉定字节 sha256:8e5355e9…（tar 内即该字节）
• m4c×3/m4f1×1 为冻结基线既有 Windows 平台缺陷（干净 origin/main 复现归类）

安装

解压后 images-oci.tar、checksums.sha256、manifest.json 须同目录；
package\bootstrapper.ps1 -Action Check → -Action Install -ImageTar images-oci.tar → -Action Start → http://127.0.0.1:8600/e2e-status.html

真实性边界（不变，部署/演示不翻转）

application_integration_verified=false · database_verified=false · production_verified=false · revision_producer_contract=NOT_VERIFIED · audit_producer_contract=NOT_VERIFIED · transport_profile=wsl-user-relay · direct_routing_verified=false

MergePilot v0.1.0-preview.2 (Pre-release)

Preview.2 — external acceptance round 1 fixes. Image bytes identical to preview.1.

⚠️ Known blocker (2026-08-24 acceptance)

SAME_MACHINE_BLOCKED / EXTERNAL_BLOCKED — do not use this package for evaluation yet:

• The WSL localhost forwarding does not publish the console to Windows: http://127.0.0.1:8600 is unreachable from Windows browsers on NAT-mode WSL2 with system proxies present (works only inside the WSL distro).
• The offline tar ships the 8 built images but not the locked pgvector base image required by start; offline installs will attempt a network pull.
• Start failures can leave Created orphan containers; Stop/Cleanup may leave the keepalive process alive; the STACK_PARTIAL recovery hint omits cleanup --apply.
  A preview.3 with an explicit Windows-side loopback publication edge and the full offline image set is being prepared on fix/preview-usability-round2.

Fixes (preview.2)

• manifest.json image digests are now derived from images-oci.tar index.json and are verifiable from the shipped tar (preview.1 recorded build-time IDs not reproducible from the tar).
• Removed hardcoded stale git SHA from README/QUICKSTART/ARCHITECTURE-SECURITY/bootstrapper; manifest.json git_commit is authoritative.
• Added Preview feedback issue template (installation/environment/runtime/UI/documentation; sanitized doctor/status/version attached; no secrets).
• README now states support scope, known limitations, uninstall, feedback entry.
• checksums.sha256 uses forward-slash paths so sha256sum -c works cross-tool.

Verify

sha256sum -c checksums.sha256
docker load -i images-oci.tar # compare docker inspect digests with manifest.json

Truth boundaries unchanged (all NOT_VERIFIED): application_integration / database / production / revision_producer_contract / audit_producer_contract. transport_profile=wsl-user-relay, direct_routing_verified=false. Not production ready.

MergePilot v0.1.0-preview.1 (Pre-release)

MergePilot v0.1.0-preview.1

Windows 11 + WSL2 Preview — 只读 E2E 运维控制台 + 真实 run35 证据。Pre-release，非 production ready。

支持平台

• Windows 10 2004+ / Windows 11，WSL2，发行版内 Docker（MergePilot-Test 模式）
• 控制台 loopback-only：仅 127.0.0.1:8600（console-edge）与 127.0.0.1:8090（gh-webhook）

安装包（401MB 级镜像 tar）

• images-oci.tar — 8 个固定 digest 镜像（docker load 离线导入，无网络 pull）
• mergepilot-v0.1.0-preview.1-package.zip — bootstrapper + 文档载荷
• checksums.sha256 / manifest.json — 安装前校验（Install 先验 checksum 再导入）与版本清单
• 快速开始：解包后 bootstrapper.ps1 -Action Check → -Action Install -ImageTar images-oci.tar → -Action Start → http://127.0.0.1:8600/e2e-status.html

回退合同

安装失败自动回滚；版本升级保留 install.previous.json 与旧 digest；stop/cleanup 不触碰 journal、receipt 或证据（详见包内 docs/preview/ROLLBACK.md）。

已知限制

• run-id 必须为播种用例（run-showcase-a/b/c）
• WSL 休眠时栈容器暂停，随发行版唤醒恢复
• 全新环境验收为 Preview 级替代证据（空白安装目录 + 发行版内零状态；发行版级全新受 CLI AUTHORIZED_DISTRO 硬边界限制未达成）

真实性声明

transport_profile=wsl-user-relay · direct_routing_verified=false（经中继）。
五项真实性边界保持未验证：application_integration_verified=false · database_verified=false · production_verified=false · revision_producer_contract=NOT_VERIFIED · audit_producer_contract=NOT_VERIFIED。
部署或演示本包不翻转任何边界，不构成生产验证。

M9-H RC.5 delivery (preview.4-rc.5 — M9G-1 Cleanup fix)

M9-H RC.5 Asset Delivery

Fix vs RC.4

M9G-1: Cleanup manifest snapshot BEFORE CLI calls

Gate: 2471 passed / 0 failed / 20 skipped

Truth boundaries unchanged. NOT production ready.

M9-F RC.4 delivery (preview.4-rc.4 — hygiene + cleanup timing)

M9-F RC.4 Asset Delivery

Fixes vs RC.3

• Package hygiene: 0 cache artifacts (pycache/pyc/pytest_cache) in ZIP (was 19)
• Cleanup install.json timing: three-way report, correct pre/post state

Gate: 2460 passed / 0 failed / 20 skipped

Truth boundaries unchanged. NOT production ready.

M9-D RC.3 delivery (preview.4-rc.3 — standalone Doctor fixed)

M9-D RC.3 Asset Delivery

Fixes vs RC.2

• Standalone Doctor: dual-mode (offline runtime vs source-build opt-in)
• Full tools/ + config/ bundled in ZIP (Start works from package)
• Cleanup per-resource report (no bare 'cleaned')
• install.json written before Doctor in Install flow

Gate: 2445 passed / 0 failed / 20 skipped

Truth boundaries unchanged. NOT production ready.

M9-C RC.2 delivery (preview.4-rc.2 — NOT a release)

M9-C RC.2 Asset Delivery

Standalone package: no source checkout, no git clone. Extract and run.

Assets

• images-oci.tar (9 images, 847.4MB)
• manifest.json (version=v0.1.0-preview.4-rc.2, git=e051c59)
• checksums.sha256 (LF, top-level 3 files)
• mergepilot-v0.1.0-preview.4-rc.2-package.zip (bootstrapper + tools/ + docs/)
• EXTERNAL-ACCEPTANCE.md
• SHA256SUMS (all files)
• asset-sha256.json (all assets with SHA-256)

WinNAT expected behavior

Check will fail with WINDOWS_PORT_BIND_UNAVAILABLE on machines whose
WinNAT exclusion ranges cover 8600/8090 — environment condition, NOT RC defect.

Gate: 2429 passed / 0 failed / 20 skipped

Truth boundaries unchanged. NOT production ready.

M9-B RC delivery (preview.4-rc.1 assets — NOT a release)

M9-B RC Asset Delivery

This is an ASSET DELIVERY for external acceptance testing only.
It is NOT a formal preview.4 release. The formal preview.4 release
will only happen after external machine acceptance.

Assets (all from dist/preview-v0.1.0-preview.4-rc.1, git 3a6e531)

• images-oci.tar (9 images, 847.4MB)
• manifest.json
• checksums.sha256 (LF, forward-slash)
• mergepilot-v0.1.0-preview.4-rc.1-package.zip (bootstrapper + docs)
• EXTERNAL-ACCEPTANCE.md (instructions)

Important

• WinNAT port exclusion on the test machine will cause Check to fail
  with WINDOWS_PORT_BIND_UNAVAILABLE — this is an ENVIRONMENT condition,
  not an RC defect. See EXTERNAL-ACCEPTANCE.md for details.
• Truth boundaries: all false/NOT_VERIFIED except
  revision/audit_producer_contract = PARTIALLY_VERIFIED (dev machine only).
• NOT production ready. NOT externally accepted.