From d991ad4bdb1fff2581ec672acdb90539069cd423 Mon Sep 17 00:00:00 2001 From: Cole Speelman Date: Thu, 10 Sep 2026 12:39:30 -0400 Subject: [PATCH] Record CMS package verification for preview 27 --- TODO.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/TODO.md b/TODO.md index 0e2455e..86b33fa 100644 --- a/TODO.md +++ b/TODO.md @@ -22,8 +22,13 @@ passed 698,275 executions. Dependency/module and license checks passed. Vet has only the existing vendored COSE diagnostic documented by `scripts/verify.sh`. The consumer's full Go suite and native trusted-TLS editor checks passed. -Next: public-export verification, then preview27 publication and an immutable -consumer pin. No unrelated auth changes in this slice. +The consolidated `scripts/verify.sh` passed, including all 126 allowlisted +public-export paths, exported-package compilation, full tests/race, the existing +vet diagnostic exception, dependency/license checks and the starter build. -Status: implemented and consolidated Go/browser verification complete; export, -upstream push and consumer deployment pending. Release history stays in CHANGELOG. +Release candidate: `v0.1.0-preview.27`. Next: publish these verified bytes and +pin the consumer immutably. No unrelated auth changes in this slice. + +Status: implemented and consolidated verification/export complete. Consumer +deployment remains separately recorded in its repository. Release history stays +in CHANGELOG; publication is confirmed by the remote tag, not a checkbox here.