From 92b4f60d938e2ae31409a928332ef1126d188bdf Mon Sep 17 00:00:00 2001 From: Hanns Peter Date: Mon, 13 Jul 2026 12:12:49 -0400 Subject: [PATCH] docs: record 5.5.0 publication evidence --- .godpowers/CHECKPOINT.mdx | 30 ++++---- .godpowers/PROGRESS.mdx | 10 +-- .godpowers/SYNC-LOG.mdx | 27 +++---- .godpowers/deploy/STATE.mdx | 25 ++++--- .godpowers/docs/REPO-DOC-SYNC.mdx | 6 ++ .godpowers/launch/STATE.mdx | 23 +++--- .godpowers/roadmap/ROADMAP.mdx | 2 +- .godpowers/state.json | 117 ++++++++++++++++-------------- AGENTS.md | 2 +- ARCHITECTURE.md | 2 +- RELEASE.md | 16 +++- USERS.md | 2 +- agents/context.md | 1 + agents/deploy.md | 4 +- agents/quality.md | 13 ---- docs/ROADMAP.md | 2 +- 16 files changed, 148 insertions(+), 134 deletions(-) diff --git a/.godpowers/CHECKPOINT.mdx b/.godpowers/CHECKPOINT.mdx index a218bc2..475cd6f 100644 --- a/.godpowers/CHECKPOINT.mdx +++ b/.godpowers/CHECKPOINT.mdx @@ -1,5 +1,5 @@ --- -id: CHECKPOINT-2026-07-13T08-10-18-749Z +id: CHECKPOINT-2026-07-13T16-12-13-909Z project: godpowers mode: B mode-d-suite: false @@ -12,8 +12,8 @@ progress-total: 19 current-step: 19 last-action: tier-0.sync done last-actor: unknown -last-update: 2026-07-13T08:10:18.749Z -facts-hash: sha256:00e8d31dc4697e7b30a80a9de2aea18ead5ae7d80973b7d0c7a624f019655e09 +last-update: 2026-07-13T16:12:13.909Z +facts-hash: sha256:cfb4e92586b0447a0002b832396855e9c1b38689ec6228558cebbbcf6b3d4995 --- # Checkpoint @@ -28,7 +28,7 @@ facts-hash: sha256:00e8d31dc4697e7b30a80a9de2aea18ead5ae7d80973b7d0c7a624f019655 - Lifecycle phase: **steady-state-active** - Progress: **100%** (19 of 19 steps complete; current step 19 of 19) - Current tier: **tier-3** / **launch** -- Last action: `tier-0.sync done` by unknown at 2026-07-13T08:10:18.749Z +- Last action: `tier-0.sync done` by unknown at 2026-07-13T16:12:13.909Z ## What happened recently @@ -37,11 +37,11 @@ _(no recent actions recorded yet)_ ## What happens next - /god-status -- Release 5.4.0 is complete and steady-state work may resume. +- Release 5.5.0 is complete and steady-state work may resume. ## Next suggested command -`/god-status` - Release 5.4.0 is complete and steady-state work may resume. +`/god-status` - Release 5.5.0 is complete and steady-state work may resume. ## Last actions (most recent first, max 20) @@ -49,12 +49,16 @@ _(no actions recorded yet)_ ## Held facts (top 10 critical decisions) -- Godpowers 5.4.0 is published on GitHub and npm, with registry integrity and isolated install verification passing. -- Godpowers 5.3.1 is published on GitHub and npm from merged main commit 40b442aedf35b39fc6c3ea1b37c4f063578dd194. -- Godpowers 5.3.0 is published on GitHub and npm from merged main commit 9c6efed128b22df6458273c9428d0ceb0a0b0312. -- Registry integrity matches both GitHub Release tarballs and published root plus MCP executable verification passes. -- The product score remains 97 out of 100 because production-user and incident rollback evidence is unavailable. -- All 19 tracked lifecycle steps are complete or not required. +- Godpowers 5.5.0 is published on GitHub and npm with provenance from merged main commit 84fbd00066d2bd833929d6d0b6b769de45275313. +- Pull request 70 and merged-main CI passed every required check. +- GitHub Release v5.5.0 contains root and MCP tarballs plus SHA256SUMS. +- Both npm registry integrity values match the locally packed release tarballs. +- Isolated Quick Proof, project inspection, dashboard, next route, Claude, Codex, and MCP verification pass. +- The release gate passes official Agent Skills and Pillars validation plus 94.64 percent line coverage. +- Product routing supports six forms before four-axis domain composition. +- OWASP 2025 hardening and the hash-bound prepublication authority pass with zero Critical findings. +- Arc-Ready, Godplans 1.1, and Godaudits 2.x interoperability are implemented and tested. +- Production-user and incident rollback evidence remain unavailable and are not implied by release verification. ## If you are a new session @@ -72,7 +76,7 @@ _(no actions recorded yet)_ ## Provenance -- Generated: 2026-07-13T08:10:18.749Z +- Generated: 2026-07-13T16:12:13.909Z - Schema version: 1.0 - Authoritative state: `.godpowers/state.json` - Authoritative history: `.godpowers/runs//events.jsonl` + `.godpowers/log` diff --git a/.godpowers/PROGRESS.mdx b/.godpowers/PROGRESS.mdx index 3d7acea..f967a33 100644 --- a/.godpowers/PROGRESS.mdx +++ b/.godpowers/PROGRESS.mdx @@ -40,7 +40,7 @@ - [DECISION] PRD and ROADMAP were reconstructed from the shipped v2.1.1 codebase with stable requirement ids, and the linkage map was populated via `scripts/reconstruct-self-ledger.js`. Deliverable status lives in `.godpowers/REQUIREMENTS.mdx`: 32 of 33 requirements done, 1 in progress (deliverable-progress, unreleased), 100% requirement-to-code coverage. - + # Godpowers Progress - [DECISION] This file is a generated human-readable view of `.godpowers/state.json`. @@ -61,18 +61,18 @@ | 4 | Orchestration | Tech Debt | done | tech-debt/ASSESSMENT.mdx | 2026-07-13T05:12:51.236Z | | 5 | Orchestration | Greenfield Simulation | done | audit/GREENFIELD-SIMULATION.mdx | 2026-07-13T05:12:51.236Z | | 6 | Orchestration | Greenfieldify | done | audit/GREENFIELDIFY-PLAN.mdx | 2026-07-13T05:45:00.000Z | -| 7 | Orchestration | Sync | done | SYNC-LOG.mdx | 2026-07-13T08:08:49.000Z | +| 7 | Orchestration | Sync | done | SYNC-LOG.mdx | 2026-07-13T16:09:44.000Z | | 8 | Planning | PRD | done | prd/PRD.mdx | 2026-07-13T05:57:20.000Z | | 9 | Planning | Design | not-required | - | 2026-07-13T05:12:51.236Z | | 10 | Planning | Product | not-required | - | 2026-07-13T05:12:51.236Z | | 11 | Planning | Architecture | done | arch/ARCH.mdx | 2026-07-13T05:45:00.000Z | -| 12 | Planning | Roadmap | done | roadmap/ROADMAP.mdx | 2026-07-13T15:56:11.591Z | +| 12 | Planning | Roadmap | done | roadmap/ROADMAP.mdx | 2026-07-13T16:09:44.000Z | | 13 | Planning | Stack | done | stack/DECISION.mdx | 2026-07-13T05:12:51.236Z | | 14 | Building | Repo | done | repo/AUDIT.mdx | 2026-07-13T05:57:20.000Z | | 15 | Building | Build | done | build/STATE.mdx | 2026-07-13T15:59:58.000Z | -| 16 | Shipping | Deploy | done | deploy/STATE.mdx | 2026-07-13T08:08:49.000Z | +| 16 | Shipping | Deploy | done | deploy/STATE.mdx | 2026-07-13T16:09:44.000Z | | 17 | Shipping | Observe | done | observe/STATE.mdx | 2026-07-13T07:59:42.000Z | | 18 | Shipping | Harden | done | harden/FINDINGS.mdx | 2026-07-13T15:59:58.000Z | -| 19 | Shipping | Launch | done | launch/STATE.mdx | 2026-07-13T08:08:49.000Z | +| 19 | Shipping | Launch | done | launch/STATE.mdx | 2026-07-13T16:09:44.000Z | diff --git a/.godpowers/SYNC-LOG.mdx b/.godpowers/SYNC-LOG.mdx index 3d3f7ce..bf6ba65 100644 --- a/.godpowers/SYNC-LOG.mdx +++ b/.godpowers/SYNC-LOG.mdx @@ -1,17 +1,14 @@ # Godpowers Sync Log -- [DECISION] The 5.3.0 source version is aligned across the root package, MCP companion package, lockfile, release notes, changelog, and public source-version documentation. -- [DECISION] Repository surface claims are aligned to 122 slash commands, 40 specialist agents, 13 workflows, 44 recipes, and 98 library modules. -- [DECISION] The default core installer profile is aligned to 15 commands across runtime selection, tests, reference documentation, and contraction evidence. -- [DECISION] Host capability claims require active-session spawn evidence for a full guarantee. -- [DECISION] Quick Proof fixture evidence is separated from explicit read-only current-project inspection. -- [DECISION] Outcome metrics report only event-supported evidence and return no-data results when user outcome evidence is unavailable. -- [DECISION] The self-project truth gate blocks stale version, surface, lifecycle, artifact, requirement, progress, and roadmap provenance claims. -- [DECISION] The complete test suite passed before canonical state reconciliation. -- [DECISION] `npm run release:check` passed after state, checkpoint, feature awareness, Pillars, and repository surface synchronization. -- [DECISION] The final release gate passed aggregate coverage, per-file coverage across all 96 expected non-browser runtime modules, dependency audit, 141 self-project truth checks, public surface, root package, and MCP package checks. -- [DECISION] Independent code and security audits confirm that every repository-controlled 5.3.0 finding is resolved. -- [DECISION] Pull request 60 passed the Node 18, 20, and 22 matrix plus the package gate and was squash-merged as commit `9c6efed128b22df6458273c9428d0ceb0a0b0312`. -- [DECISION] GitHub Release `v5.3.0` contains both package tarballs with recorded SHA-256 digests. -- [DECISION] The provenance workflow published npm `godpowers@5.3.0` and npm `@godpowers/mcp@5.3.0`, and both registry integrity values match the release tarballs. -- [DECISION] Published root installation and the MCP executable pass post-publication verification. +- [DECISION] Version 5.5.0 is aligned across the root package, MCP companion package, lockfile, changelog, release notes, and public version documentation. +- [DECISION] Repository surface claims are aligned to 122 slash commands, 40 specialist agents, 13 workflows, 44 recipes, and 100 library modules. +- [DECISION] The release gate passes official Agent Skills validation, Pillars 1.1 conformance, the full test suite, 94.64 percent line coverage, 79.26 percent branch coverage, per-file coverage across 98 included runtime modules, dependency audit, 141 self-project truth checks, and package verification. +- [DECISION] The hardening authority records 0 unresolved or accepted Critical findings and the hash-bound prepublication gate passes. +- [DECISION] Pull request 70 passed Node 18, 20, and 22 plus the package gate and merged as commit `84fbd00066d2bd833929d6d0b6b769de45275313`. +- [DECISION] Main CI run 29264958862 passed against the merged release commit. +- [DECISION] GitHub Release `v5.5.0` contains both package tarballs and `SHA256SUMS` with recorded SHA-256 digests. +- [DECISION] Provenance workflow 29264981272 published npm `godpowers@5.5.0` and npm `@godpowers/mcp@5.5.0` under the `latest` tag. +- [DECISION] Both npm registry integrity values match the locally packed release tarballs. +- [DECISION] Isolated root installation, Quick Proof, read-only project inspection, dashboard, next route, Claude install, Codex install, and the MCP executable pass post-publication verification. +- [DECISION] The prior `v5.4.0` tag resolves as the rollback reference. +- [DECISION] Production-user evidence remains unavailable and is not implied by release verification. diff --git a/.godpowers/deploy/STATE.mdx b/.godpowers/deploy/STATE.mdx index aedfdc6..1511305 100644 --- a/.godpowers/deploy/STATE.mdx +++ b/.godpowers/deploy/STATE.mdx @@ -1,5 +1,5 @@ - + # Godpowers Deploy State - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-3.deploy`. @@ -9,27 +9,28 @@ - [DECISION] Step: Shipping: Deploy. - [DECISION] Status: `done`. - [DECISION] Artifact: `.godpowers/deploy/STATE.mdx`. -- [DECISION] Updated: 2026-07-13T08:08:49.000Z. -- [DECISION] Notes: Godpowers 5.4.0 and the MCP companion are published with provenance from merged main, and registry integrity matches the GitHub Release assets.. +- [DECISION] Updated: 2026-07-13T16:09:44.000Z. +- [DECISION] Notes: Godpowers 5.5.0 and the MCP companion are published with provenance from merged main, and registry integrity matches the locally packed GitHub Release assets.. ## Verification Commands | Command | Status | Exit code | Ran at | Duration ms | Diagnostics | |---|---|---|---|---|---| -| npm run pack:check | pass | 0 | 2026-07-13T07:59:42.000Z | 700 | Root npm package contents verified: 577 files. | -| npm run pack:mcp:check | pass | 0 | 2026-07-13T07:59:42.000Z | 400 | MCP package contents verified: 8 files. | -| git cat-file -e 'v5.3.1^{commit}' | pass | 0 | 2026-07-13T07:56:59.000Z | 20 | The prior published release tag resolves as the tested rollback reference. | -| gh run view 29234078146 | pass | 0 | 2026-07-13T08:08:49.000Z | - | The identity-bound provenance workflow completed successfully for merged main commit 13c0ce2905b870846c8170673eaed5415e09b235. | -| npm view godpowers@5.4.0 version && npm view @godpowers/mcp@5.4.0 version | pass | 0 | 2026-07-13T08:08:49.000Z | - | Both npm packages resolve to 5.4.0 under the latest tag and match the locally packed integrity values. | -| node scripts/verify-published-install.js godpowers@5.4.0 | pass | 0 | 2026-07-13T08:08:49.000Z | - | An isolated exact-spec install passed Quick Proof, read-only project inspection, dashboard, next route, Claude install, and Codex install verification. | -| npx -y -p @godpowers/mcp@5.4.0 godpowers-mcp --help | pass | 0 | 2026-07-13T08:08:49.000Z | - | The published MCP executable resolved and rendered its command surface. | +| npm run pack:check | pass | 0 | 2026-07-13T16:09:44.000Z | - | Root npm package contents verified: 582 files. | +| npm run pack:mcp:check | pass | 0 | 2026-07-13T16:09:44.000Z | - | MCP package contents verified: 8 files. | +| git cat-file -e v5.4.0^{commit} | pass | 0 | 2026-07-13T16:09:44.000Z | - | The prior v5.4.0 release tag resolves as the rollback reference. | +| gh run view 29264981272 | pass | 0 | 2026-07-13T16:09:44.000Z | - | The identity-bound provenance workflow completed successfully for merged main commit 84fbd00066d2bd833929d6d0b6b769de45275313. | +| gh release view v5.5.0 | pass | 0 | 2026-07-13T16:09:44.000Z | - | The GitHub Release contains root and MCP tarballs plus SHA256SUMS with matching SHA-256 asset digests. | +| npm view godpowers@5.5.0 version && npm view @godpowers/mcp@5.5.0 version | pass | 0 | 2026-07-13T16:09:44.000Z | - | Both npm packages resolve to 5.5.0 under the latest tag and match the locally packed integrity values. | +| node scripts/verify-published-install.js godpowers@5.5.0 | pass | 0 | 2026-07-13T16:09:44.000Z | - | An isolated exact-spec install passed Quick Proof, read-only project inspection, dashboard, next route, Claude install, and Codex install verification. | +| npx -y -p @godpowers/mcp@5.5.0 godpowers-mcp --help | pass | 0 | 2026-07-13T16:09:44.000Z | - | The published MCP executable resolved and rendered its command surface. | ## Evidence Fields | Field | Value | |---|---| -| publication-targets | https://github.com/hannsxpeter/godpowers/releases/tag/v5.4.0, npm godpowers@5.4.0, and npm @godpowers/mcp@5.4.0 | -| rollback-evidence | The v5.3.1 tag resolves locally as the prior release rollback reference. | +| publication-targets | https://github.com/hannsxpeter/godpowers/releases/tag/v5.5.0, npm godpowers@5.5.0, and npm @godpowers/mcp@5.5.0 | +| rollback-evidence | The v5.4.0 tag resolves locally as the prior release rollback reference. | | target-evidence | GitHub Release assets and npm registry packages share exact integrity values; isolated published CLI and MCP executable verification passed. | | verified-target-type | published-npm-release | diff --git a/.godpowers/docs/REPO-DOC-SYNC.mdx b/.godpowers/docs/REPO-DOC-SYNC.mdx index 966145d..3521455 100644 --- a/.godpowers/docs/REPO-DOC-SYNC.mdx +++ b/.godpowers/docs/REPO-DOC-SYNC.mdx @@ -120,3 +120,9 @@ - [DECISION] Refreshed docs/ROADMAP.md for roadmap-version. - [DECISION] Refreshed docs/reference.md for reference-version. - [HYPOTHESIS] god-docs-writer should review CHANGELOG.md, RELEASE.md, SECURITY.md. + +## 2026-07-13T16:11:17.544Z + +- [DECISION] Repo documentation sync status before apply was stale. +- [DECISION] Repo documentation sync status after apply is fresh. +- [DECISION] Refreshed ARCHITECTURE.md for architecture-publication-status. diff --git a/.godpowers/launch/STATE.mdx b/.godpowers/launch/STATE.mdx index 1111675..085549d 100644 --- a/.godpowers/launch/STATE.mdx +++ b/.godpowers/launch/STATE.mdx @@ -1,5 +1,5 @@ - + # Godpowers Launch State - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-3.launch`. @@ -9,19 +9,20 @@ - [DECISION] Step: Shipping: Launch. - [DECISION] Status: `done`. - [DECISION] Artifact: `.godpowers/launch/STATE.mdx`. -- [DECISION] Updated: 2026-07-13T08:08:49.000Z. -- [DECISION] Notes: Version 5.4.0 is published on GitHub and npm, registry integrity matches the release assets, and isolated published-install verification passes.. +- [DECISION] Updated: 2026-07-13T16:09:44.000Z. +- [DECISION] Notes: Version 5.5.0 is published on GitHub and npm, registry integrity matches the release assets, and isolated published-install verification passes.. ## Verification Commands | Command | Status | Exit code | Ran at | Duration ms | Diagnostics | |---|---|---|---|---|---| -| npm test | pass | 0 | 2026-07-13T07:59:42.000Z | 44100 | All test commands passed with 94.65% line, 79.28% branch, and 96.93% function coverage. | -| npm run pack:check | pass | 0 | 2026-07-13T07:59:42.000Z | 700 | Root npm package contents verified: 577 files. | -| npm run pack:mcp:check | pass | 0 | 2026-07-13T07:59:42.000Z | 400 | MCP package contents verified: 8 files. | -| npm run release:check | pass | 0 | 2026-07-13T07:59:42.000Z | 45000 | Aggregate coverage, per-file coverage across 96 expected runtime modules, dependency audit, 141 self-project truth checks, public surface, root package, and MCP package checks passed. | -| node scripts/verify-published-install.js godpowers@5.4.0 | pass | 0 | 2026-07-13T08:08:49.000Z | - | Published root CLI, Quick Proof, read-only project inspection, dashboard, next route, Claude install, and Codex install verification passed from an isolated exact-spec installation. | -| npx -y -p @godpowers/mcp@5.4.0 godpowers-mcp --help | pass | 0 | 2026-07-13T08:08:49.000Z | - | The published MCP executable resolved from npm and rendered its help surface. | +| npm test | pass | 0 | 2026-07-13T15:59:58.000Z | 41300 | All test commands passed in 41.3 seconds. | +| npm run release:check | pass | 0 | 2026-07-13T15:59:58.000Z | 46000 | Official standards, complete tests, 94.64 percent line coverage, 79.26 percent branch coverage, dependency audit, self-project truth, and both package checks passed. | +| gh run view 29264762305 && gh run view 29264958862 | pass | 0 | 2026-07-13T16:09:44.000Z | - | Pull-request CI and merged-main CI both passed for the 5.5.0 release tree. | +| gh run view 29264981272 | pass | 0 | 2026-07-13T16:09:44.000Z | - | The provenance publication workflow passed the release and prepublication gates and published both npm packages. | +| npm view godpowers@5.5.0 version && npm view @godpowers/mcp@5.5.0 version | pass | 0 | 2026-07-13T16:09:44.000Z | - | Both packages are published as 5.5.0 under the latest tag with matching integrity. | +| node scripts/verify-published-install.js godpowers@5.5.0 | pass | 0 | 2026-07-13T16:09:44.000Z | - | Published root CLI, Quick Proof, read-only project inspection, dashboard, next route, Claude install, and Codex install verification passed from an isolated exact-spec installation. | +| npx -y -p @godpowers/mcp@5.5.0 godpowers-mcp --help | pass | 0 | 2026-07-13T16:09:44.000Z | - | The published MCP executable resolved from npm and rendered its help surface. | ## Evidence Fields @@ -29,7 +30,7 @@ |---|---| | launch-scope | published-release | | production-user-evidence | unavailable; repository records zero production users | -| publication-verification | passed for GitHub Release, npm root, npm MCP, isolated published root install, Claude, Codex, and MCP executable | -| release-version | 5.4.0 | +| publication-verification | passed for pull-request CI, merged-main CI, GitHub Release, npm root, npm MCP, isolated published root install, Claude, Codex, and MCP executable | +| release-version | 5.5.0 | diff --git a/.godpowers/roadmap/ROADMAP.mdx b/.godpowers/roadmap/ROADMAP.mdx index 10b2191..069459a 100644 --- a/.godpowers/roadmap/ROADMAP.mdx +++ b/.godpowers/roadmap/ROADMAP.mdx @@ -1,6 +1,6 @@ # Roadmap -> Reconciled against the Godpowers 5.5.0 release candidate. Increments carry a +> Reconciled against the published Godpowers 5.5.0 release. Increments carry a > stable M-slug id, a Status, and the PRD requirement ids they deliver. Status is > derived from current artifacts, linkage, and executable evidence. diff --git a/.godpowers/state.json b/.godpowers/state.json index 485df8b..c37aed9 100644 --- a/.godpowers/state.json +++ b/.godpowers/state.json @@ -69,9 +69,9 @@ "sync": { "status": "done", "artifact": "SYNC-LOG.mdx", - "artifact-hash": "sha256:c8c11458826463e04d569455dfac45f43ab27b827dee4366caa13de1dc5941fd", - "updated": "2026-07-13T08:08:49.000Z", - "notes": "Version, surface, state, GitHub Release, npm publication, integrity, and isolated published-install evidence are synchronized." + "artifact-hash": "sha256:d69ac700958c5227e656ae970111f642cb8331fb7ef63c98fe54c1cb55ee8a82", + "updated": "2026-07-13T16:09:44.000Z", + "notes": "Version 5.5.0, surface, authoritative state, GitHub Release assets, npm provenance, registry integrity, and isolated published-install evidence are synchronized." } }, "tier-1": { @@ -102,9 +102,9 @@ "roadmap": { "status": "done", "artifact": "roadmap/ROADMAP.mdx", - "artifact-hash": "sha256:1d0287c2779f1f83d5596a971f2b643f12b91799e2e9a4dcfca1b5fa3413b0b4", - "updated": "2026-07-13T15:56:11.591Z", - "notes": "Roadmap provenance is pinned to current source hashes and version 5.5.0." + "artifact-hash": "sha256:d7c4dcebb2d3602d43f45ca6efd4a926b6997788d9757fa3a8fc35d747117f5f", + "updated": "2026-07-13T16:09:44.000Z", + "notes": "Roadmap provenance is pinned to current source hashes and the published version 5.5.0 release." }, "stack": { "status": "done", @@ -170,68 +170,72 @@ "status": "done", "artifact": "deploy/STATE.mdx", "artifact-hash": null, - "updated": "2026-07-13T08:08:49.000Z", - "notes": "Godpowers 5.4.0 and the MCP companion are published with provenance from merged main, and registry integrity matches the GitHub Release assets.", + "updated": "2026-07-13T16:09:44.000Z", + "notes": "Godpowers 5.5.0 and the MCP companion are published with provenance from merged main, and registry integrity matches the locally packed GitHub Release assets.", "verification": { "commands": [ { "command": "npm run pack:check", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T07:59:42.000Z", - "durationMs": 700, - "diagnostics": "Root npm package contents verified: 577 files." + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "Root npm package contents verified: 582 files." }, { "command": "npm run pack:mcp:check", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T07:59:42.000Z", - "durationMs": 400, + "ranAt": "2026-07-13T16:09:44.000Z", "diagnostics": "MCP package contents verified: 8 files." }, { - "command": "git cat-file -e 'v5.3.1^{commit}'", + "command": "git cat-file -e v5.4.0^{commit}", + "status": "pass", + "exitCode": 0, + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "The prior v5.4.0 release tag resolves as the rollback reference." + }, + { + "command": "gh run view 29264981272", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T07:56:59.000Z", - "durationMs": 20, - "diagnostics": "The prior published release tag resolves as the tested rollback reference." + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "The identity-bound provenance workflow completed successfully for merged main commit 84fbd00066d2bd833929d6d0b6b769de45275313." }, { - "command": "gh run view 29234078146", + "command": "gh release view v5.5.0", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T08:08:49.000Z", - "diagnostics": "The identity-bound provenance workflow completed successfully for merged main commit 13c0ce2905b870846c8170673eaed5415e09b235." + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "The GitHub Release contains root and MCP tarballs plus SHA256SUMS with matching SHA-256 asset digests." }, { - "command": "npm view godpowers@5.4.0 version && npm view @godpowers/mcp@5.4.0 version", + "command": "npm view godpowers@5.5.0 version && npm view @godpowers/mcp@5.5.0 version", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T08:08:49.000Z", - "diagnostics": "Both npm packages resolve to 5.4.0 under the latest tag and match the locally packed integrity values." + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "Both npm packages resolve to 5.5.0 under the latest tag and match the locally packed integrity values." }, { - "command": "node scripts/verify-published-install.js godpowers@5.4.0", + "command": "node scripts/verify-published-install.js godpowers@5.5.0", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T08:08:49.000Z", + "ranAt": "2026-07-13T16:09:44.000Z", "diagnostics": "An isolated exact-spec install passed Quick Proof, read-only project inspection, dashboard, next route, Claude install, and Codex install verification." }, { - "command": "npx -y -p @godpowers/mcp@5.4.0 godpowers-mcp --help", + "command": "npx -y -p @godpowers/mcp@5.5.0 godpowers-mcp --help", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T08:08:49.000Z", + "ranAt": "2026-07-13T16:09:44.000Z", "diagnostics": "The published MCP executable resolved and rendered its command surface." } ] }, "verified-target-type": "published-npm-release", "target-evidence": "GitHub Release assets and npm registry packages share exact integrity values; isolated published CLI and MCP executable verification passed.", - "rollback-evidence": "The v5.3.1 tag resolves locally as the prior release rollback reference.", - "publication-targets": "https://github.com/hannsxpeter/godpowers/releases/tag/v5.4.0, npm godpowers@5.4.0, and npm @godpowers/mcp@5.4.0" + "rollback-evidence": "The v5.4.0 tag resolves locally as the prior release rollback reference.", + "publication-targets": "https://github.com/hannsxpeter/godpowers/releases/tag/v5.5.0, npm godpowers@5.5.0, and npm @godpowers/mcp@5.5.0" }, "observe": { "status": "done", @@ -302,61 +306,66 @@ "status": "done", "artifact": "launch/STATE.mdx", "artifact-hash": null, - "updated": "2026-07-13T08:08:49.000Z", - "notes": "Version 5.4.0 is published on GitHub and npm, registry integrity matches the release assets, and isolated published-install verification passes.", + "updated": "2026-07-13T16:09:44.000Z", + "notes": "Version 5.5.0 is published on GitHub and npm, registry integrity matches the release assets, and isolated published-install verification passes.", "verification": { "commands": [ { "command": "npm test", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T07:59:42.000Z", - "durationMs": 44100, - "diagnostics": "All test commands passed with 94.65% line, 79.28% branch, and 96.93% function coverage." + "ranAt": "2026-07-13T15:59:58.000Z", + "durationMs": 41300, + "diagnostics": "All test commands passed in 41.3 seconds." }, { - "command": "npm run pack:check", + "command": "npm run release:check", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T07:59:42.000Z", - "durationMs": 700, - "diagnostics": "Root npm package contents verified: 577 files." + "ranAt": "2026-07-13T15:59:58.000Z", + "durationMs": 46000, + "diagnostics": "Official standards, complete tests, 94.64 percent line coverage, 79.26 percent branch coverage, dependency audit, self-project truth, and both package checks passed." }, { - "command": "npm run pack:mcp:check", + "command": "gh run view 29264762305 && gh run view 29264958862", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T07:59:42.000Z", - "durationMs": 400, - "diagnostics": "MCP package contents verified: 8 files." + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "Pull-request CI and merged-main CI both passed for the 5.5.0 release tree." }, { - "command": "npm run release:check", + "command": "gh run view 29264981272", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T07:59:42.000Z", - "durationMs": 45000, - "diagnostics": "Aggregate coverage, per-file coverage across 96 expected runtime modules, dependency audit, 141 self-project truth checks, public surface, root package, and MCP package checks passed." + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "The provenance publication workflow passed the release and prepublication gates and published both npm packages." + }, + { + "command": "npm view godpowers@5.5.0 version && npm view @godpowers/mcp@5.5.0 version", + "status": "pass", + "exitCode": 0, + "ranAt": "2026-07-13T16:09:44.000Z", + "diagnostics": "Both packages are published as 5.5.0 under the latest tag with matching integrity." }, { - "command": "node scripts/verify-published-install.js godpowers@5.4.0", + "command": "node scripts/verify-published-install.js godpowers@5.5.0", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T08:08:49.000Z", + "ranAt": "2026-07-13T16:09:44.000Z", "diagnostics": "Published root CLI, Quick Proof, read-only project inspection, dashboard, next route, Claude install, and Codex install verification passed from an isolated exact-spec installation." }, { - "command": "npx -y -p @godpowers/mcp@5.4.0 godpowers-mcp --help", + "command": "npx -y -p @godpowers/mcp@5.5.0 godpowers-mcp --help", "status": "pass", "exitCode": 0, - "ranAt": "2026-07-13T08:08:49.000Z", + "ranAt": "2026-07-13T16:09:44.000Z", "diagnostics": "The published MCP executable resolved from npm and rendered its help surface." } ] }, "launch-scope": "published-release", - "release-version": "5.4.0", - "publication-verification": "passed for GitHub Release, npm root, npm MCP, isolated published root install, Claude, Codex, and MCP executable", + "release-version": "5.5.0", + "publication-verification": "passed for pull-request CI, merged-main CI, GitHub Release, npm root, npm MCP, isolated published root install, Claude, Codex, and MCP executable", "production-user-evidence": "unavailable; repository records zero production users" } } @@ -521,7 +530,7 @@ }, "godpowers-features": { "feature-set-version": 1, - "runtime-version": "5.4.0", + "runtime-version": "5.5.0", "known": [ "planning-system-migration", "source-system-sync-back", @@ -542,6 +551,6 @@ "suite-release-dry-run", "deliverable-progress-tracking" ], - "last-awareness-refresh-at": "2026-07-13T05:13:27.945Z" + "last-awareness-refresh-at": "2026-07-13T16:09:44.000Z" } } diff --git a/AGENTS.md b/AGENTS.md index 535a04c..fd94261 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -111,7 +111,7 @@ There is exactly one orchestrator: `god-orchestrator`. It owns writes to ### Active artifacts -- orchestration: `runs/20260713-arc-pillars-1-1-hardening/ORCHESTRATOR-HANDOFF.mdx` +- orchestration: `runs/20260713-product-trust-hardening/ORCHESTRATOR-HANDOFF.mdx` - preflight: `preflight/PREFLIGHT.mdx` - archaeology: `archaeology/REPORT.mdx` - tech-debt: `tech-debt/ASSESSMENT.mdx` diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md index c132b10..b403552 100644 --- a/ARCHITECTURE.md +++ b/ARCHITECTURE.md @@ -1,6 +1,6 @@ # Godpowers Architecture (v3 Design Target) -> Status: STABLE v5.5.0 (Godplans 1.1 two-artifact contracts, lifecycle-safe dispatch, complete GP and requirement traceability, and the existing production runtime surface) +> Status: STABLE v5.5.0 published release (Godplans 1.1 two-artifact contracts, lifecycle-safe dispatch, complete GP and requirement traceability, and the existing production runtime surface) > Authors: Godpowers Team > Last updated: 2026-07-13 diff --git a/RELEASE.md b/RELEASE.md index 9860158..118ff2f 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -1,6 +1,6 @@ # Godpowers 5.5.0 Release -> Status: Release candidate +> Status: Published > Date: 2026-07-13 - [DECISION] Godpowers 5.5.0 is the Arc-Ready and Pillars conformance release. @@ -28,15 +28,23 @@ - [DECISION] The complete release gate passes with 94.64 percent line coverage, 79.26 percent branch coverage, 96.77 percent function coverage, and at least 70 percent line coverage across 98 included runtime modules. - [DECISION] The dependency audit reports 0 vulnerabilities and self-project truth passes 141 checks. - [DECISION] Package verification records 582 files in `godpowers` and 8 files in `@godpowers/mcp`. -- [HYPOTHESIS] Pull-request CI and publication evidence will be recorded after the release candidate is merged and published. +- [DECISION] Pull request 70 passed Node 18, 20, and 22 plus the package release gate before merge commit `84fbd00066d2bd833929d6d0b6b769de45275313` reached `main`. +- [DECISION] Main CI run 29264958862 passed against the merged release commit. ## Upgrade -- [DECISION] After publication, install with `npm install -g godpowers@5.5.0` or `npx godpowers@5.5.0`. +- [DECISION] Install with `npm install -g godpowers@5.5.0` or `npx godpowers@5.5.0`. - [DECISION] Existing 5.x projects need no `.godpowers` artifact migration. - [DECISION] Re-run the installer for each host runtime so updated skills, specialists, routes, references, and runtime helpers replace installed copies. - [DECISION] Repository contributors should treat `agents/` as Pillars context and `specialists/` as portable specialist source contracts. ## Publication Evidence -- [HYPOTHESIS] Git tag, GitHub Release, asset checksums, npm provenance, and isolated published-install verification are pending the merged release commit. +- [DECISION] Tag `v5.5.0` resolves to merged `main` commit `84fbd00066d2bd833929d6d0b6b769de45275313`. +- [DECISION] GitHub Release `v5.5.0` publishes `godpowers-5.5.0.tgz`, `godpowers-mcp-5.5.0.tgz`, and `SHA256SUMS`. +- [DECISION] The root release asset SHA-256 digest is `d8452cb7e8d862da6609faf1858e50e8e1d4a31147eeb811d53abf61e69a3c2f`. +- [DECISION] The MCP release asset SHA-256 digest is `afccadc9727398aa666bd5e155af477a258f0aa06428a7aaf53bf5389c4b028e`. +- [DECISION] Provenance workflow 29264981272 published `godpowers@5.5.0` and `@godpowers/mcp@5.5.0` under the `latest` tag. +- [DECISION] The root registry integrity is `sha512-matKwEhx+nxl+luBjAnGSPzdef1I19hpxfXmaxGAgRCu54qcGPLZbuMPLhH8/PHYI6FGODUMoeNmG1i2vSvGAA==` and matches the local release tarball. +- [DECISION] The MCP registry integrity is `sha512-VJbTGQXf8Xlyfm1TXK5fisr7qgZFBFkvliQnZEhhMaTwMhYIazmF8r1330AJYhQ/hOMDff725VWpZGDLdy0Fzg==` and matches the local release tarball. +- [DECISION] Isolated exact-version verification passes for Quick Proof, read-only project inspection, dashboard, next route, Claude install, Codex install, and the MCP executable. diff --git a/USERS.md b/USERS.md index d9d9d45..0bdb007 100644 --- a/USERS.md +++ b/USERS.md @@ -1,6 +1,6 @@ # Users and Community -The current source version is v5.5.0, and the latest published release is v5.4.0. +The current source version is v5.5.0, and the latest published release is v5.5.0. ## Track record diff --git a/agents/context.md b/agents/context.md index 119dcc5..6f85e1f 100644 --- a/agents/context.md +++ b/agents/context.md @@ -55,6 +55,7 @@ see_also: [arch, quality, deploy] - Sync mode: auto-applied by yolo. - Related artifact: `RELEASE.md`. +- Related artifact: `docs/ROADMAP.md`. - Rule: keep this pillar aligned when these artifacts change durable context truth. ### Extracted durable signals diff --git a/agents/deploy.md b/agents/deploy.md index dda152d..4b853a1 100644 --- a/agents/deploy.md +++ b/agents/deploy.md @@ -22,8 +22,8 @@ see_also: [security, observe] - [DECISION] `.github/workflows/publish-pack.yml` runs `npm run release:check` before publishing first-party extension packs. - [DECISION] `package.json` exposes `bin.godpowers` at `./bin/install.js`. - [DECISION] Manual tarball publish is a fallback only when the tag-triggered workflow cannot run, and provenance is unavailable for that publish. -- [HYPOTHESIS] Source version `5.5.0` will publish through the identity-bound tag workflow after the release candidate merges to `main`. -- [HYPOTHESIS] npm `godpowers@5.5.0` and `@godpowers/mcp@5.5.0` will become `latest` only after registry and asset integrity verification passes. +- [DECISION] Source version `5.5.0` published through identity-bound provenance workflow 29264981272 from merged `main` commit `84fbd00066d2bd833929d6d0b6b769de45275313`. +- [DECISION] npm `godpowers@5.5.0` and `@godpowers/mcp@5.5.0` are the `latest` versions and their registry integrity values match the locally packed release tarballs. - [DECISION] Isolated published-install verification passes for Quick Proof, read-only project inspection, dashboard, next route, Claude, Codex, and the MCP executable. - [DECISION] The prior `v5.4.0` tag remains the tested rollback reference. diff --git a/agents/quality.md b/agents/quality.md index 229548d..a43a8c1 100644 --- a/agents/quality.md +++ b/agents/quality.md @@ -59,19 +59,6 @@ see_also: [security, deploy] ### Godpowers artifact sources - Sync mode: auto-applied by yolo. -- Related artifact: `.godpowers/roadmap/ROADMAP.mdx`. - Related artifact: `docs/ROADMAP.md`. - Rule: keep this pillar aligned when these artifacts change durable quality truth. - -### Extracted durable signals - -From `.godpowers/roadmap/ROADMAP.mdx`: -- [DECISION] Evidence generated at: `2026-07-13T15:55:18.000Z`. -- [DECISION] Source version: `5.5.0`. -- [DECISION] Source hash `package.json`: `sha256:3cdde60011cd4891c7c6109bec611176d56d6d6c1c92d3bcc28d5bba9e810f5b`. -- [DECISION] Source hash `.godpowers/prd/PRD.mdx`: `sha256:239990ed2eb267c26d3de744bf318d6260bfd67463fec8e7ccccbc348fc1712c`. -- [DECISION] Source hash `.godpowers/arch/ARCH.mdx`: `sha256:ec90f0ec06d07fbc67c3b5ac22f3ae882a10d714ef230316f75823709e44642b`. -- [DECISION] Source hash `.godpowers/stack/DECISION.mdx`: `sha256:cc9e9227262d9d472fa7806fbafc9a83b8e621728c3652fae1a423a867989ce3`. -- [DECISION] Planning completion is backed by passing PRD, design not-required, architecture, roadmap, and stack gates. -- [DECISION] Build, shipping, steady-state, and advanced completion remain backed by the 33 linked requirements and the final release gate recorded in state. diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md index 0207c8a..9d3d248 100644 --- a/docs/ROADMAP.md +++ b/docs/ROADMAP.md @@ -3,7 +3,7 @@ > Status: ACTIVE > Model: Pure-skill for durable work. CLI provides install plus read-only status helpers. > Last updated: 2026-07-13 -> Current source: v5.5.0. Latest published: v5.4.0. +> Current source: v5.5.0. Latest published: v5.5.0. This roadmap tracks releases, what's shipped, and what is frozen during the 3.x public adoption window. Everything user-facing remains slash-command based.