rcourtman 71ec1d875b Let stable promotion carry test-only and installer pin changes ...

Every stable cut re-pins CANONICAL_DEFAULT_PULSE_VERSION in
scripts/install-docker.sh from the RC to the stable version, and the
stable install-metadata test requires it. The drift allowlist omitted
that file, so no release candidate could be promoted without
hotfix_exception. The rule arrived on 2026-09-01, after v6.4.1, so no
stable promotion has run under it yet. v6.4.5 would be the first to fail.

The installer is shipped content, so the resolver accepts it only when
its diff against the candidate changes nothing but that pin line. Any
other installer change still counts as drift.

Go _test.go files are never compiled into a shipped artifact. A stable
cut can need test-only corrections, as v6.4.5 needs for the RC-derived
install-metadata contract, so they no longer count as unsoaked content.

Tests cover the allowed shapes, the refused near misses, and the pin
check against a real git diff.

2026-09-23 19:41:32 +01:00

..

internal

fix(release): give the rehearsal backend an explicit package timeout

2026-09-19 21:24:38 +01:00

action_consumer_manifests.json

build(ci): refresh reviewed GitHub Actions pins

2026-09-20 08:16:44 +01:00

agent_preflight_test.py

Update release control to use main

2026-07-05 15:20:37 +01:00

agent_preflight.py

…

ai_runtime_docs_policy_test.py

Fix local subscription CLI service setup

2026-08-23 09:28:44 +01:00

browser_verification_guard_test.py

Simplify and harden verified Patrol receipts

2026-08-15 10:25:04 +01:00

browser_verification_guard.py

fix(governance): exempt pure prettier reformats from browser proof

2026-08-06 21:53:44 +01:00

canonical_completion_guard_test.py

Scope the dedicated proof to quick security setup

2026-09-15 02:28:17 +01:00

canonical_completion_guard.py

fix(governance): recognize proven frontend-only reformats

2026-09-05 21:21:04 +01:00

canonical_completion_history_test.py

fix(governance): validate reviewed split completions exactly

2026-09-07 20:13:34 +01:00

canonical_completion_history.json

chore(governance): register the #2148 LXC memory completion pair

2026-09-22 08:46:39 +01:00

canonical_completion_history.py

fix(governance): restore safe.directory for completion-history clone

2026-09-19 21:38:48 +01:00

capture_release_note_visuals.mjs

feat(release): add visual changelog comparisons

2026-08-28 11:29:44 +01:00

check_github_release_immutability_test.py

Gate release publication on immutable setting

2026-08-29 22:41:04 +01:00

commercial_cancellation_reactivation_proof.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

commercial_cancellation_reactivation_rehearsal.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

contract_audit_test.py

Make contract audit tests checkout-independent

2026-08-31 12:26:33 +01:00

contract_audit.py

Restore trustworthy governance signals

2026-08-31 00:55:44 +01:00

control_plane_audit_test.py

fix(release): map 6.4.5 reliability checkpoints to release line

2026-09-11 00:23:11 +01:00

control_plane_audit.py

…

control_plane.py

fix(release): bind forward 6.4.4 checkpoint to release train

2026-09-06 16:48:17 +01:00

customer_promotion_lease.sh

Keep convergence evidence off sealed releases

2026-09-01 11:38:55 +01:00

dev_runtime_governance_test.py

Accept qualified recovered release activation

2026-08-28 03:51:26 +01:00

documentation_currentness_test.py

Document shipped availability probe coverage

2026-08-29 18:21:50 +01:00

format_staged_frontend_test.py

fix(tooling): stop worktree commits from skipping prettier

2026-08-06 21:53:44 +01:00

format_staged_frontend.py

fix(tooling): stop worktree commits from skipping prettier

2026-08-06 21:53:44 +01:00

format_staged_go_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

format_staged_go.py

fix(release-control): scrub inherited git env in hook scratch-repo helpers

2026-07-17 15:52:11 +01:00

generate_mobile_compatibility_test.py

Enforce Pulse Mobile compatibility from the core contract

2026-07-22 13:41:09 +01:00

generate_mobile_compatibility.py

Enforce Pulse Mobile compatibility from the core contract

2026-07-22 13:41:09 +01:00

generate_platform_support_backend_module.py

Fix Unraid agent host profile detection

2026-05-08 11:05:14 +01:00

generate_platform_support_frontend_module.py

Correct VMware platform readiness classification

2026-05-22 09:13:29 +01:00

governance_stage_guard_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

governance_stage_guard.py

fix(release-control): scrub inherited git env in hook scratch-repo helpers

2026-07-17 15:52:11 +01:00

helm_pages_retry_test.py

fix(delivery): verify public Helm package against qualified bytes

2026-09-05 22:24:18 +01:00

helm_publish_version_test.py

fix(release): bind Helm application version to chart release

2026-09-05 21:13:23 +01:00

live_runtime_proof_test.py

chore: require live proof for hardware fix claims

2026-08-04 23:57:44 +01:00

live_runtime_proof.py

chore: require live proof for hardware fix claims

2026-08-04 23:57:44 +01:00

mobile_compatibility_test.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

mobile_compatibility.py

Enforce Pulse Mobile compatibility from the core contract

2026-07-22 13:41:09 +01:00

mobile_relay_auth_approvals_proof.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

mobile_release_gate_test.py

Add mobile impact gate to release dispatch

2026-07-07 18:21:20 +01:00

mobile_release_gate.py

Add mobile impact gate to release dispatch

2026-07-07 18:21:20 +01:00

paid_feature_claims_proof.py

Add paid feature claim proof bundle

2026-04-29 14:18:43 +01:00

proof_entrypoints_test.py

Add paid feature claim proof bundle

2026-04-29 14:18:43 +01:00

pulse_intelligence_gate_test.py

chore: seal Pulse Intelligence release gate

2026-07-13 01:14:19 +01:00

pulse_intelligence_gate.py

chore: seal Pulse Intelligence release gate

2026-07-13 01:14:19 +01:00

readiness_assertion_guard_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

readiness_assertion_guard.py

Converge UI primitives and readiness guards

2026-06-13 16:31:52 +01:00

reconcile_release_convergence_test.py

fix(release): bound transient convergence API read retries

2026-09-08 20:02:08 +01:00

reconcile_release_convergence.py

fix(release): bound transient convergence API read retries

2026-09-08 20:02:08 +01:00

record_rc_to_ga_blocked.py

Prepare v6.0.0-rc.4 release packet

2026-05-05 15:32:32 +01:00

record_rc_to_ga_rehearsal.py

Govern RC-to-GA rehearsal record capture

2026-04-11 14:08:57 +01:00

registry_audit_test.py

Restore scoped governance audit signal

2026-08-30 17:01:44 +01:00

registry_audit.py

Restore scoped governance audit signal

2026-08-30 17:01:44 +01:00

rehearsal_source_test.py

fix(ci): select governed source for scheduled release rehearsals

2026-09-08 08:30:38 +01:00

relay_registration_reconnect_drain_proof.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

release_candidate_manifest_test.py

Enforce exact release visual assets

2026-08-29 02:59:47 +01:00

release_continuity_test.py

docs(release): clarify combined continuity incident recovery

2026-09-05 20:12:48 +01:00

release_continuity.py

Check release inventory independently of Git refs

2026-09-04 15:01:51 +01:00

release_note_visuals_test.py

Keep server rollback guidance executable

2026-08-29 10:15:45 +01:00

release_note_visuals.py

fix(release): require visual selection evidence

2026-08-28 20:11:04 +01:00

release_promotion_policy_support_test.py

fix(ci): qualify grouped release action pin consumers

2026-09-10 00:35:47 +01:00

release_promotion_policy_support.py

Govern RC-to-GA rehearsal record capture

2026-04-11 14:08:57 +01:00

release_promotion_policy_test.py

docs(release): record the private Pro pair preflight contract

2026-09-20 14:32:46 +01:00

release_snapshot_test.py

Publish reviewed release snapshots independently of branch tips

2026-09-07 19:30:27 +01:00

release_snapshot.py

Publish reviewed release snapshots independently of branch tips

2026-09-07 19:30:27 +01:00

render_release_body_test.py

fix(release): limit asset validation readiness claims

2026-09-05 17:30:49 +01:00

render_release_body.py

Keep server rollback guidance executable

2026-08-29 10:15:45 +01:00

repo_file_io_test.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

repo_file_io.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

resolve_release_promotion_test.py

Let stable promotion carry test-only and installer pin changes

2026-09-23 19:41:32 +01:00

resolve_release_promotion.py

Let stable promotion carry test-only and installer pin changes

2026-09-23 19:41:32 +01:00

secure_runtime_attestation_test.py

Qualify helper-backed agent update recovery

2026-08-30 21:54:46 +01:00

secure_runtime_attestation_v6_test.py

fix(release-control): qualify release-line RCs against their own branch

2026-09-22 04:28:39 +01:00

secure_runtime_attestation_v6.py

fix(release-control): qualify release-line RCs against their own branch

2026-09-22 04:28:39 +01:00

secure_runtime_attestation_v7_test.py

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

secure_runtime_attestation_v7.py

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

secure_runtime_attestation.py

Qualify helper-backed agent update recovery

2026-08-30 21:54:46 +01:00

secure_runtime_rootful_attestation_v1_test.py

Fix rootful qualification readiness

2026-09-02 02:43:30 +01:00

secure_runtime_rootful_attestation_v1.py

Fix isolated rootful attester loading

2026-09-02 01:53:48 +01:00

secure_runtime_rootful_source_manifest_v1.json

Merge captured Pulse upstream

2026-09-02 03:48:55 +01:00

secure_runtime_rootless_attestation_v1_test.py

Validate each rootless socket identity

2026-09-01 21:26:49 +01:00

secure_runtime_rootless_attestation_v1.py

Validate each rootless socket identity

2026-09-01 21:26:49 +01:00

secure_runtime_rootless_source_manifest_v1.json

Add rootless runtime qualification harness

2026-09-01 12:29:44 +01:00

secure_runtime_source_manifest_v4.json

Integrate typed helper container summaries

2026-08-30 21:29:11 +01:00

secure_runtime_source_manifest_v5.json

Qualify helper-backed agent update recovery

2026-08-30 21:54:46 +01:00

secure_runtime_source_manifest_v6.json

Wire secure runtime RC qualification

2026-08-31 01:50:48 +01:00

secure_runtime_source_manifest_v7.json

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

ssh_host_key_policy_test.py

fix(security): verify SSH hosts during proxy cleanup

2026-08-08 05:18:55 +01:00

staged_commit_shape_guard_test.py

Add contract-neutral bypass to staged shape guard

2026-04-17 12:24:01 +01:00

staged_commit_shape_guard.py

Add contract-neutral bypass to staged shape guard

2026-04-17 12:24:01 +01:00

status_audit_test.py

Require demand_evidence on candidate_lane registration

2026-08-24 15:59:32 +01:00

status_audit.py

Require demand_evidence on candidate_lane registration

2026-08-24 15:59:32 +01:00

status_lookup_test.py

Add governed action audit preflight

2026-04-25 22:35:19 +01:00

status_lookup.py

…

subsystem_contracts_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

subsystem_contracts.py

fix(release-control): scrub inherited git env in hook scratch-repo helpers

2026-07-17 15:52:11 +01:00

subsystem_lookup_test.py

test(governance): synchronize lifecycle lookup proof fixture

2026-09-14 08:54:07 +01:00

subsystem_lookup.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

validate_artifact_release_line_test.py

Parallelize inert release artifact staging

2026-08-21 18:08:22 +01:00

validate_artifact_release_line.py

Parallelize inert release artifact staging

2026-08-21 18:08:22 +01:00

verify_github_release_integrity_test.py

fix(release): reject ambiguous activation asset inventories

2026-09-05 15:43:23 +01:00

verify_release_container_images_test.py

Pin container provenance workflow revision

2026-09-01 09:56:14 +01:00

verify_release_helm_chart_test.py

Recover Helm Pages from attested OCI charts

2026-09-04 01:04:30 +01:00

verify_stable_container_aliases_test.py

Continuously verify stable container aliases

2026-08-30 13:55:41 +01:00

work_claim_test.py

…

work_claim.py

…

worktree_base.py

fix(governance): restore advertised worktree helpers

2026-08-08 04:08:35 +01:00

worktree_claim.py

fix(governance): restore advertised worktree helpers

2026-08-08 04:08:35 +01:00

worktree_finish.py

fix(governance): restore advertised worktree helpers

2026-08-08 04:08:35 +01:00