mirror of https://github.com/openglow-org/forgefirm.git synced 2026-09-27 08:41:13 -07:00

Files

T

ScottW514 1179d5e7c1 Release acceptance gate: release.sh refuses to sign without a matching artifact

scripts/acceptance-gate.py recomputes every catalog test's domain fingerprint
from /etc/forgefirm-manifest.json inside the release rootfs and requires the
committed releases/v<version>/acceptance.json to carry a matching PASS
(inherited results not core and newer than the invalidate epoch; the artifact
self-hashed; the catalog identical to the tree). release.sh runs it after the
build and stages the artifact as a release asset; FORGEFIRM_ACCEPTANCE_SKIP=1
bypasses loudly. scripts/manifest-from-tree.py builds the same manifest from
the recipe pins with git for CI and the workstation; forgetest-ci.yml runs the
unit tests and enforces the coverage lint (every manifest path covered by some
test). docs/ACCEPTANCE.md is the contract; the coverage currency rule and the
status live in BRINGUP.

2026-08-15 15:57:12 -04:00

README.md

Release acceptance gate: release.sh refuses to sign without a matching artifact

2026-08-15 15:57:12 -04:00

README.md

Release acceptance artifacts

One directory per release, v<version>/, holding the acceptance.json and acceptance.md that forgetest exported on the bench for that release. scripts/release.sh refuses to sign a release whose artifact does not authorize the built rootfs; see docs/ACCEPTANCE.md.