elias/everything-claude-code
1
0
Fork 0
mirror of https://github.com/affaan-m/everything-claude-code.git synced 2026-05-18 13:21:15 +08:00
Code Issues Packages Projects Releases Wiki Activity
everything-claude-code/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-16.md

5.7 KiB
Raw Blame History

ECC v2.0.0-rc.1 Publication Evidence - 2026-05-16

This is release-readiness evidence only. It does not create a GitHub release, npm publication, plugin tag, marketplace submission, or announcement post.

Source Commit

Field Evidence
Upstream main 6bced468d76b269243a6f0bd28472853aa78e0e4
Git remote https://github.com/affaan-m/everything-claude-code.git
Evidence scope Current main after PR #1944, PR #1945, issue #1946 triage, PR #1947 supply-chain protection, AgentShield PR #87, AgentShield PR #88, ITO-57 sync, and operator dashboard refresh
Local status caveat git status --short --branch showed ## main...origin/main plus unrelated untracked docs/drafts/

The actual release operator should repeat all publish-facing checks from the final release commit with a strictly clean checkout before publishing.

Queue And Discussion State

Surface Command Result
Trunk PRs gh pr list --state open --json number,title,url --limit 20 []
Trunk issues gh issue list --state open --json number,title,url --limit 20 []
Platform audit node scripts/platform-audit.js --json --allow-untracked docs/drafts/ Ready; open PRs 0, open issues 0, discussion maintainer-touch gaps 0, discussion missing-answer gaps 0, blocking dirty files 0
Operator dashboard npm run operator:dashboard -- --json --allow-untracked docs/drafts/ dashboardReady: true, platformReady: true, head 6bced468d76b269243a6f0bd28472853aa78e0e4

Merge And Triage Batch

Item Result
PR #1944 Merged statusline ANSI palette update as 50ac061f9e72d7daa137f1bd08760cf74e9b577d; targeted node tests/hooks/ecc-statusline.test.js and node scripts/ci/validate-hooks.js passed before merge
PR #1945 Merged recsys-pipeline-architect community skill as 9e973b29fb1a2a0aeb9e6980017b67c3ddb05201; maintainer patches synced catalog counts and removed emoji blocked by Unicode safety
Issue #1946 Closed as triaged with a corrected maintainer comment; Linear ITO-60 now tracks GateGuard proactive fact-forcing preflight UX
PR #1947 Merged scheduled supply-chain watch/advisory-source evidence as 4093d1bb7a14db1b4d4ea5bd00f2073baf94bfb0; trunk now has the TanStack/Mini Shai-Hulud/node-ipc IOC scan plus advisory-source report surfaces wired into scheduled watch evidence
AgentShield PR #87 Merged plugin-cache runtime-confidence classification as 26bb44650663816d07180e0d20c1895e431a326c; installed Claude plugin cache findings now emit runtimeConfidence: plugin-cache, plugins/cache only maps to Claude cache under .claude, and cached hook implementations are no longer mislabeled as active hook-code
AgentShield PR #88 Merged evidence-pack inspect/readback as 65ed6e2a87545dc99d962b58413f49096a4d70ec; agentshield evidence-pack inspect now emits verified JSON/text summaries for report, policy, baseline, supply-chain, CI context, remediation, and malformed artifact errors
ITO-57 Updated with PR #1947 advisory-source evidence, post-merge source refresh, IOC scan, npm audit/signature checks, and OpenAI app update caveat
ITO-49 Updated with AgentShield PR #87 and #88 merge evidence, local test evidence, CI status, live ~/.claude scan classification counts, and local Mini Shai-Hulud protection scan results
ITO-44 Updated with queue cleanup, dashboard refresh, and remaining macro gaps

Release Gate Commands

Gate Command Result
Root suite npm test 2469 passed, 0 failed
Rust ecc2 suite cd ecc2 && cargo test 462 passed, 0 failed; existing dead-code/unused warnings only
Release surface node tests/docs/ecc2-release-surface.test.js 20 passed
Harness adapters npm run harness:adapters -- --check PASS; 11 adapters
Harness audit npm run harness:audit -- --format json 70/70, no top actions
Observability readiness npm run observability:ready 21/21, ready yes
Supply-chain IOC scan npm run security:ioc-scan Passed; 227 files inspected
Advisory source refresh npm run security:advisory-sources -- --refresh --json Ready; 9 active sources; Linear payload still points at ITO-57 for sync
npm audit npm audit --audit-level=moderate 0 vulnerabilities
npm signatures npm audit signatures 241 verified registry signatures; 30 verified attestations
Dashboard renderer node tests/scripts/operator-readiness-dashboard.test.js 7 passed, 0 failed

Current Publication Blockers

  • GitHub prerelease v2.0.0-rc.1 is still not created in this pass.
  • npm ecc-universal@2.0.0-rc.1 is still not published to the next dist-tag.
  • Claude plugin tag and marketplace propagation remain approval-gated.
  • Codex repo-marketplace distribution is verified for rc.1, but official Plugin Directory publishing remains blocked on OpenAI's coming-soon self-serve publishing surface.
  • ECC Tools billing/native-payments copy remains blocked until live Marketplace-managed test-account readback returns an announcement-ready gate.
  • Release notes, X, LinkedIn, GitHub release, and longform copy still need final live URLs after release/package/plugin URLs exist.
  • The local checkout still has unrelated untracked docs/drafts/, so a strict clean-checkout release pass remains required before real publication.

Result

The public PR queue, issue queue, and discussion queue are clear, and the rc.1 preview pack passed the main Node, Rust, release-surface, harness, observability, and supply-chain gates on May 16, 2026. This improves publication readiness but does not replace the approval-gated release, package, plugin, and announcement steps in publication-readiness.md.