yaertu · yaertu · Sep 2, 2026 · Sep 2, 2026 · Sep 2, 2026 · Sep 2, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -37,6 +37,8 @@ jobs:
         run: python scripts/demo.py
       - name: OTLP production evidence demo
         run: python scripts/demo_otlp.py
+      - name: Cross-source compare demo
+        run: python scripts/demo_compare.py
 
   live-github-evidence:
     name: Live GitHub failure evidence

diff --git a/AGENTS.md b/AGENTS.md
@@ -3,9 +3,9 @@
 Bu dosya Codex, Claude Code, Cursor ve diğer kodlama ajanlarının projeyi aynı kurallarla sürdürebilmesi için repo-local çalışma sözleşmesidir.
 
 ## Ürün cümlesi
-**Package local failures, historical Git bugs, and failed GitHub Actions runs into redacted AI-ready evidence bundles.**
+**Capture failure evidence, keep it portable, and compare what changed without trusting one vendor or one AI tool.**
 
-Ürün sınırı: repository context packer veya vendor-specific “explain error” aracı değil, **portable failure evidence**.
+Ürün sınırı: repository context packer, observability dashboard, generic log diff veya vendor-specific “explain error” aracı değil. FixBundle'ın çekirdeği **portable failure evidence + deterministic evidence comparison**.
 
 ## Her bakım turunun sırası
 1. Güncel `main`, CI, açık issue/PR, README ve canlı repo metadata'sını oku.
@@ -16,52 +16,70 @@ Bu dosya Codex, Claude Code, Cursor ve diğer kodlama ajanlarının projeyi ayn
    ```bash
    python -m pytest -q
    python scripts/demo.py
+   python scripts/demo_otlp.py
+   python scripts/demo_compare.py
    fixbundle --version
    fixbundle . --recommend --lang tr
    ```
-6. GitHub Native davranışı değişirse ayrıca live gate'i koru:
+6. GitHub Native davranışı değişirse live gate'i koru:
    ```bash
    export GITHUB_TOKEN=<actions-read-contents-read-token>
    fixbundle github --repo yaertu/fixbundle --run 33587184675 --output .fixbundle-live --lang en
    python scripts/verify_live_github.py .fixbundle-live
    ```
-7. CI sonucunu görmeden cross-platform veya live PASS yazma.
-8. Star/download/benchmark/user quote/sponsor/novelty iddiası uydurma.
-9. Secret veya proprietary bundle içeriğini repoya koyma.
-10. Sırf aktivite görünsün diye commit atma.
+7. Compare input/archive/security davranışı değişirse checksum, hostile ZIP ve cross-source tests geçmeden merge etme.
+8. CI sonucunu görmeden cross-platform veya live PASS yazma.
+9. Star/download/benchmark/user quote/sponsor/novelty iddiası uydurma.
+10. Secret veya proprietary bundle içeriğini repoya koyma.
+11. Sırf aktivite görünsün diye commit atma.
 
-## GitHub ana sayfa senkronu
-Her positioning/release değişiminde README ve `docs/product/REPO_HOME.md` birlikte kontrol edilir.
+## Kanıt ankrajları
+### v0.4 GitHub Native
+- source failed run: `33587184675`
+- proof run: `33589138174`
+- expected: platform matrix + Live GitHub failure evidence PASS
+- evidence: `docs/evidence/V04_LIVE_GITHUB.md`
+
+### v0.5 Production Evidence
+- OTLP Protocol File Exporter JSON/JSONL
+- exact trace/span correlation
+- local/offline, bounded, redacted, checksummed
+- demo: `scripts/demo_otlp.py`
 
-v0.4 sonrası hedef açıklama:
-`Package local failures, historical Git bugs, and failed GitHub Actions runs into redacted AI-ready evidence bundles.`
+### v0.6 Cross-source Compare
+- CLI: `fixbundle compare baseline.zip incident.zip [--format json]`
+- input schemas: `fixbundle/0.3`, `0.4`, `0.5`
+- integrity is validated before evidence interpretation
+- ZIPs are never extracted or mutated
+- no network/LLM required
+- demo: `scripts/demo_compare.py`
+- design: `docs/product/V06_COMPARE.md`
 
-Hedef topics:
-`ai-debugging`, `developer-tools`, `devtools`, `production-debugging`, `temporal-debugging`, `support-bundle`, `diagnostics`, `bug-report`, `ai-coding-assistant`, `github-actions`, `codex`, `claude-code`, `cursor`, `reproducibility`, `git`, `llm`
+## GitHub ana sayfa senkronu
+Her positioning/release değişiminde README ve `docs/product/REPO_HOME.md` birlikte kontrol edilir.
 
-Connector About/Topics yazamıyorsa yalnız bu UI adımı maintainer'a kısa görev olarak verilir. Değiştirildiğini görmeden değişti denmez.
+v0.6 target description:
+`Package failures into redacted evidence bundles and compare what changed across local, CI, and OpenTelemetry incidents.`
 
-## v0.4 kanıt ankrajı
-- source failed run: `33587184675`
-- proof run: `33589138174`
-- proof commit: `d15385a7f9ecd0a0dbd1c67b0caad6f7aa21bb95`
-- expected: platform matrix 9/9 + Live GitHub failure evidence PASS
-- evidence: `docs/evidence/V04_LIVE_GITHUB.md`
+Target topics are maintained in `docs/product/REPO_HOME.md`. Connected tools About/Topics yazamıyorsa yalnız bu UI adımı maintainer'a kısa görev olarak verilir. Değiştirildiğini görmeden değişti denmez.
 
 ## Sürüm kararı
 - docs-only: version bump yok
 - backward-compatible behavior: minor
 - bug fix: patch
 - stable schema kırılması (v1+): semver major
 
+## Current product gate
+v0.6 sonrası varsayılan hareket yeni adapter veya panel yazmak değildir. Önce `docs/product/NEXT.md` içindeki **distribution / repeat-use gate** sınanır. Amaç, unrelated bir maintainer'ın bir FixBundle artifact'ını saklayıp sonraki incident'ta compare için yeniden kullanmasıdır.
+
 ## Devam promptu
 
 ```text
 Continue as FixBundle repository steward for yaertu/fixbundle.
 Start from current main and read AGENTS.md, README, ROADMAP, docs/product/NEXT.md, REPO_HOME.md, METRICS.md, open issues/PRs and latest CI before changing anything.
-Run /truth + /audit discipline. Search current GitHub/Reddit/web and official docs for actual failure-evidence pain, competing tools and platform-native capabilities. Never build a wrapper that merely duplicates a vendor's existing LLM/debugging feature.
-Current v0.4 anchor is the real failed GitHub Actions run 33587184675 and successful proof run 33589138174. Preserve the live verification gate when touching GitHub capture.
-The researched v0.5 direction is vendor-neutral Production Evidence Import, starting with OpenTelemetry Protocol File Exporter JSON/JSONL logs/traces. Normalize trace/span/service/environment/release/exception evidence into the existing FixBundle schema family, with bounded selection, redaction, checksums and tests. Sentry should be an optional adapter only where it adds portability/correlation beyond Sentry's own llmFormat/event APIs.
-Make only evidence-backed changes. Keep README/CHANGELOG/ROADMAP/evidence/repo-home metadata recommendations synchronized. Never fabricate users, stars, benchmarks, tests, compatibility, screenshots or novelty. Check CI after changes and repair failures caused by the change before claiming success.
+Run /truth + /audit discipline. Preserve the proven local, historical, live GitHub, OTLP and compare evidence gates. Compare must validate bundle integrity before interpretation and must remain read-only, local and deterministic.
+Search current GitHub/Reddit/web and official docs for actual failure-evidence pain, competing tools, repeat-use signals and distribution friction. Never build a wrapper that merely duplicates a vendor's existing LLM/debugging feature.
+The current highest-value gate is distribution and repeat use: prove that an unrelated maintainer can install FixBundle, capture a real failure, retain the artifact, and use compare when the next incident changes or recurs. Do not start v0.7 merely to increase version count.
+Make only evidence-backed changes. Keep README/CHANGELOG/ROADMAP/evidence/repo-home metadata recommendations synchronized. Never fabricate users, stars, downloads, benchmarks, tests, compatibility, screenshots or novelty. Check CI after changes and repair failures caused by the change before claiming success.
 End with: what changed, proof, current CI, live public metrics, repo-home metadata status, and the single highest-value next move.
 ```
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.6.0 — 2026-09-02
+
+### Added
+- `fixbundle compare baseline.zip incident.zip` deterministic evidence comparison.
+- `--format json` machine-readable compare output.
+- `fixbundle/0.3`, `fixbundle/0.4` ve `fixbundle/0.5` input normalization.
+- Fixed-order comparison for capture identity, project/repository/workflow/run, Git commit + changed files, failed commands/jobs/steps, OTLP exceptions/services/traces and runtime identity.
+- `changed`, `added`, `removed`, `unavailable` detailed statuses + `unchanged` summary count.
+- `scripts/demo_compare.py`: iki gerçek OTLP FixBundle artifact'ı üretip service version / exception / trace drift'ini doğrulayan reproducible demo.
+- `docs/product/V06_COMPARE.md`: compare integrity, normalization and semantic contract.
+
+### Safety / hardening
+- Compare, evidence interpretation'dan önce her iki bundle'ın `SHA256SUMS.txt` dosyasını strict doğrular.
+- Exact checksum coverage zorunlu; missing/extra/malformed entries ve checksum mismatch fail-closed.
+- Absolute ZIP path, Windows drive path, `..`, backslash, NUL, duplicate members, symlink ve encrypted members reddedilir.
+- ZIP member count, per-member byte ve total uncompressed byte bounds uygulanır.
+- Input ZIP hiçbir zaman extract edilmez veya mutate edilmez.
+- Unknown FixBundle schema fail-closed davranır.
+- Compare core LLM/network gerektirmez ve causal root-cause iddiası üretmez.
+
+### Verification
+- `tests/test_compare.py`: local↔local, GitHub↔GitHub, GitHub↔OTLP, checksum tamper, path traversal, duplicate member, symlink ve unsupported-schema regression coverage.
+- `tests/test_compare_cli.py`: real CLI JSON output + invalid ZIP fail-closed subprocess coverage.
+- `scripts/demo_compare.py`: real v0.5 bundle generation → integrity validation → deterministic compare.
+- GitHub Actions PR run `33591450004`: Ubuntu + Windows + macOS × Python 3.10 / 3.12 / 3.13 ve Live GitHub evidence job PASS; compare demo platform matrix içinde PASS.
+- Existing historical, OTLP production ve live GitHub evidence gates korunur.
+
 ## 0.5.0 — 2026-09-02
 
 ### Added