Repository navigation

PR 3's re-check survivors are killed: tests/test_release_workflow.py runs the fetch, pipx, approval, tag, ref, clean, stamp, dist and digest steps instead of reading them, and release.yml changes only in comments (#228, PR 3b) - #284

Merged

brettheap merged 88 commits into

mainfrom

006-release-pypi-pr3b

Oct 20, 2026

Merged

PR 3's re-check survivors are killed: tests/test_release_workflow.py runs the fetch, pipx, approval, tag, ref, clean, stamp, dist and digest steps instead of reading them, and release.yml changes only in comments (#228, PR 3b)#284
brettheap merged 88 commits into
mainfrom
006-release-pypi-pr3b

Commits on Oct 17, 2026
- OpenSpec change release-tags-pypi: proposal (#228)
  
  Brett Heap
  and
  claude
  committed
  dc83c21
- OpenSpec change release-tags-pypi: alignment review fixes and Brett's answers of 2026-10-17 (#228)
  
  Brett Heap
  and
  claude
  committed
  698cf30
- OpenSpec change release-tags-pypi: council verdicts applied, and clarifications.md (#228)
  
  Brett Heap
  and
  claude
  committed
  56669c1
- OpenSpec change release-tags-pypi: the wheel's LICENSE is held by the build's check, not by hatchling (#228)
  
  Brett Heap
  and
  claude
  committed
  ea306de
- OpenSpec change release-tags-pypi: delta specs for its two new capabilities (#228)
  
  Brett Heap
  and
  claude
  committed
  1fcb95c
- OpenSpec change release-tags-pypi: design.md (#228)
  
  Brett Heap
  and
  claude
  committed
  9571d9c
- OpenSpec change release-tags-pypi: tasks.md, the governance and handoff record (#228)
  
  Brett Heap
  and
  claude
  committed
  28a441a
- OpenSpec change release-tags-pypi: design.md records the lead's rulings of 2026-10-17 (#228)
  
  Brett Heap
  and
  claude
  committed
  8035d77
- Speckit feature 006-release-pypi: spec.md and its quality checklist (#228)
  
  Brett Heap
  and
  claude
  committed
  eb12177
- OpenSpec change release-tags-pypi: tasks.md records the Speckit handoff (#228)
  
  Brett Heap
  and
  claude
  committed
  760281b
- Speckit feature 006-release-pypi: plan, research, data model, contracts and quickstart (#228)
  
  Brett Heap
  and
  claude
  committed
  83c69ed
- Speckit feature 006-release-pypi: tasks.md, 25 tasks by user story and tier (#228)
  
  Brett Heap
  and
  claude
  committed
  01ff6d6
Commits on Oct 18, 2026
- Speckit feature 006-release-pypi: /speckit.analyze findings fixed, no CRITICAL or HIGH left (#228)
  
  Brett Heap
  and
  claude
  committed
  335d226
- Release tags and PyPI: the lead's rulings of 2026-10-18 on 335d226, in the change and in feature 006 (#228)
  
  Brett Heap
  and
  claude
  committed
  b0640a5
- Merge main d424b64 into 006-release-pypi (#228): bring the branch up to main before Phase 1
  
  Brett Heap
  and
  claude
  committed
  5e592ca
- T001: the package's docstring-only __init__ and its committed, unstamped stamp
  
  Brett Heap
  and
  claude
  committed
  140c5ab
- tasks.md: T001 done (accepted 140c5ab on model, scope and verify); T024 carries Brett Heap's option (c) (#228)
  
  Brett Heap
  and
  claude
  committed
  cf43b07
- T001: both package files open with the repository's SPDX line (lead's ruling 2026-10-18)
  
  Brett Heap
  and
  claude
  committed
  b6ff505
- The stamp contract follows T001's SPDX line: the SPDX line, one docstring, five assignments (#228)
  
  Brett Heap
  and
  claude
  committed
  fd554d8
- The workBenches condition is decided: Brett Heap's position (c), opensoft/workBenches#165 (#228)
  
  Brett Heap
  and
  claude
  committed
  8701f19
- T002: pyproject.toml declares the openrepotools wheel, per contracts/wheel.md
  
  Brett Heap
  and
  claude
  committed
  f35ec31
- tasks.md: T002 done (accepted f35ec31 on model, scope and verify) (#228)
  
  Brett Heap
  and
  claude
  committed
  0da3386
- T003: tests/package_layout.py builds the package's fake installed layouts
  
  Brett Heap
  and
  claude
  committed
  0e99729
- tasks.md: T003 done (accepted 0e99729 on model, scope and verify) (#228)
  
  Brett Heap
  and
  claude
  committed
  0670b42
- Merge main f595e44 into 006-release-pypi (#228)
  
  Brett Heap
  and
  claude
  committed
  4ae999d
- T004: tests/test_install_pipx.py holds pipx's link, its skip and the offline package install (US1)
  
  Brett Heap
  and
  claude
  committed
  7921a2e
- T006: hold src/openrepotools to the standard library, and compile it (#228)
  
  Brett Heap
  and
  claude
  committed
  d57b75d
- T010: rewrite the docstring of test_version_names_the_repository_and_the_ref
  
  Brett Heap
  and
  claude
  committed
  fa44864
- T005: tests/test_package.py holds pyproject.toml, the payload map, a built wheel and the console script
  
  Brett Heap
  and
  claude
  committed
  b286953
- tasks.md: T005, T006 and T010 done, each built in its own lane-3 task worktree and cherry-picked here (#228)
  
  Brett Heap
  and
  claude
  committed
  2e4a633
- tasks.md: T004 done (accepted 7921a2e on model, scope and verify, 09:03:08Z) (#228)
  
  Brett Heap
  and
  claude
  committed
  2539a87
- Release tags and PyPI: the lead's ruling of 2026-10-18 on T007's report, and task T026 (#228)
  
  Brett Heap
  and
  claude
  committed
  85ae5f0
- T007: add the entry module, whose main() execs bash on the packaged installer
  
  Brett Heap
  and
  claude
  committed
  a5c1538
- tasks.md: T007 done (accepted 1134471 on model, scope and verify, 09:13:50Z; cherry-picked from 006-release-pypi-t007 with an identical patch-id) (#228)
  
  Brett Heap
  and
  claude
  committed
  6b13ac2
- T008: openRepoTools leaves pipx's link to pipx, and refuses a venv-shaped link without an rm (#228)
  
  Brett Heap
  and
  claude
  committed
  b67efa5
- tasks.md: T008 done (accepted d5aa53b on model, scope and verify, 09:42:06Z; cherry-picked from 006-release-pypi-t008 with an identical patch-id) (#228)
  
  Brett Heap
  and
  claude
  committed
  691c638
- T026: put back the signals Python ignores before the exec, and refuse a PATH that ends in a file
  
  Brett Heap
  and
  claude
  committed
  bf5e6e2
- tasks.md: T026 done (accepted 28d9346 on model, scope and verify, 09:45:25Z; cherry-picked from 006-release-pypi-t026 with an identical patch-id); User Story 1 is complete (#228)
  
  Brett Heap
  and
  claude
  committed
  d3a6115
- T009: tests/test_package_stamp.py holds the stamp reader, hatch's agreement, --version and the broken stamp
  
  Brett Heap
  and
  claude
  committed
  7ffd486
- tasks.md: T009 done (accepted 55004f2 on model, scope and verify; cherry-picked from 006-release-pypi-t009 with an identical patch-id) (#228)
  
  Brett Heap
  and
  claude
  committed
  a8b5f7f
- T012: tests/test_install_pipx.py holds coexistence, pip's script, the PATH report, the upgrade and the uninstall
  
  Brett Heap
  and
  claude
  committed
  7e64851
- tasks.md: T012 done (accepted 75e27d0 on model, scope and verify; cherry-picked from 006-release-pypi-t012 with an identical patch-id) (#228)
  
  Brett Heap
  and
  claude
  committed
  e42c744
- T011: openRepoTools reads its package's stamp and prints its release (#228)
  
  Brett Heap
  and
  claude
  committed
  902d199
- tasks.md: T011 done (accepted bf7264a on model, scope and verify; cherry-picked from 006-release-pypi-t011 with an identical patch-id); User Stories 1 and 2 are complete (#228)
  
  Brett Heap
  and
  claude
  committed
  628a46f
- Merge main 586dea2 into 006-release-pypi (#228)
  
  Brett Heap
  and
  claude
  committed
  3351007
- T013: openRepoTools names the other source beside pipx's link, refuses pip's console script and reports a shadowed PATH (#228)
  
  Brett Heap
  and
  claude
  committed
  03c3eb7
- 006 docs: the documents say what 628a46f does, and the counts follow #237 (#228)
  
  Brett Heap
  and
  claude
  committed
  755ff9d
- tasks.md: T013 done (accepted 55c9a02 on model, scope and verify: 538 passed, 15 skipped; cherry-picked from 006-release-pypi-t013 as 03c3eb7 with an identical patch-id); User Stories 1 to 3 are co…
  
  Brett Heap
  and
  claude
  committed
  32d9018
- 006 docs 2: the stamp's readers say at run time, FR-047 is decided, T013's two rulings are written down (#228)
  
  Brett Heap
  and
  claude
  committed
  c1c1c71
- PR 1 review: tests for the guard's three non-ASCII folds, the count line's <source> in an assembly's three layouts, and the PATH report's silent skip (#228)
  
  Brett Heap
  and
  claude
  committed
  b7c111c
- PR 1 review: the PATH report's silent skip is in cli-output.md, research R7 names all four directories, and the stale line citations are re-derived (#228)
  
  Brett Heap
  and
  claude
  committed
  65166ea
- PR 1 review: design.md's line citations are re-derived (#228)
  
  Brett Heap
  and
  claude
  committed
  08743b0
- Merge main 08e7550 into 006-release-pypi (#228)
  
  Brett Heap
  and
  claude
  committed
  fc8e37d
- T014: the two hash locks, openRepoShape v1.1.0's byte for byte below headers rewritten for #228
  
  Brett Heap
  and
  claude
  committed
  c4bc7bf
- T015: tests/test_tests_workflow.py holds tests.yml's triggers, four jobs and package job (#228)
  
  Brett Heap
  and
  claude
  committed
  f526a0a
- T016: tests.yml pushes on main and release/v*, and its package job builds, checks, installs and tests the wheel (#228)
  
  Brett Heap
  and
  claude
  committed
  cebac37
- T017: AGENTS.md's CI paragraph names tests.yml's four jobs, its two push branches and the release workflow's macOS leg as the one bash 3.2 run (#228)
  
  Brett Heap
  and
  claude
  committed
  43b4e52
- tasks.md: T014 to T017 done (#228)
  
  Brett Heap
  and
  claude
  committed
  85a7b05
- T018: tests/test_release_workflow.py holds release.yml, its hash locks and its stamp writer (#228)
  
  Brett Heap
  and
  claude
  committed
  7b5167a
- T019: release.yml's shape and its build job, adapted step for step from openRepoShape v1.1.0 (#228)
  
  Brett Heap
  and
  claude
  committed
  0de7213
- T020: release.yml's testpypi, install and pypi jobs, adapted from openRepoShape v1.1.0 (#228)
  
  Brett Heap
  and
  claude
  committed
  fb2249f
- T021: release.yml's RELEASING header, in contracts/workflows.md's six sections (#228)
  
  Brett Heap
  and
  claude
  committed
  a04b9e2
- PR 3 docs: the empty-index check is the model's, no file but the verified wheel at its digest (#228)
  
  Brett Heap
  and
  claude
  committed
  ac2ca2b
- tasks.md: T018 to T021 done (#228)
  
  Brett Heap
  and
  claude
  committed
  29cc1b3
Commits on Oct 19, 2026
- PR 2 review: the build lock's header says the pipx lock carries the same tomli, and AGENTS.md says what the one bash 3.2 run is (#228)
  
  Brett Heap
  and
  claude
  committed
  5629a84
- PR 2 review: tests.yml's comment and a test docstring say the pipx lock carries the same tomli (#228)
  
  Brett Heap
  and
  claude
  committed
  fa3bd83
- Merge PR 2 review fixes (fa3bd83) into 006-release-pypi-pr3 (#228)
  
  Brett Heap
  and
  claude
  committed
  1b41ce7
- PR 3 review: a test holds the install check's offline --install to tests.yml's, line for line but for the fingerprint, and release.yml's comment says so (#228)
  
  Brett Heap
  and
  claude
  committed
  1d5d657
- PR 3 review: each upload job's guard is run on refs other than the version's own tag, and refuses each (#228)
  
  Brett Heap
  and
  claude
  committed
  2ed477f
- PR 3 review: the stamp writer writes neither copy until both are checked, and the whole step stamps the run's own repository (#228)
  
  Brett Heap
  and
  claude
  committed
  5116295
- PR 3 review: the wheel check is run on one synthetic wheel per member check, each refused naming what is wrong (#228)
  
  Brett Heap
  and
  claude
  committed
  d0620ab
- PR 3 review: the sha256 checks before each upload and before the install are held by their steps' names and commands, and the install check's is run (#228)
  
  Brett Heap
  and
  claude
  committed
  34f4239
- PR 3 review: the build's guard is held to refuse a ref that is neither a tag nor a branch (#228)
  
  Brett Heap
  and
  claude
  committed
  5bc35c3
- PR 3 review: design.md numbers the T020 ruling 15, and says the 3.9 leg compiles with compile() (#228)
  
  Brett Heap
  and
  claude
  committed
  c6cea2a
- PR 3 review, round 2: both upload jobs' index checks are run against a fake index, holding the lead's empty-index ruling and the served check's 20 reads (#228)
  
  Brett Heap
  and
  claude
  committed
  2a5d56c
- PR 3 review, round 2: the install check's --version step and its Python 3.9 step are run (#228)
  
  Brett Heap
  and
  claude
  committed
  7b1c693
- PR 3 review, round 2: the macOS rerun is tied to the offline --install, naming its ten differences (#228)
  
  Brett Heap
  and
  claude
  committed
  bc454ad
- PR 3 review, round 2: the header's approval step and branch cut are pinned, and both copies of the guard's table are tied to GUARD_ROWS (#228)
  
  Brett Heap
  and
  claude
  committed
  9682f0b
- PR 3b: the install check's fetch and pipx's link are run, with curl and pipx faked (#228)
  
  Brett Heap
  and
  claude
  committed
  4daaeda
- PR 3b: the approval and tag re-checks and the build's environments step are run under a forge (#228)
  
  Brett Heap
  and
  claude
  committed
  2f274c4
- PR 3b: the ref step is run on tags that a forge and a file:// origin hold (#228)
  
  Brett Heap
  and
  claude
  committed
  9762479
- PR 3b: the wheel check refuses metadata, entry points and a .dist-info set that are not the build's, each by name (#228)
  
  Brett Heap
  and
  claude
  committed
  2a83a61
- PR 3b: the stamp's tag and read-back checks, the gate's own head_sha filter, the build's cmp, the STAYS PUBLIC bullet and every job's step order are held by tests (#228)
  
  Brett Heap
  and
  claude
  committed
  0cf8142
- PR 3b: the clean step is run, and the test file's header says which decisive steps are run and which are read as text (#228)
  
  Brett Heap
  and
  claude
  committed
  76dd73c
- PR 3b: one spelling for the rehearsal's row, FR-029's additions named in the header and FR-028, step 1's comment made true, and US5's tenth scenario numbered (#228)
  
  Brett Heap
  and
  claude
  committed
  5ccd66e
- WIP: PR 3b, the re-check's NITs and the stamp step's two refs, written and not yet run (#228)
  
  Brett Heap
  and
  claude
  committed
  7376b34
Commits on Oct 20, 2026
- PR 3b's fix-up: the header names the dist step among the steps run, the step-order pin finds the guard and the install legs by their role, and W9's naming check reads only the ::error:: line (#228)
  
  Brett Heap
  and
  claude
  committed
  2ff7094
- Merge main f18b818 into 006-release-pypi-pr3b, as queue prefix q7k2-228pr3b-on-q6k (#228)
  
  Brett Heap
  and
  claude
  committed
  1957254

Commits

Commits on Oct 17, 2026

Commits on Oct 18, 2026

Commits on Oct 19, 2026

Commits on Oct 20, 2026