Record OpenSS7 interop blocker evidence

Author: ammarheidari

README.md

@@ -53,7 +53,7 @@ The first production milestone is M3UA over a transport abstraction. SCCP, TCAP,
 | Supply chain automation | Phase 21 foundation-ready: supply-chain automation plan, SBOM generation contract, package signing contract, signature verification contract, provenance attestation contract, artifact manifest, gate, readiness report, CI profile, and status report added; promotion still requires real signed artifacts and commercial evidence |
 | Release workflow orchestration | Phase 23 foundation-ready: release workflow triggers, stages, required secrets, supply-chain integration, commercial evidence verification, publish contract, concrete workflow file, YAML validation, publish guard, artifact retention, least-privilege permissions, concurrency policy, environment contract, promotion gate, readiness report, and status report added; promotion still requires real release evidence |
 | Package publication readiness | Phase 24 foundation-ready: release version policy, NuGet metadata contract, package output layout, dry-run publish plan, credential policy, channel policy, package integrity manifest, publication evidence manifest, publication gate, readiness status, and documentation added; real NuGet publication remains blocked until retained evidence, signing, SBOM, provenance, and live credentials are available |
-| Commercial release execution | Phase 25 in progress: retained execution evidence manifest and Linux SCTP smoke capture evidence added; OpenSS7/IPSS7 remains blocked on WSL2 kernel compatibility |
+| Commercial release execution | Phase 25 in progress: retained execution evidence manifest, Linux SCTP smoke capture evidence, and structured OpenSS7/IPSS7 blocker evidence added; OpenSS7/IPSS7 remains blocked on WSL2 kernel compatibility |
 | Package governance | Phase 7 policy added: current package metadata is tracked; commercial target still requires package signing and SBOM automation |
 | Security governance | Phase 7 security policy added with private disclosure and severity response targets |
 | Compatibility policy | Phase 7 policy added: net10.0 target, SemVer, pre-stable breaking-change allowance, and stable major-version rule |

docs/PHASE25_COMMERCIAL_RELEASE_EXECUTION.md

@@ -27,3 +27,16 @@ The current capture has:
 - SCTP association handshake, DATA exchange, and clean shutdown.
 
 This is valid Linux SCTP smoke evidence, but it is not yet full external peer interoperability evidence.
+
+## Unit 3 - OpenSS7/IPSS7 Blocker Evidence
+
+`SigtranOpenSs7InteropBlockerEvidence` records the retained OpenSS7/IPSS7 execution blocker as structured evidence.
+
+Current blocker:
+
+- Environment: WSL2 Ubuntu 24.04.
+- Log: `/home/ammar/sigtran-lab/artifacts/logs/openss7-configure.log`.
+- Failure: OpenSS7 configure rejects Linux kernel major version 6 before peer runtime can start.
+- Required action: retest on a compatible Linux kernel or patch the OpenSS7 kernel-version check with retained build evidence.
+
+The blocker intentionally prevents interoperability promotion until a passing OpenSS7/IPSS7 run produces PCAP, peer logs, SDK traces, and comparison evidence.

src/sigtran.net.Tests/Program.cs

@@ -186,6 +186,7 @@
 Run("SIGTRAN package publication status summarizes readiness foundation", SigtranPackagePublicationStatusSummarizesReadinessFoundation);
 Run("SIGTRAN commercial release execution evidence tracks passed and blocked artifacts", SigtranCommercialReleaseExecutionEvidenceTracksPassedAndBlockedArtifacts);
 Run("SIGTRAN Linux SCTP evidence records passing smoke capture", SigtranLinuxSctpEvidenceRecordsPassingSmokeCapture);
+Run("SIGTRAN OpenSS7 interop blocker evidence records retained failure context", SigtranOpenSs7InteropBlockerEvidenceRecordsRetainedFailureContext);
 Run("SIGTRAN status capabilities use domain documentation labels", SigtranStatusCapabilitiesUseDomainDocumentationLabels);
 Run("Native SCTP platform probe reports socket creation capability", NativeSctpPlatformProbeReportsSocketCreationCapability);
 Run("Native SCTP socket factory creates or reports unsupported platform", NativeSctpSocketFactoryCreatesOrReportsUnsupportedPlatform);
@@ -2327,6 +2328,17 @@ static void SigtranLinuxSctpEvidenceRecordsPassingSmokeCapture()
     Assert(summary.HasCleanShutdown, "Linux SCTP capture should include clean shutdown");
 }
 
+static void SigtranOpenSs7InteropBlockerEvidenceRecordsRetainedFailureContext()
+{
+    SigtranOpenSs7InteropBlocker blocker = SigtranOpenSs7InteropBlockerEvidence.CreateCurrentBlocker();
+
+    Assert(blocker.BlocksInteropPromotion, "OpenSS7/IPSS7 blocker should prevent interop promotion");
+    Assert(blocker.EnvironmentName.Contains("WSL2", StringComparison.OrdinalIgnoreCase), "OpenSS7/IPSS7 blocker should record the environment");
+    Assert(blocker.LogPath.EndsWith("openss7-configure.log", StringComparison.Ordinal), "OpenSS7/IPSS7 blocker should retain configure log path");
+    Assert(blocker.ObservedFailure.Contains("kernel major version 6", StringComparison.OrdinalIgnoreCase), blocker.Describe());
+    Assert(blocker.RequiredAction.Contains("Retest", StringComparison.OrdinalIgnoreCase), "OpenSS7/IPSS7 blocker should describe the next action");
+}
+
 static void SigtranStatusCapabilitiesUseDomainDocumentationLabels()
 {
     IReadOnlyList<string>[] statusCapabilities =

src/sigtran.net/Core/Utilities/SigtranOpenSs7InteropBlockerEvidence.cs

@@ -0,0 +1,71 @@
+namespace sigtran.net.Core.Utilities;
+
+/// <summary>
+/// Describes an OpenSS7/IPSS7 interoperability execution blocker.
+/// </summary>
+public sealed class SigtranOpenSs7InteropBlocker
+{
+    /// <summary>Creates an OpenSS7/IPSS7 interoperability blocker record.</summary>
+    /// <param name="environmentName">The lab environment where the blocker was observed.</param>
+    /// <param name="logPath">The retained log path.</param>
+    /// <param name="observedFailure">The observed failure summary.</param>
+    /// <param name="requiredAction">The required action before retesting.</param>
+    public SigtranOpenSs7InteropBlocker(
+        string environmentName,
+        string logPath,
+        string observedFailure,
+        string requiredAction)
+    {
+        EnvironmentName = string.IsNullOrWhiteSpace(environmentName)
+            ? throw new ArgumentException("Environment name is required.", nameof(environmentName))
+            : environmentName;
+        LogPath = string.IsNullOrWhiteSpace(logPath)
+            ? throw new ArgumentException("OpenSS7 log path is required.", nameof(logPath))
+            : logPath;
+        ObservedFailure = string.IsNullOrWhiteSpace(observedFailure)
+            ? throw new ArgumentException("Observed failure is required.", nameof(observedFailure))
+            : observedFailure;
+        RequiredAction = string.IsNullOrWhiteSpace(requiredAction)
+            ? throw new ArgumentException("Required action is required.", nameof(requiredAction))
+            : requiredAction;
+    }
+
+    /// <summary>The lab environment where the blocker was observed.</summary>
+    public string EnvironmentName { get; }
+
+    /// <summary>The retained log path.</summary>
+    public string LogPath { get; }
+
+    /// <summary>The observed failure summary.</summary>
+    public string ObservedFailure { get; }
+
+    /// <summary>The required action before retesting.</summary>
+    public string RequiredAction { get; }
+
+    /// <summary>Whether the blocker prevents OpenSS7/IPSS7 commercial evidence promotion.</summary>
+    public bool BlocksInteropPromotion => true;
+
+    /// <summary>Formats a compact blocker summary.</summary>
+    /// <returns>The blocker summary.</returns>
+    public string Describe()
+    {
+        return $"{EnvironmentName}: {ObservedFailure}; action={RequiredAction}; log={LogPath}";
+    }
+}
+
+/// <summary>
+/// Provides OpenSS7/IPSS7 interoperability blocker evidence helpers.
+/// </summary>
+public static class SigtranOpenSs7InteropBlockerEvidence
+{
+    /// <summary>Creates the current retained OpenSS7/IPSS7 blocker evidence record.</summary>
+    /// <returns>The current retained OpenSS7/IPSS7 blocker evidence record.</returns>
+    public static SigtranOpenSs7InteropBlocker CreateCurrentBlocker()
+    {
+        return new(
+            "WSL2 Ubuntu 24.04",
+            "/home/ammar/sigtran-lab/artifacts/logs/openss7-configure.log",
+            "OpenSS7 configure rejects Linux kernel major version 6 before peer runtime can start.",
+            "Retest OpenSS7/IPSS7 on a compatible Linux kernel or patch the OpenSS7 kernel-version check with retained build evidence.");
+    }
+}