Repository navigation
Prepare caller-owned static credential fixture qualification - #314
Conversation
|
Preserved source checkpoint This remains a draft checkpoint. The optional Laravel/FrameworkBundle implementations are absent from that source vendor; the final local PHPStan pass reports two unresolved optional-class type findings in |
|
Source work resumed after #315's accepted source/stable-rendering checkpoint; P0 delivery still preempts this when its shared publisher input clears. #314 is normally refreshed onto accepted main The caller-owned CLI, canonical matrix, public/framework probes, preflight and refusing transport countercontrols are authored. They now live under the configured Current local source result is 3,625 tests / 63,724 assertions, configured source plus subject PHPStan and CLI/driver syntax PASS; all owned containers are absent. No proposed consumer graph was solved/installed. Existing normal framework compatibility cells now invoke the full corresponding fixture matrix on their already-resolved source consumers, without adding Composer operations. Their new result is pending; it cannot establish the separately proposed registry-installed tuple. Next action / owner: sdk-php fixes any concrete current-head CI findings and completes normal source qualification/integration. The future normal registry3.10 identity, complete advisory-enforced graph and sealed archives remain explicit caller inputs; positive acceptance on the exact proposed PHP8.4.27/Laravel12.69.3/FrameworkBundle7.4.21 graph is still unqualified. #293's actual published Workflow2.21 authority, published native flat-child-all + normally installed SDK tuple and final combined qualification remain before freeze/tag. No real credentials/auth, Server/native, release or publication operation is selected. |
|
|
Normal source integration and resulting-main acceptance are complete at 9410b92, tree PR checks are 42 terminal: 41 success + one intended skip; current PR Sonar has zero open findings. Main CI 42139588617, main Sonar/CodeQL and portal preview 42139588590 passed. Resulting main is 42 terminal: 40 success + two intended skips; deployment was skipped. Source evidence includes 3,625 tests / 63,724 assertions, source/subject PHPStan, cold CLI no-autoload refusals and the real framework fixture matrix in all 15 existing compatibility cells. PR CI 42138008651 records 5,316 cases across six Laravel targets per Laravel cell and 1,786 across two Symfony targets per Symfony cell: 69,150 source-case executions, zero failures. These are the existing source consumers, with no extra Composer operation. The proposed combined registry-installed graph is not qualified by those results. Frozen caller-source bundle: 13 files / 128,719 bytes, immutable reference
Dependency intent is 1,007B / SHA256 336ef99a20bd7e63751509062d1cfb946c2e3577f22d90f9585e1ef4840e3c5a. Canonical fixture remains 60,716B / 319 IDs / SHA256 0d4f01b763d72850943acbd9a74a0cc5da1ca6db5bc1b6fa5ca37fda11810acb. No fixture bytes or credential policy changed. Conformance instrumentation uses the existing test-source classification; no Sonar rule/configuration or required check was disabled. Future inputs / owners: the normal registry SDK3.10 identity, complete normal-advisory dependency graph and sealed archives remain missing for the proposed PHP8.4.27/Laravel12.69.3/FrameworkBundle7.4.21 consumer. General retains the combined-minor/operating selection; sdk-php owns the bounded installed-fixture acceptance after those inputs exist. The runner itself explicitly leaves full graph/archive/installed-file sealing, execution admission and real authentication unproved. No new controller, local solve/install, registry substitution, real credential/auth, Server/native, tag/release or promotion was performed. #307 and #293 remain open for their original published/installed/cohort gates. #315's P0 actual delivery preempts further work when its accepted publisher input clears. No stable site publication occurred through this merge. |
#307 needs a caller-owned fixture check against the eventual normal registry SDK, preserving original credential bytes through public and framework paths without runtime requests. Add that runner, its dependency intent and setting-only result format independently of the combined-minor publication gates.
The shared canonical loader verifies 60,716 bytes, SHA256 and 319 unique IDs; source controls independently freeze all 296 original scalar/byte inputs. The runner covers public constructors/configuration/process roles and real Laravel provider/lazy-interface/facade/cached-config/worker-factory and Symfony bundle/client/factory construction paths. Refusing transport instrumentation and its direct/default/bounded-path countercontrols retain zero real requests and no worker loop.
The caller preflight binds subject/lock/archive receipts, normal registry distribution identity, installed versions/references and implementation origins. It refuses incomplete templates before consumer autoload; a cold CLI countercontrol verifies no autoload side effect. Complete advisory-enforced dependency closure, full archive/installed-file sealing and execution admission remain external caller requirements, explicitly reported as unproved by this runner.
Conformance code and fixture instrumentation live under the repository's existing configured
scripts/conformance/**test-source scope. No Sonar rule, source/test configuration or required check is disabled. Production credential policy and canonical fixture bytes are unchanged. The authentication guide clarifies the existing direct-constructor empty-value mode rule.Validation: 3,625 source tests / 63,724 assertions, configured source plus subject PHPStan, CLI syntax, whitespace and public-boundary checks pass on the existing cached source vendor. Refreshed normally onto accepted main
a53bc7c0. All 15 existing framework source-consumer cells passed their added fixture matrix: 5,316 cases across six Laravel paths per Laravel cell and 1,786 across two Symfony paths per Symfony cell, totaling 69,150 source-case executions with zero failures. Current PR Sonar has zero open findings; remaining fresh checks are running. The proposed PHP8.4.27 / registry SDK3.10.0 / Laravel12.69.3 / FrameworkBundle7.4.21 graph remains unqualified and was not solved or installed locally. Existing ordinary CI consumer installation remains source-only; no Composer operation was added.Future inputs remain the normal registry3.10 identity, complete advisory-enforced dependency graph and sealed archives. No solve/install/registry substitution, acquisition, credential/auth, Server/native, tag/release or promotion is selected. #293 retains the actual published Workflow2.21 authority, published native flat-child-all + normally installed SDK tuple and final combined qualification before freeze/tag. #219 remains draft/excluded and #267 stays separate.
Refs #307; source proposal. P0 #315 delivery preempts this work when its shared publisher input clears.