Skip to content

Commit 515fa91

Browse files
committed
Update selected import release evidence
1 parent b0c9980 commit 515fa91

2 files changed

Lines changed: 24 additions & 24 deletions

File tree

COMPLETION_AUDIT.md

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -22,21 +22,21 @@ Deliverables implied by the active objective:
2222
| Requirement | Evidence | Status |
2323
| --- | --- | --- |
2424
| Vulnerability/problem review | `RELEASE_READINESS_REVIEW.md`, `SECURITY.md`, `MISSING_FEATURES.md`, `TODO.md` | Covered for current known risks |
25-
| Security dependency audit | Hosted CI run `25548557403`; manual release workflow `25546125531`; local `uvx --from pip-audit==2.10.0 pip-audit --strict`; local site runtime audit | Passing for known advisories; CI/release tool version is pinned |
26-
| Python static security scan | Hosted CI run `25548557403`; local `uvx --from bandit==1.9.4 bandit -r a7 scripts main.py -q --skip B404,B603`; CI/release workflow step | Passing after resolving the release-manifest partial `git` path and marking the diagnostic-code false positive; CI/release tool version is pinned |
27-
| Secret scanning | Hosted CI run `25548557403`; `scripts/check_no_secrets.py` | Passing pattern- and filename-based scan |
28-
| Python test suite | Hosted CI run `25548557403`; local `./run_all_tests.sh` after variadic fail-closed behavior | Passing: 1249 tests |
29-
| Error-stage behavior | Hosted CI run `25548557403`; `scripts/verify_error_stages.py`; refactored shared logic in `scripts/error_stage_common.py` | Passing |
30-
| Zig example E2E | Hosted CI run `25548557403`; local `scripts/verify_examples_e2e.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
31-
| C example E2E | Hosted CI run `25548557403`; local `scripts/verify_examples_e2e_c.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
32-
| Zig/C backend parity | Hosted CI run `25548557403`; local expanded `scripts/verify_backend_parity.py`; manual report inspection; local full gate | Passing selected suite: 24/24 locally, including fallthrough, nested fallthrough, capture patterns, generic functions, type-set constraints, generic struct instances, explicit enum discriminants, stdlib math, and operator edge cases |
33-
| Debug artifacts | Hosted CI run `25548557403`; local `./run_all_tests.sh` after variadic fail-closed behavior | Passing: 76/76 |
34-
| Release artifacts | Hosted CI run `25548557403`; manual release workflow `25546125531`; local `./run_all_tests.sh` after variadic fail-closed behavior | Passing: 76/76 |
35-
| Python package build and install | Hosted CI run `25548557403`; manual release workflow `25546125531`; local clean `rm -rf dist && uv build`; `scripts/verify_wheel_install.py`; focused release tooling tests | Passing; built wheel installs as package `a7` and exposes `a7` CLI |
25+
| Security dependency audit | Hosted CI run `25549416603`; manual release workflow `25546125531`; local `uvx --from pip-audit==2.10.0 pip-audit --strict`; local site runtime audit | Passing for known advisories; CI/release tool version is pinned |
26+
| Python static security scan | Hosted CI run `25549416603`; local `uvx --from bandit==1.9.4 bandit -r a7 scripts main.py -q --skip B404,B603`; CI/release workflow step | Passing after resolving the release-manifest partial `git` path and marking the diagnostic-code false positive; CI/release tool version is pinned |
27+
| Secret scanning | Hosted CI run `25549416603`; `scripts/check_no_secrets.py` | Passing pattern- and filename-based scan |
28+
| Python test suite | Hosted CI run `25549416603`; local `./run_all_tests.sh` after selected-import JSON diagnostics hardening | Passing: 1250 tests |
29+
| Error-stage behavior | Hosted CI run `25549416603`; `scripts/verify_error_stages.py`; refactored shared logic in `scripts/error_stage_common.py` | Passing |
30+
| Zig example E2E | Hosted CI run `25549416603`; local `scripts/verify_examples_e2e.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
31+
| C example E2E | Hosted CI run `25549416603`; local `scripts/verify_examples_e2e_c.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
32+
| Zig/C backend parity | Hosted CI run `25549416603`; local expanded `scripts/verify_backend_parity.py`; manual report inspection; local full gate | Passing selected suite: 24/24 locally, including fallthrough, nested fallthrough, capture patterns, generic functions, type-set constraints, generic struct instances, explicit enum discriminants, stdlib math, and operator edge cases |
33+
| Debug artifacts | Hosted CI run `25549416603`; local `./run_all_tests.sh` after selected-import JSON diagnostics hardening | Passing: 76/76 |
34+
| Release artifacts | Hosted CI run `25549416603`; manual release workflow `25546125531`; local `./run_all_tests.sh` after selected-import JSON diagnostics hardening | Passing: 76/76 |
35+
| Python package build and install | Hosted CI run `25549416603`; manual release workflow `25546125531`; local clean `rm -rf dist && uv build`; `scripts/verify_wheel_install.py`; focused release tooling tests | Passing; built wheel installs as package `a7` and exposes `a7` CLI |
3636
| Local package hygiene | `README.md`, `RELEASE.md`, `site/public/docs/release.md` now require `rm -rf dist` before `uv build` | Covered |
3737
| Release checksums, provenance, and archive contents | `scripts/generate_release_manifest.py`; `scripts/verify_release_manifest.py`; `scripts/verify_archive_contents.py`; `test/test_release_tooling.py`; release workflow validates required paths, required archive members, re-checks hashes before upload, and emits GitHub artifact attestations for release assets; manual release dispatch `25546125531` | Covered for workflow-dispatch release path; manifest verifier now rejects traversal and unsafe absolute paths; tag-only draft release creation still requires a real tag run before release |
38-
| Docs style/build | Hosted CI run `25548557403`; local `scripts/check_docs_style.py`; local `cd site && npm run build` | Passing |
39-
| Docs deploy | Hosted Deploy Docs run `25548557432`; hosted browser-harness check for `/a7-py/` confirmed the A7-first homepage title and primary navigation; hosted fetch confirmed the new `llms-full.txt` format | Passing |
38+
| Docs style/build | Hosted CI run `25549416603`; local `scripts/check_docs_style.py`; local `cd site && npm run build` | Passing |
39+
| Docs deploy | Hosted Deploy Docs run `25549416591`; hosted browser-harness check for `/a7-py/` confirmed the A7-first homepage title and primary navigation; hosted fetch confirmed the new `llms-full.txt` format | Passing |
4040
| curl.md/agent documentation | `site/public/llms.txt`, `site/public/llms-full.txt`, `site/public/docs/*.md`, plugin/dev subtrees, sitemap and robots entries | Implemented |
4141
| Release workflow | `.github/workflows/release.yml`, manual dispatch run `25546125531` on commit `8c24063`; release gate, dependency audits, static scan, package build, wheel install, docs build, archive verification, checksums, attestations, and artifact upload passed | Passing for non-tag validation; tag-only draft release creation still requires a real tag run before release |
4242
| Workflow supply-chain hardening | All workflow actions are pinned to immutable commit SHAs; `.github/dependabot.yml` covers GitHub Actions, Python, and docs npm; automated Claude review prompt treats PR text as untrusted | Covered for current workflow action pinning |

RELEASE_READINESS_REVIEW.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -228,19 +228,19 @@ not factually provable from local tests alone.
228228
confirmed existing `helper :: import "helper"` fails with exit code 6 for
229229
codegen modes and does not write target code, while semantic mode still
230230
validates resolver loading.
231-
- local `./run_all_tests.sh` passed after variadic fail-closed behavior,
232-
calculator output cleanup, and docs updates: parser/tokenizer 501 passed;
233-
semantic 336 passed; compiler/CLI/backend 332 passed; Zig examples 38/38;
234-
C examples 38/38;
231+
- local `./run_all_tests.sh` passed after selected-import JSON diagnostics
232+
hardening and docs updates: parser/tokenizer 501 passed; semantic 336
233+
passed; compiler/CLI/backend 333 passed; Zig examples 38/38; C examples
234+
38/38;
235235
backend parity 24/24; debug artifacts 76/76; release artifacts 76/76;
236236
error-stage checks 61/61; docs style ok; secrets check ok; total pytest
237-
1249 passed; summary 12/12.
238-
- hosted CI run `25548557403` passed on commit `8bad554` after variadic
239-
parameters were made to fail closed before codegen, including docs, pytest,
240-
Python dependency audit, Bandit static security scanning, error-stage
241-
verification, Zig/C example verification, backend parity, debug artifacts,
242-
release artifacts, package build, and clean wheel-install verification.
243-
- hosted Deploy Docs run `25548557432` passed on commit `8bad554`.
237+
1250 passed; summary 12/12.
238+
- hosted CI run `25549416603` passed on commit `b0c9980` after selected-import
239+
JSON diagnostics were hardened, including docs, pytest, Python dependency
240+
audit, Bandit static security scanning, error-stage verification, Zig/C
241+
example verification, backend parity, debug artifacts, release artifacts,
242+
package build, and clean wheel-install verification.
243+
- hosted Deploy Docs run `25549416591` passed on commit `b0c9980`.
244244
- local `npm run check` in `site/` passed after updating the public status and
245245
language docs for the generic struct behavior.
246246
- hosted CI run `25541793153` passed on commit `5baa7f7` after fallthrough

0 commit comments

Comments
 (0)