diff --git a/CHANGELOG.md b/CHANGELOG.md index f61bed6..8fc6bbc 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## Unreleased +- boundary-exception: close out v0.5.0 GitHub, crates.io, PyPI, and npm publication against frozen + core-A/B evidence and published artifact hashes; no Windows artifact or expanded public claims. - boundary-exception: reconcile v0.5.0 release-boundary CI metadata and DCO sign-offs for the reviewed release implementation; no new public support boundary is opened. - ci: index the v0.4.0 validation closeout and bind it to the existing source commit, and align diff --git a/docs/validation/README.md b/docs/validation/README.md index 43db180..f44dc5b 100644 --- a/docs/validation/README.md +++ b/docs/validation/README.md @@ -5,4 +5,5 @@ summary. Completed per-lane historical validation records were retired. - [v0.3.0 release closeout summary](v0-3-0-release-closeout-summary.md) - [v0.4.0 release closeout summary](v0-4-0-release-closeout-summary.md) +- [v0.5.0 release closeout summary](v0-5-0-release-closeout-summary.md) - [NIP-5.2 ethos-full build evidence](nip-5-2-ethos-full-build-evidence-2026-07-20.md) diff --git a/docs/validation/v0-5-0-release-closeout-summary.md b/docs/validation/v0-5-0-release-closeout-summary.md new file mode 100644 index 0000000..f3bbc1b --- /dev/null +++ b/docs/validation/v0-5-0-release-closeout-summary.md @@ -0,0 +1,29 @@ +# Ethos v0.5.0 Release Closeout Summary + +Status: closed on 2026-07-21. + +Validated source HEAD before this record: `bfb71970b65826c1826097d0a7bccd6bf2059e2d`. +Core-A evidence was bound to commit `77a62e3d18fdf1a6791c79e48892ab5671d13c8d`; npm B was +prepared from that frozen core and committed in core-B HEAD above. Both commits carry DCO +sign-offs. + +GitHub Release [v0.5.0](https://github.com/docushell/ethos/releases/tag/v0.5.0) is live, +non-draft, and non-prerelease. Its annotated tag dereferences to core-B HEAD. It contains the +macOS arm64 and Linux x64 caller-PDFium CLI archives and the optional `ethos-full` archives, +with checksum, inventory, and target-smoke sidecars. No Windows artifact was published. + +Published archive SHA-256 values: + +- `ethos-macos-arm64.tar.gz`: `30fa34afda745d168e1af39a134e2281f4a409d425765f3dc85c2e312fcbbcc2`; +- `ethos-linux-x64.tar.gz`: `592b175c00d147625f2f2ccc8bc5c74fb8a00ee37f178c363757f2c72404876e`; +- `ethos-full-0.5.0-macos-arm64.tar.gz`: `3ac08c2c32a1d08e4481cdeeb2b7a8b5780e9b0c09ebc40da9cbd59d4c2a4795`; +- `ethos-full-0.5.0-linux-x64.tar.gz`: `8608c3e5c7a51bed45d6ead7a717d59e226f27839ad8aab2fde384a46db425b1`. + +The Rust crates `ethos-doc-core`, `ethos-verify`, and `ethos-pdf` are live on crates.io at +`0.5.0`; the Python `ethos-pdf` wheel is live on PyPI at `0.5.0`; and +`@docushell/ethos-pdf@0.5.0` is live on npm. Release-prep, deterministic-build, target-smoke, +performance, claims, licence, package, and consumer validation gates passed before publication. + +The release retains the caller-provided PDFium boundary for base archives. Public benchmark, +speed, footprint, parser-quality, table-quality, hosted, production, and Windows packaged +claims remain outside the approved release boundary.