gamertan/sandwich-hime
1
0
Fork 0
Code Actions Releases Activity

refactor: keep compiler source standalone

Browse Source 
Signed-off-by: Cole Speelman <crspeelman@gmail.com>
This commit is contained in:
gamertan
2026-08-11 23:58:25 -04:00
parent 0941075baa
commit 7b839f8155
40 changed files with 130 additions and 1581 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ROADMAP.md
+9 -10
View File
@@ -6,7 +6,7 @@ Unchecked items are release blockers, not aspirational marketing.
## Compiler and runtime
- [ ] Deterministic golden output repeated across Linux, macOS, and Windows.
- [ ] Compiler-owned deterministic golden output repeated across Linux, macOS, and Windows.
- [ ] Temporary consumer modules compile using committed Go and only the Apache runtime.
- [ ] Parser, delimiter, context, path, and source-map fuzz targets survive the release campaign.
- [ ] Adversarial escaping and filesystem cases are evidenced.
@@ -20,19 +20,18 @@ Unchecked items are release blockers, not aspirational marketing.
- [ ] CSP hash injection, fragment/API/download exclusion, and cache disabling pass.
- [ ] Replaced and interrupted child processes leave no descendants on supported systems.
## EQL Wiki proof
## Repository-owned release evidence
- [ ] Separate `codex/himesan-pilot` worktree created after compiler gates.
- [ ] Shared layout/home, browse fragment, and item page reach differential parity.
- [ ] Accessibility, CSP, links/forms, malicious values, status, caching, and fragments pass.
- [ ] Blue/green renderer flag and slot-switch rollback verified.
- [ ] Fourteen continuous production days complete with zero Hime renderer failure or security/accessibility regression.
- [ ] Honest before/after case study and reproducible benchmark report approved.
- [ ] Contextual escaping is differentially tested against Go's documented `html/template` safety baseline.
- [ ] Repository-owned synthetic benchmark cases and methodology are reproducible from a clean checkout.
- [ ] Generated output is reviewed for stable provenance, source mappings, and absence of compiler-license headers.
- [ ] Production application boundaries are documented: committed generated Go plus the Apache runtime, with no compiler or development supervisor in the deployed binary.
- [ ] Unsupported or unmeasured performance and production claims are absent from release materials.
## Public launch
- [ ] Ownership notices, output permission, DCO contribution process, and pre-registration trademark terms receive final human review.
- [ ] Name clearance, security mailbox, two-person credential recovery, and signing keys complete.
- [ ] Gamertan vanity metadata and documentation verified from a clean machine.
- [ ] `gamertan.com` vanity-import metadata and documented installs verified from a clean machine.
- [ ] Sanitized fresh-history public Gitea snapshot contains no private paths, identifiers, history, or unsupported release claims.
- [ ] Canonical public Gitea source preview and Gamertan documentation launch together with no secondary forge mirror.
- [ ] Canonical public Gitea source and project documentation launch with no secondary forge mirror.