You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: COMPLETION_AUDIT.md
+13-13Lines changed: 13 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,21 +22,21 @@ Deliverables implied by the active objective:
22
22
| Requirement | Evidence | Status |
23
23
| --- | --- | --- |
24
24
| Vulnerability/problem review |`RELEASE_READINESS_REVIEW.md`, `SECURITY.md`, `MISSING_FEATURES.md`, `TODO.md`| Covered for current known risks |
25
-
| Security dependency audit | Hosted CI run `25547403153`; manual release workflow `25546125531`; local `uvx --from pip-audit==2.10.0 pip-audit --strict`; local site runtime audit | Passing for known advisories; CI/release tool version is pinned |
26
-
| Python static security scan | Hosted CI run `25547403153`; local `uvx --from bandit==1.9.4 bandit -r a7 scripts main.py -q --skip B404,B603`; CI/release workflow step | Passing after resolving the release-manifest partial `git` path and marking the diagnostic-code false positive; CI/release tool version is pinned |
27
-
| Secret scanning | Hosted CI run `25547403153`; `scripts/check_no_secrets.py`| Passing pattern- and filename-based scan |
28
-
| Python test suite | Hosted CI run `25547403153`; local `./run_all_tests.sh` after file-backed import fail-closed behavior | Passing: 1247 tests |
29
-
| Error-stage behavior | Hosted CI run `25547403153`; `scripts/verify_error_stages.py`; refactored shared logic in `scripts/error_stage_common.py`| Passing |
30
-
| Zig example E2E | Hosted CI run `25547403153`; local `scripts/verify_examples_e2e.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
31
-
| C example E2E | Hosted CI run `25547403153`; local `scripts/verify_examples_e2e_c.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
32
-
| Zig/C backend parity | Hosted CI run `25547403153`; local expanded `scripts/verify_backend_parity.py`; manual report inspection; local full gate | Passing selected suite: 24/24 locally, including fallthrough, nested fallthrough, capture patterns, generic functions, type-set constraints, generic struct instances, explicit enum discriminants, stdlib math, and operator edge cases |
33
-
| Debug artifacts | Hosted CI run `25547403153`; local `./run_all_tests.sh` after file-backed import fail-closed behavior | Passing: 76/76 |
34
-
| Release artifacts | Hosted CI run `25547403153`; manual release workflow `25546125531`; local `./run_all_tests.sh` after file-backed import fail-closed behavior | Passing: 76/76 |
35
-
| Python package build and install | Hosted CI run `25547403153`; manual release workflow `25546125531`; local clean `rm -rf dist && uv build`; `scripts/verify_wheel_install.py`; focused release tooling tests | Passing; built wheel installs as package `a7` and exposes `a7` CLI |
25
+
| Security dependency audit | Hosted CI run `25548557403`; manual release workflow `25546125531`; local `uvx --from pip-audit==2.10.0 pip-audit --strict`; local site runtime audit | Passing for known advisories; CI/release tool version is pinned |
26
+
| Python static security scan | Hosted CI run `25548557403`; local `uvx --from bandit==1.9.4 bandit -r a7 scripts main.py -q --skip B404,B603`; CI/release workflow step | Passing after resolving the release-manifest partial `git` path and marking the diagnostic-code false positive; CI/release tool version is pinned |
27
+
| Secret scanning | Hosted CI run `25548557403`; `scripts/check_no_secrets.py`| Passing pattern- and filename-based scan |
28
+
| Python test suite | Hosted CI run `25548557403`; local `./run_all_tests.sh` after variadic fail-closed behavior | Passing: 1249 tests |
29
+
| Error-stage behavior | Hosted CI run `25548557403`; `scripts/verify_error_stages.py`; refactored shared logic in `scripts/error_stage_common.py`| Passing |
30
+
| Zig example E2E | Hosted CI run `25548557403`; local `scripts/verify_examples_e2e.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
31
+
| C example E2E | Hosted CI run `25548557403`; local `scripts/verify_examples_e2e_c.py`; shared verifier logic in `scripts/verify_examples_common.py`; manual golden-output inspection | Passing: 38/38 |
32
+
| Zig/C backend parity | Hosted CI run `25548557403`; local expanded `scripts/verify_backend_parity.py`; manual report inspection; local full gate | Passing selected suite: 24/24 locally, including fallthrough, nested fallthrough, capture patterns, generic functions, type-set constraints, generic struct instances, explicit enum discriminants, stdlib math, and operator edge cases |
33
+
| Debug artifacts | Hosted CI run `25548557403`; local `./run_all_tests.sh` after variadic fail-closed behavior | Passing: 76/76 |
34
+
| Release artifacts | Hosted CI run `25548557403`; manual release workflow `25546125531`; local `./run_all_tests.sh` after variadic fail-closed behavior | Passing: 76/76 |
35
+
| Python package build and install | Hosted CI run `25548557403`; manual release workflow `25546125531`; local clean `rm -rf dist && uv build`; `scripts/verify_wheel_install.py`; focused release tooling tests | Passing; built wheel installs as package `a7` and exposes `a7` CLI |
36
36
| Local package hygiene |`README.md`, `RELEASE.md`, `site/public/docs/release.md` now require `rm -rf dist` before `uv build`| Covered |
37
37
| Release checksums, provenance, and archive contents |`scripts/generate_release_manifest.py`; `scripts/verify_release_manifest.py`; `scripts/verify_archive_contents.py`; `test/test_release_tooling.py`; release workflow validates required paths, required archive members, re-checks hashes before upload, and emits GitHub artifact attestations for release assets; manual release dispatch `25546125531`| Covered for workflow-dispatch release path; manifest verifier now rejects traversal and unsafe absolute paths; tag-only draft release creation still requires a real tag run before release |
38
-
| Docs style/build | Hosted CI run `25547403153`; local `scripts/check_docs_style.py`; local `cd site && npm run build`| Passing |
39
-
| Docs deploy | Hosted Deploy Docs run `25547403136`; hosted browser-harness check for `/a7-py/` confirmed the A7-first homepage title and primary navigation; hosted fetch confirmed the new `llms-full.txt` format | Passing |
38
+
| Docs style/build | Hosted CI run `25548557403`; local `scripts/check_docs_style.py`; local `cd site && npm run build`| Passing |
39
+
| Docs deploy | Hosted Deploy Docs run `25548557432`; hosted browser-harness check for `/a7-py/` confirmed the A7-first homepage title and primary navigation; hosted fetch confirmed the new `llms-full.txt` format | Passing |
| Release workflow |`.github/workflows/release.yml`, manual dispatch run `25546125531` on commit `8c24063`; release gate, dependency audits, static scan, package build, wheel install, docs build, archive verification, checksums, attestations, and artifact upload passed | Passing for non-tag validation; tag-only draft release creation still requires a real tag run before release |
42
42
| Workflow supply-chain hardening | All workflow actions are pinned to immutable commit SHAs; `.github/dependabot.yml` covers GitHub Actions, Python, and docs npm; automated Claude review prompt treats PR text as untrusted | Covered for current workflow action pinning |
0 commit comments