ISEDRAF 0.1.0 — General Availability - #20
Merged
Merged
Conversation
The public tree is replaced by the sanitized release export of the engineering repository at 2bc2d7f plus A-017 (D-110 publication model): the 0.1.0 product - the unprivileged `isedraf audit` path, the user-mode evidence store, reports rendered from committed evidence - the release metadata (GA date 2026-09-28), and the OpenSSF Baseline Level 2 work: SECURITY.md with response targets and coordinated disclosure, MAINTAINERS.md, a GA CONTRIBUTING.md with the DCO, docs/DEPENDENCIES.md, the DCO pull-request check, a repository-security gate, a release-export gate, Scorecard result publishing, and the GA push policy (git-hooks/pre-push: the engineering tree is never pushed, main never directly; it replaces the prototype's unconditional refusal). The export's own gates passed on it (privacy, documentation truth, freeze). No tag or release is created by this change; publication is the maintainer's. Assisted-by: Claude (implementation agent, Claude Code) Signed-off-by: Antonios Voulvoulis <contact@itcms.gr>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
The first public run of the harness since 2026-09-20 (this PR) reported two harness faults that the engineering repository cannot see: - EXP-1 committed its mutation with a bare `git commit`; the runner has no git identity. It now passes one explicitly, as the harness's own sandbox commits do. - "D-107 MASTER_INDEX status survives..." mutates files the public tree does not contain. It now declares its subject with next_requires, like its neighbours, so this checkout records a declared skip. Reproduced under runner conditions (public tree, no git identity): 363 detected, 9 declared skips, 0 unexpected. Engineering repository: 372/372. Assisted-by: Claude (implementation agent, Claude Code) Signed-off-by: Antonios Voulvoulis <contact@itcms.gr>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
ISEDRAF 0.1.0 — General Availability (sanitized release export)
The public tree is replaced by the sanitized release export of the engineering
repository at 2bc2d7f plus A-017 (D-110 publication model): the 0.1.0 product - the
unprivileged
isedraf auditpath, the user-mode evidence store, reportsrendered from committed evidence - the release metadata (GA date 2026-09-28),
and the OpenSSF Baseline Level 2 work: SECURITY.md with response targets and
coordinated disclosure, MAINTAINERS.md, a GA CONTRIBUTING.md with the DCO,
docs/DEPENDENCIES.md, the DCO pull-request check, a repository-security gate,
a release-export gate, Scorecard result publishing, and the GA push policy
(git-hooks/pre-push: the engineering tree is never pushed, main never
directly; it replaces the prototype's unconditional refusal).
The export's own gates passed on it (privacy, documentation truth, freeze).
No tag or release is created by this change; publication is the maintainer's.
Assisted-by: Claude (implementation agent, Claude Code)