Publish the reviewed version identity fix and mark preview 1 withdrawn.\n\nPrivate-Source-Commit: 9907afdfa18099ac488fe4011291ea454036435a\nPrivate-Source-Tree: 3a5e666dd6a0c69a07f7804612c8e3dc3474966a\nHimesan-Output-Permission: v1.0\nAI-Assistance: OpenAI Codex assisted implementation and review. Signed-off-by: Cole Speelman <crspeelman@gmail.com>
1.6 KiB
Preview release policy
v0.1.0-preview.2 may be published only after one identical candidate Tend
binary has successfully completed maintenance releases for Gamertan and the
Sandwich Hime website, including injected-failure restoration and explicit
rollback proof. The August 14, 2026 campaign met that gate; the scoped,
sanitized record is in docs/DOGFOOD_EVIDENCE.md.
Before a preview tag:
- Run
./scripts/verify.shfrom a clean pushed private-development commit. - Review dependency, license, race, filesystem, archive, and rollback evidence.
- Export the exact allowlisted public tree into a new root commit.
- Verify canonical Gitea and GitHub discovery trees are byte-identical.
- Sign the canonical Gitea tag and attach checksums and an SPDX SBOM.
- Verify a fresh public checkout before advertising installation.
The release tag and attached candidate must be built from the final reviewed source commit. Documentation-only changes after the recorded campaign require one final identical-candidate maintenance pass before tagging.
v0.1.0-preview.1 is immutable but withdrawn: its source and module checksums
are valid, while a fresh go install reports the development identity because
the CLI did not yet adopt the tagged module version from Go build information.
Preview 2 adds that identity path and its regression tests; preview 1 is never
retagged or rewritten.
The canonical public origin is ssh://git@gitea.speelman.ca:2222/gamertan/tend.git.
GitHub is a read-only discovery snapshot. Private development history is not
published or merged into either public history.