4.7 KiB
ECC v2.0.0-rc.1 Publication Evidence - 2026-05-15
This is release-readiness evidence only. It does not create a GitHub release, npm publication, plugin tag, marketplace submission, or announcement post.
Source Commit
| Field | Evidence |
|---|---|
| Upstream main base | f04702bdac132662c8496e817bcd850c86e2b854 |
| Evidence branch | docs/ecc2-rc1-may15-readiness |
| Evidence scope | Current main after PR #1921 supply-chain IOC expansion |
| Git remote | https://github.com/affaan-m/everything-claude-code.git |
| Local status caveat | Working tree had the unrelated untracked docs/drafts/ directory before this docs refresh |
The actual release operator should repeat all publish-facing checks from the final release commit with a clean checkout before publishing.
Queue And Discussion State
| Surface | Command | Result |
|---|---|---|
| Trunk PRs/issues | gh pr list and gh issue list for affaan-m/everything-claude-code |
0 open PRs, 0 open issues |
| AgentShield PRs/issues | gh pr list and gh issue list for affaan-m/agentshield |
0 open PRs, 0 open issues |
| JARVIS PRs/issues | gh pr list and gh issue list for affaan-m/JARVIS |
0 open PRs, 0 open issues |
| ECC Tools PRs/issues | env -u GITHUB_TOKEN gh pr list and env -u GITHUB_TOKEN gh issue list for ECC-Tools/ECC-Tools |
0 open PRs, 0 open issues |
| ECC website PRs/issues | env -u GITHUB_TOKEN gh pr list and env -u GITHUB_TOKEN gh issue list for ECC-Tools/ECC-website |
0 open PRs, 0 open issues |
| Trunk discussions | GraphQL discussion count for affaan-m/everything-claude-code |
57 total discussions; 0 without maintainer touch after May 15 maintainer comments |
| Other repo discussions | GraphQL discussion count for AgentShield, JARVIS, ECC Tools, and ECC website | Discussions disabled or 0 total |
The ECC Tools organization is reachable with the configured GitHub host
credential. In this shell, the exported GITHUB_TOKEN overrides that credential
and causes false 404/403 failures for ECC-Tools/*. Use env -u GITHUB_TOKEN
for ECC Tools verification commands until that environment override is cleaned
up.
Linear Roadmap State
The detailed execution roadmap now lives in Linear project:
https://linear.app/itomarkets/project/ecc-platform-roadmap-52b328ee03e1
The project contains 16 issue-level lanes and 5 milestones:
| Milestone | Issues |
|---|---|
| Security and Access Baseline | ITO-44, ITO-57, ITO-58 |
| ECC 2.0 Preview and Publication | ITO-45, ITO-46, ITO-47, ITO-56 |
| AgentShield Enterprise Iteration | ITO-48, ITO-49 |
| ECC Tools Next-Level Platform | ITO-50, ITO-51, ITO-52, ITO-53, ITO-54, ITO-59 |
| Legacy Audit and Salvage | ITO-55 |
Project documents added in Linear:
- Roadmap Index and Current Execution Baseline
- Status Update 2026-05-15
- GitHub Queue Snapshot 2026-05-15
- Completion Audit Snapshot 2026-05-15
- Discussion Queue Evidence 2026-05-15
- ECC-Tools Access Evidence 2026-05-15
Supply-Chain Evidence
| Surface | Evidence |
|---|---|
| PR #1921 | Merged supply-chain IOC expansion for Mini Shai-Hulud/TanStack follow-up |
| Merge commit | f04702bdac132662c8496e817bcd850c86e2b854 |
| Local IOC tests | node tests/ci/scan-supply-chain-iocs.test.js passed 11/11 |
| Unicode safety | node scripts/ci/check-unicode-safety.js passed |
| IOC scan | npm run security:ioc-scan passed |
| Root suite | npm test passed 2426/2426, 0 failed |
| Repo sweeps | IOC scanner sweep passed for trunk, AgentShield, ECC Tools, ECC website, JARVIS, and the ECC document mirror |
The May 15 IOC expansion added coverage for OpenSearch/Mistral/Guardrails/
UiPath/Squawk-style campaign variants, opensearch_init.js, vite_setup.mjs,
dead-drop/session protocol strings, and AI-tooling persistence surfaces without
committing full high-entropy indicators that trip secret scanners.
Current Publication Blockers
- GitHub prerelease
v2.0.0-rc.1is still not created in this pass. - npm
ecc-universal@2.0.0-rc.1is still not published to thenextdist-tag. - Claude plugin tag and marketplace propagation remain approval-gated.
- Codex plugin public marketplace/manual submission path still needs final owner verification.
- ECC Tools billing claims are now GitHub-access-verifiable, but the billing product surface still needs a dedicated payment-readiness audit before any public payment announcement.
- Release notes, X, LinkedIn, and longform copy still need final live URLs after release/package/plugin URLs exist.
Result
The queue, discussion, Linear roadmap, and supply-chain evidence are fresher
than the May 13 publication evidence. They improve readiness, but they do not
replace the final clean-checkout publish pass required by
publication-readiness.md.