MergePilot v0.1.0 Preview 4

MergePilot v0.1.0 Preview 4

Fourth preview of the MergePilot isolated review stack. Built from merged main (5bb2635); the final candidate was byte-identical and passed same-machine black-box full-lifecycle acceptance. Formal release assets are the accepted candidate bytes, unchanged.

Scope of this Preview

• Platform: Windows 11 + WSL2 (distro MergePilot-Test); not tested on other platforms.
• Network posture: loopback-only publication (127.0.0.1:8600, 127.0.0.1:8090).
• Transport: wsl-user-relay user-space TCP relays (WSL 6.18 bridge netfilter defect workaround); direct_routing_verified=false.
• Offline images: 9 images shipped (images-oci.tar, ~847 MB) — 8 built mergepilot-isolated-* services plus the digest-pinned pgvector/pgvector:pg16. No network pull needed at Install.
• Standalone lifecycle: Check / Install / Doctor / Start / Status / Stop / Cleanup via bootstrapper.ps1 — no source checkout, no git clone.

Behavior notes

• First Start preflight: the preflight container is an exit=0 run-to-completion task, not an abnormal exit. A clean exit of the preflight container during startup is expected behavior.
• Docker probe noise: during Cleanup you may see transient docker image-inspect rc=1 / Error response from daemon lines while recorded refs resolve across storage backends; the final state (owner images deleted, truthful report) is what matters.
• Non-owner images are retained fail-closed: Cleanup deletes exactly the 8 images recorded in the install manifest. pgvector/pgvector:pg16 and any pre-existing images are never claimed and never deleted.

Acceptance status

• Same-machine full-lifecycle acceptance: PASSED (Check → Install → Doctor OK(ok) → Start healthy → smoke 200/405/404/403 → Stop → re-Start → Cleanup ×2 contract → zero residue).
• Independent physical-machine acceptance: EXTERNAL_BLOCKED (remains blocked; only the original test machine has validated this candidate).

Uninstall / cleanup

powershell -ExecutionPolicy Bypass -File <extract-dir>\bootstrapper.ps1 -Action Cleanup
# run twice: first reports the consumed install manifest, second confirms clean state

To also remove the pinned pgvector base (never owner-deleted by design): wsl -u root -d MergePilot-Test --exec docker rmi pgvector/pgvector:pg16.

Feedback

Open an issue at https://github.com/nghqqa/MergePilot/issues (no secrets, PATs, or machine paths in reports, please).

Package integrity

• No secrets are included in any asset (built from allowlisted sources).
• Verify with sha256sum -c checksums.sha256 (3 entries) and SHA256SUMS (217 entries); per-file digests in asset-sha256.json.
• Truth boundaries (frozen): application_integration_verified=false, database_verified=false, production_verified=false, revision_producer_contract=NOT_VERIFIED, audit_producer_contract=NOT_VERIFIED, direct_routing_verified=false, transport_profile=wsl-user-relay. This Preview is not production-ready.