Skip to content

Submit a Launch v1.6.2

Choose a tag to compare

View all tags
@programmable-infra programmable-infra released this 16 Aug 22:01
· 22 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.6.2
592ceaa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Submit a Launch v1.6.2

Version 1.6.2 fixes the protected Application V3.1 source resolver for valid inline source closures that also identify
their contract files as an explicit subset.

What changed

  • Project overlapping sourcePaths and contractPaths once into the disjoint trusted GitHub source request.
  • Preserve the complete remotely verified path union and the original Application source closure.
  • Continue rejecting any contract path outside the exact source closure before remote resolution.
  • Keep repository ID, public repository URI, commit, tree, source artifacts, and package bytes exactly bound.

Authority boundary

This patch changes only source verification transport. A valid Application V3.1 package remains an unreviewed Applicant
Draft. It does not grant review, acceptance, approval, deployment, discovery, routing, funds, or launch authority.
Candidate repository content remains inert data under the protected-base validator.

Verify locally

Use Node.js 24 or newer:

npm ci --ignore-scripts
npm test
Assets 3
Loading