Skip to content

catalog: publish GUI Runtime Connector 0.0.8 (sequence 1) - #12

Merged
Lucas1479 merged 2 commits into
mainfrom
codex/publish-gui-runtime-008
Nov 5, 2026
Merged

Lucas1479 merged 2 commits into
mainfrom
codex/publish-gui-runtime-008

Conversation

@Lucas1479

@Lucas1479 Lucas1479 commented Nov 4, 2026 •

Copy link
Copy Markdown
Member

Publication

Publish the first nonempty amadeus.catalog/v1 index, sequence 0 → 1, containing only Windows GUI Runtime Connector 0.0.8. Its input #11 received formal non-author approval and merged as 0afb576b2366a455be64e53322abf26259edfede. Earlier candidates remain historical and are not published.

At the maintainer's explicit direction, this PR also removes mandatory maintainer 2FA from catalog approval, merge and publication requirements. It remains an account-security recommendation. The README and review checklist now agree, and the historical verification report links to the updated rule without rewriting past observations. Host #293 synchronizes the Host checklist. No account or organization security settings are changed.

Published: merged as 3435a98081b329992c6ecbfe5f56f699c5450658 on 2026-11-05 (Pacific/Auckland). Fresh post-merge verification of the client's exact official endpoint passed: sequence 1, exact expected index bytes, and the newly downloaded 0.0.8 wheel's digest/size. See the official delivery receipt on #11. 2FA is advisory, not a publication gate. Host #293 is also merged.

Fact Exact value
Publication base / reviewed input / generator commit 0afb576b2366a455be64e53322abf26259edfede
Publication PR head a42b797341eecd1e7f08faa61c7e5152635f32bf
Package io.github.desolate-jix.gui-runtime / 0.0.8
Wheel SHA-256 2f532faf152faf2e1e3ab3140e1097487689be34d638e4ee86539e06886cbcaf
Wheel size 27,990 bytes
Generated index SHA-256 3fd41db8e4ed6a8cc84559807934ffb2b701409e7922ea2571b1dc71f3fc28b2
Fixed Host checker 1840c8e4f646992ddaebea3139c8895f29743a8f
Checker environment Windows, CPython 3.12.10, fresh minimal environment with pinned hashed requirements
Qualified external service Runtime 0.1.11, separately installed and operated by the user

The index is derived from committed inputs and the digest-pinned wheel. Display, ISC license, compatibility and HTTP access facts come from that wheel; credentials and configuration defaults are excluded. Installing this connector does not install or start Runtime. Wheel/index bytes, catalog/policy.json, safety decisions, checker pins and executable/workflow files are unchanged by the 2FA documentation update.

Validation

  • Fixed-environment generation, identical second build_catalog.py --check run, index transition validation and git diff --check passed.
  • The earlier index-only head 99318fc6 passed all five checks, including protected-base regeneration with publication:true. Those are historical results, not a claim about the newer head.
  • All five checks pass on current head a42b7973. The successful protected-base admission rerun explicitly returned publication:true; its evidence SHA-256 618754ab9c422d100018e662e330a97b50d290338f2ee24df39d065ffccb1803 matches the previously verified ten-file wheel inventory. The initial attempt failed before inventory evidence with only a generic error; its exact cause remains unconfirmed. One rerun passed with unchanged code, checks and inputs; the original failure is retained.
  • Fresh-cache verify_publication.py independently passed for the current candidate index: exact expected index bytes, one freshly downloaded wheel with matching digest/size, and zero skipped artifacts. The documentation update leaves both digests unchanged.
  • Independent artifact/ownership/license review and merged Host live verification retain their stated scopes and limits. No new GUI execution is claimed.

The additional ready-for-review admission run also passed with publication:true. GitHub blocked merging while that required run was pending; merge proceeded only after success. The main base remained unchanged. The maintainer explicitly authorized the named Lucas1479 review exception for this maintainer-authored publication; #11 retains genuine non-author artifact approval, and no approval event was fabricated for this PR.

Main now requires review with stale-approval dismissal and approval after the latest push, disallows force-push/deletion, and includes the approved named PR-review allowance. The separate strict GitHub Actions catalog-admission ruleset was verified unchanged with no bypass actors. verify_publication.py then passed against the exact official URL, the expected file and the previous sequence-0 file: one fresh artifact checked, none skipped. Future publications must still recheck the current main index, review/checks and actual official delivery.

简体中文

发布 sequence 1,只包含已正式批准并合并的 0.0.8。按维护者明确要求,2FA 已从项目的审核、合并和发布前置条件中移除,仅保留为安全建议;同步修改目录说明、审核清单和历史记录的政策说明,Host 清单由 #293 同步。未改账号或组织设置。

本次文档修改没有改变索引、wheel、机器准入政策或可执行逻辑。新 head 的空缓存候选下载校验通过,索引和唯一 wheel 摘要、大小正确。新 head 的 5 项 CI 已全部通过,admission 原样复跑明确返回 publication:true,证据摘要与已审核的 10 文件清单一致。首次失败只有通用错误,具体原因未确认,保留原记录;没有修改代码或放宽检查来取得绿灯。

现已正式上架:发布提交 3435a98,官方索引 sequence 1;合并后的官方地址空缓存校验通过,检查 1 个新下载 wheel、跳过 0 项。最终回执已发布到 #11。转正式审阅后新增的必需 admission 也通过;等待期间 GitHub 曾阻止合并,未绕过 CI。

主线审核及禁止强推/删除已配置,维护者明确批准本次使用具名审核例外,不伪造非作者 APPROVED;#11 的真实非作者产物批准保留。2FA 改为建议,Host #293 已同步合并。感谢作者贡献与持续返修。

@Lucas1479

Copy link
Copy Markdown
Member Author

At the maintainer's explicit request, commit a42b797 removes the catalog's mandatory 2FA gate. Maintainer 2FA is now a recommendation, not a prerequisite for approval, merging or publication. The current checklist and README agree; historical observations are retained with an explicit policy-update note. Host #293 makes the corresponding Host checklist change.

The index and wheel digests are unchanged. Fresh candidate delivery on this exact head succeeded, including a newly downloaded wheel. Existing independent artifact review, required CI, main protection and official delivery verification remain in scope. No account or organization security settings were modified.

简体中文

按维护者明确要求,提交 a42b797 已移除项目的强制 2FA 门槛,改为安全建议,不再作为审核、合并或发布的前置条件。现行清单和说明已同步;历史记录保留,并明确注明政策已更新。Host 对应修改见 #293。

索引与 wheel 摘要未变,新 head 的空缓存候选下载校验通过。原有独立产物审核、CI、主线保护和官方分发验证要求保持;未修改账号或组织安全设置。

Lucas1479 added a commit to Code-Amadeus/Amadeus that referenced this pull request Nov 5, 2026
The catalog's release checklist currently treats maintainer 2FA
verification as a publication gate. At the maintainer's explicit
request, remove that required row and retain 2FA as an account-security
recommendation, so it no longer blocks catalog approval, merging or
publication.

This synchronizes the Host checklist with the catalog guidance in
[Amadeus-Extensions
#12](Code-Amadeus/Amadeus-Extensions#12). Dated
verification reports retain the former rule as history; the living
checklist states the updated policy. Existing artifact review, branch
protection, CI and workflow-credential requirements remain. No GitHub
account or organization settings are changed.

Validation: reviewed the one-document diff; `git diff --check` passes.
No runtime or package changes, so no new tests or GUI execution are
needed.

## 简体中文

按维护者明确要求,从 Host 的插件商店首发必需清单中移除 2FA,将其保留为安全建议,不再作为审核、合并或发布的前置条件。与
Extensions #12 的现行规则同步,历史报告保留原记录并由当前清单说明政策已更新。

只修改一份文档,差异和空白检查通过。产物审核、主线保护、CI 和工作流凭据要求保持原有规则;未修改账号或组织安全设置,也未运行 GUI。
@Lucas1479
Lucas1479 marked this pull request as ready for review November 5, 2026 09:40
@Lucas1479

Copy link
Copy Markdown
Member Author

The maintainer has explicitly authorized publication of this exact head a42b797, including the documented named-review exception for this maintainer-authored publication PR.

  • The artifact input in catalog: Windows GUI Runtime Connector 0.0.8 with initial-owner release fix #11 already received genuine non-author approval and merged as 0afb576. The artifact review is retained; no wheel bytes changed.
  • All five current-head checks pass. The protected-base admission rerun reports publication:true; candidate index and fresh wheel delivery match the expected digests and size.
  • The maintainer-approved main protection is now configured: one approving review, stale-review dismissal, approval after the latest push, and disabled force-push/deletion. The named Lucas1479 PR-review allowance matches the Host arrangement. The existing strict GitHub Actions catalog-admission ruleset was verified unchanged with no bypass actors.
  • 2FA is advisory under the explicit policy change in this PR. No account/organization 2FA setting was changed.

This publication merge uses the expressly authorized review exception; it does not create a non-author GitHub APPROVED event for the publication PR. Required CI is not bypassed. The official index and wheel will be fetched and checked after merge before #11 is marked published.

简体中文

维护者已明确授权发布精确 head a42b797,并批准本次维护者自建发布 PR 使用具名审核例外。#11 的产物输入已获真实非作者批准;本 PR 的 5 项 CI、实际发布重建及空缓存候选分发均通过,wheel 字节未改。

main 已补齐 PR 审核、旧批准失效、最后推送后批准和禁止强推/删除;Lucas1479 审核例外沿用 Host 安排。原有严格的 catalog-admission 规则逐项核对未变,没有任何 bypass actor,不绕过 CI。2FA 按明确决策改为建议,未改账号或组织设置。

本次会如实记作经授权的审核例外合并,不冒充非作者 APPROVED。合并后仍须完成官方索引与 wheel 实际下载校验,再把 #11 标为已发布。

@Lucas1479
Lucas1479 merged commit 3435a98 into main Nov 5, 2026
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant