unisacc 0.0.42

Unsigned release. This release is published unsigned: no Windows Authenticode signature and no Apple Developer ID signature or notarization, as v0.0.40 and v0.0.41 were.

What changed in the product

• Host C library forwarding now works under -run and the default run on Linux, and the compiler stays a static image. A program that calls host libc functions is finished as the same dynamic image -o writes, placed in an anonymous memory file and executed from it; arguments, environment, standard streams and exit status are the program's own. This needs the host's glibc dynamic loader. Where an anonymous memory file cannot be created or executed, or the loader cannot be opened, the run is refused with a message that says so and points to -o. Library mode still refuses host forwarding.
• Library mode: guest memory is owned by the context. A guest mmap/munmap in library mode now goes through the library's own callbacks instead of a raw system call, so mappings are tracked and released with the context. Previously each run leaked a 1 MiB mapping.
• Library mode: steady memory across repeated compile and run. The model package and decoded models are cached per context instead of being re-read and re-decoded on every call. Resident size no longer oscillates.
• Reading a directory as an input reports "cannot read" again (a regression introduced and fixed within this cycle).
• The seed builds with GCC 14.

Known limitations

• Host forwarding under -run on Linux needs a glibc dynamic loader on the host. On a system without one, write the program with -o and run it where glibc is installed.
• Library mode rejects MAP_FIXED, and munmap only accepts ranges the context mapped.
• A model package file is treated as immutable while a context that loaded it is alive.
• A raw .tape input is not checked against the Tape domain. A .tape file that is not valid Tape is not always refused in this release. A file containing only ? given to -S or -c exits 0 and writes the input back unchanged; an imm line with a missing operand (imm r2) is accepted in every mode; an imm line with an invalid register (imm r9, 0) under -run ends with a segmentation fault. Compiling C sources is not affected: the compiler never writes such a tape itself. This was found after the draft was opened and is fixed on main for 0.0.43.

Evidence for these bytes

unisacc.com sha256 ba11d636b54adcdc519a81af7553d15ab882ecb85622bdc16968d966acdb8f5f, sealed from commit 20f3a23c, release bound to rc/v0.0.42 at bee2a3ff.

• release-check run 38426947450 on the rc commit: all six candidate cells (macOS arm64 and x86_64, Linux x86_64 and arm64, Windows x86_64 and arm64), the six-way matrix comparison and the Windows suite succeeded.
• darwin-gate run 38387935866: the six suites that need a Darwin host passed on macOS runners against the same bytes.
• Local gate (Linux x86_64 cloud host), 722 suites: 632 passed and no product failure (no wrong output, compile error or sanitizer report). The run's exit status is 1 because the remaining 90 are not passes: 28 not executed because a predecessor timed out, 39 timeouts recorded against the host baseline (nine of them ruled on 2026-10-13; eight of those nine pass when run alone and one is a suite that is too large for its limit), 2 checks where the host's own reference compiler or assembler rejects the reference source, 7 with memory evidence unknown by design, and 14 that this host cannot verify (six of those are covered by darwin-gate above; eight still need a Lima guest, zig or a macOS linker). The owner accepted a fully classified exit table plus the remote evidence as the basis for opening this draft; details are in research/c42-7000-final-bucket.md and research/c42-ruling-request.md.

Not verified

• The new library mmap route and the exec-on-demand forwarding path have no dedicated test on macOS or Linux arm64; the six-cell run exercises general programs.
• Behaviour where anonymous memory files are forbidden (vm.memfd_noexec) or on kernels without execveat was not run.

unisacc 0.0.41

unisacc 0.0.41 (Draft)

Status: Draft. Unsigned product bytes (signing deferred; align 0.0.40 precedent). Authority: 政委授推到 42 公开.

Materials

• src/version.h = 0.0.41; H1=INHERIT (archive/plans/v0.0.38.md)
• Candidate unisacc-next.com sha256 bcd2b9b75129cd511e5bb7fa7acad317e7a54d13bb6750ab4c540bbced07b2b9 @ commit 809871a4
• env-pin GATE /tmp/c41-0843-envpin/cand.queue 721/721 PASS 627 (1146对照 +30; 禁 void 1146)
• Buckets: research/c41-envpin-closeout-1409/final-bucket-vs-1146.md
• env-pin false-red tip fix: d4cd5f6f (gate-infra/queuestart; local suite green)

Gaps (do not block Draft open; block seal/Latest until filled or waived)

• GHCR seal_candidate / release/candidate.json still 0.0.40 (model-audit/models.json not in cand tree)
• rc/v0.0.41 not yet cut
• Apple/Win signing deferred

Non-pass host surface (listed, not PASS)

• rc77×6 Darwin/host N/A; rc142×20 timeouts; rc2×10 seedgen; ruled/unruled rc1 per closeout

unisacc 0.0.40

unisacc 0.0.40

Status: Public / Latest. Unsigned product bytes (signing deferred).

Authority

• 政委：「如果m4pro已经过了就先发布吧」→ 授权切 Latest / 公开发布 v0.0.40（m4pro bootstrap 绿为准）。
• 缺签则尽最大可发布：unsigned 可发则发，签另记。
• Flex 裁定：research/c40-darwin-b139/ruling-darwin-host-m4pro-flex-1532.md。
• Draft 开窗：research/c40-draft-open-1626/ruling-open-draft-v0.0.40-1626.md。
• Seal：research/c40-seal-1645/receipt-seal-draft-assets-1645.md。

Local-green evidence (m4pro)

• Host: m4pro.local Darwin arm64
• Tip: 7acb254a — ok B=C=U 257c4ef6944103ef / 421304 lines / rc0
• Pack: m4pro-flex-1532-evidence.tar.gz (+ HASHES)

Product seal

• release/candidate.json → 0.0.40
• GHCR: ghcr.io/partnernetsoftware/unisacc-candidate:0.0.40 @sha256:8798d9c880c9fddb5e8ae09c9e8fc0e6d22ec5247814811e8ba2e70900215386
• unisacc_com_sha256 (unsigned): 50ab4c213feedb2f1a4f1f39c8bfca7d8d63c74a1d6b50915db8ceb233f5cf58
• sealed_from_commit: b12901c7…；rc/v0.0.40 → 1db30835
• Attached: unisacc.com (unsigned), unisacc.com.build.json, unisacc-unsigned.zip, candidate.json, unsigned-receipt.json, SHA256SUMS-unsigned.txt

Signing deferred (另记)

• Apple dmg / Developer ID sign + notarize — not done this window
• Windows company signing — not done
• Formal publish.sh path (signed acceptance / release_eligible) — not used; unsigned public by explicit authority

Note

• Tip CI observational only; m4pro bootstrap green is the publish gate for this cut.

v0.0.39

v0.0.39 court dry-run draft (not for publication)

R3=A court-before-publish exercise: unsigned candidate 92e6d4a76f30c96d1f8e02c1650ac88a7b66686737d04bc24d67f94bfddc336a (sources 68b14d33, target 134d7e9). Do not publish.

v0.0.38

unisacc 0.0.38

主题：集中流水线提效（P1–P7）与 SC1 种子生成器修片。产品验收措辞未改、限时未抬、测试未删。

候选：unisacc-next.com sha256 ba3f40cb…（sources 5782090e），comboot stage2=stage3 定点成立；封存 ghcr.io/partnernetsoftware/unisacc-candidate@sha256:9b9c1022…（sealed_from_commit 2298c31），rc/v0.0.38 → 4790de9。出口：本机 Linux/x86_64 完整 queue 650/650，565 PASS；证据包 ~/.unisacc/evidence/c38-final。

变更

• 流水线：调度截止/在途/停滞处置、尝试类别持久化、按身份历史、重项单令牌、实时内存准入、出口表与预授权分类、阶段墙钟日志、预热与 pair 安装幂等（P1–P7）。可度量对照见 research/c38-pipeline-baseline.md。
• SC1：seed/gen.c parse2_startup_control 绑定 k2-control 常量（TDN/TDE），seed-construct-parse2 三项对参考逐字节一致。
• seed 内存证据按最终生成器身份刷新（53fe285f）。

非通过项（列明，不计 PASS）

• 宿主基线（H1 超时，具名、限时不变）：closure-c1、closure-c2、closure-c3、closure-c4、exec-e5、exec-f1-attributes、lib-callable-variadic-model、shared-e2-plain、stages-1、stages-2、stages-3
• 已裁基线（H1/H2，rulings.tsv）：ccinterop、com-difftest_o-1、com-elfobj、com-fb12-multi、com-forward、com-forward-multi、com-luatests-build、com-multi、com-tapebin-1、com-tapebin-2、com-tapebin-3、elfobj、exec-arm、exec-bridge-linux、exec-driver-language-2、exec-winx86self、forward、hosthdr、lib-lifecycle、realprog、rowcov-enc-1、rowcov-enc-2、rowcov-enc-3、rowcov-enc-4、rowcov-enc-5、rowcov-enc-6、rowcov-enc-7、rowcov-enc-8、rowcov-parse2-build、rowcov-pp-locations、rowcov-pp-shared、shared-e2-located、syscall6、windows-resolver-host
• 宿主不适用（rc77，覆盖义务保留）：exec-bootstrap-osxarm、exec-bootstrap-osxx86、lib-stack-arm、lib-stack-x86、lib-stack-x86-hostabi、lib-windows-gp-native
• 未执行义务（内存证据 UNKNOWN，rc2）：com-seedgen、seedgen-2、seedgen-3、seedgen-4、seedparse2-1、seedparse2-2
• 前驱失败未执行（BLOCKED 27，随根处置）：挂 rowcov-parse2-build、rowcov-enc 等根。
• gate-infra：出口时 NEEDS_RULING（gatedeps 已审核哈希过时）；经独立内容重审确认七个 exec-driver 套件契约未改，机房主任裁定结案（RESOLVED）；版本号变更改变字节与源身份，七套件本窗未复跑。

顺延

K2a、K1、F4″、COV1、K2b、K2c、H37、X3、L2、L1′、L1b′、A1、N1 → 0.0.39；W2、E57 → 有 Windows 双 ISA 真宿主的版本；H1/H2 跨版进行。

签名与资产

• 资产：unisacc.com（Windows Authenticode 签名，Valid；签名者 PARTNERNET SOFTWARE PTY LTD，Microsoft ID Verified CS EOC CA 04）。签名前 sha256 ba3f40cb…（2243480 B，封存候选），签名后 579f6525ce101ef35100269bcd57ea74e2e3b38bded38ab9dcf014856640d9da（2259256 B）；签名 run 38024592099。
• Apple 签名与 dmg 本版未提供（发布机为 Linux，无 Apple 签名环境）。
• 构建依赖仓外宿主 cc 启动器（仅对 seed/compilerpack.c 加 -D_XOPEN_SOURCE=700），内容与 sha 见 release/c38-host-launcher.json；源码修正为 H37，顺延 0.0.39。

unisacc 0.0.37

unisacc 0.0.37

本版完成 C1–C3 的产品修片，并增加 Linux 静态编译器写出宿主转发程序的修复。

• C1：支持块内 register、将返回结构体的调用直接用于 return，统一标准 C 预定义宏。c99 64–66 与诊断集（31 正确、0 错误）通过。
• C2：无原型声明的多于六实参调用经默认实参提升进入栈传参出口；修复跨翻译单元的 typedef 可见性泄漏。无原型、多单元、原型及浮点对照通过。产品 pack.c 的 zlib 随带头缺口仍按 C2 具名记录；宿主安装 zlib 只是构造前提。
• C3：补齐 realpath、PATH_MAX 及 seed 工具产品编译修片。pack 缺口归 C2；K&R 定义仍属具名拒绝，不列为支持新增。
• Linux：宿主 loader 可达性检查收窄到 -run。静态编译器可用 -o 写出宿主转发程序，产物可运行；缺少 loader 的静态编译器执行 -run 仍明确拒绝。

候选 740007ef 的独立定向验收 17/17 通过；seed→stage2→stage3 自举定点成立。固定 v0.0.32 csih 15 单元编译三次均成功，产物 selftest 通过。

F4′ 性能目标本版 FAILED：三次冷编为 11.93、11.82、12.38 秒，中位 11.93 秒，未达到原 ≤5 秒要求。依董秘裁定顺延为 0.0.38 F4″；ccw 快路实验未纳入本版。验收标准与测试保留。

W2/E57 的 Windows 双 ISA DNS/HTTPS 与协作验收授权顺延，待有相应宿主的版本执行；X3、L2、L1′、L1b′、A1、N1 的未完成整项也登记到 0.0.38。Linux 构造与定向验收不代表这些整项已经通过。

本机（Linux x86_64）全量队列中因宿主速度超时或写死 macOS/arm64 目标的套件，依董秘裁定接受为宿主限制，以 CI release-check（7a8764fc 绿）与独立定向验收 17/17 放行；主机限时按云机基线登记 0.0.38 再收紧。Apple 签名与 dmg 本版未提供。

unisacc 0.0.36

unisacc 0.0.36 — 顺延收口 (carry-over close-out)

• A1: external data addresses through the GOT on ELF/Mach-O objects (x86_64 GOTPCREL, arm64 ADRP+LDR), reference and model landed together; agenterm objects byte-identical to the reference.
• C99: struct-typed initializers for struct members/elements copy whole (6.7.8p13); __STDC__, __STDC_VERSION__ (199901L), __STDC_HOSTED__ predefined; block-scope register.
• P8: construction cache keyed by the actual read set.
• c99 probes 63/63 on the reference, 62/63 on the product (struct-returning call as a return expression deferred to 0.0.37 by name).

unisacc 0.0.35

unisacc 0.0.35

unisacc 0.0.34

unisacc 0.0.34

unisacc 0.0.33

unisacc 0.0.33