a-release-is-proven-end-to-end — Whether a commit may be released, and whether its release arrived, is proved by one read and one case

release.readiness answers before a tag from the functions the workflow runs; site-deploy never goes back a commit; one case walks a fresh clone to published evidence; the first record commit after I2717 lands is observed with a green evidence job.

BLOKOVÁNO 0 of 3 issues done

připraveno: 0
blokováno: 3
aktivní: 0
verify: 0
hotovo: 0
zrušeno: 0

Problém

The release path is well guarded once a tag is pushed (plan, verdict, build, verify, publish), but before the tag nothing answers whether it would pass, the site guard compares releases but not commits, and the v0.29.0 record commit's evidence job failed on 2026-10-18 with the planned-empty report I2717 owns. Sources: chatgpt-majordomus:c291#2, chatgpt-majordomus:c111#6, chatgpt-majordomus:c238#2, chatgpt-majordomus:c258#2, chatgpt-majordomus:c283#2, chatgpt-majordomus:c297#2, chatgpt-majordomus:c295#3.

Výsledek

Aktuální stav

Verified on master 707a04c7ce8: .ai/repo/ci/release.yaml phases; scripts/ci/release-verdict; distribution.status chain; scripts/site-deploy refuses an older release and a HEAD off origin/master only. Prerelease isolation (I2829) and the release changelog (I2826) are on branches. I2717 (READY, p0) owns the record commit's planned-empty evidence failure.

Cílový stav

A release is decided by evidence read before and confirmed after, and every surface reads the same decision.

Rozsah

apps/majordomus-cli/src/release
apps/majordomus-cli/src/capability/builtin/release.rs
scripts/site-deploy
.github/workflows/validate.yml
docs/RELEASE.md

Mimo rozsah

A second release engine
Automatic GO for a release
Browser compute on the release path

Kritéria přijetí

release.readiness and the release workflow share their implementation
A publication of an older commit than the served one is refused
The fresh-clone case runs on the release candidate

Validace

majordomus plan validate

Rizika

The alpha top (0.30.0) and I2829 touch scripts/site-deploy and release.yml; I3201 and I3208 start after it lands

Úkoly

Každý z nich je prováděcí kontrakt s vlastními kritérii přijetí, validačním příkazem a požadovanými důkazy. Sloupec wave je vrstva grafu závislostí, v níž úkol leží.

issue	status	vlna	závisí na	název
I3201	BLOKOVÁNO	0	—	A publication never replaces the site with a build of an older commit than the one gh-pages serves
I3208	BLOKOVÁNO	0	—	Whether a commit may be released is one read that names each condition and the evidence that settles it
I3213	BLOKOVÁNO	5	I2812, I2717	One case walks a fresh clone from init to published evidence on the release candidate

Graf

a-release-is-proven-end-to-end dependency graphz .ai/repo/project

flowchart LR
    I3201["I3201<br/>A publication never replaces the site with a build of an older commit than the one gh-pages serves"]:::blocked
    I3208["I3208<br/>Whether a commit may be released is one read that names each condition and the evidence that settles it"]:::blocked
    I3213["I3213<br/>One case walks a fresh clone from init to published evidence on the release candidate"]:::blocked
    classDef done stroke:#16a34a,fill:#dcfce7,color:#14532d,stroke-width:2px
    classDef active stroke:#2563eb,fill:#eff6ff,color:#1e3a8a,stroke-width:2px
    classDef verify stroke:#7c3aed,fill:#f5f3ff,color:#4c1d95,stroke-width:2px
    classDef ready stroke:#0891b2,fill:#ecfeff,color:#164e63,stroke-width:2px
    classDef planned stroke:#0891b2,fill:#ecfeff,color:#164e63,stroke-width:2px
    classDef blocked stroke:#b45309,fill:#fffbeb,color:#78350f,stroke-width:2px
    classDef cancelled stroke:#6b7280,fill:#f9fafb,color:#374151,stroke-width:2px
    classDef superseded stroke:#6b7280,fill:#f9fafb,color:#374151,stroke-width:2px

Odkazováno z tohoto diagramu (3)

Canonical record: .ai/repo/project/milestones/a-release-is-proven-end-to-end.yaml. Read it back with majordomus plan show a-release-is-proven-end-to-end.