trex/trex-core
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(release): clarify REL-012 provenance gates

Browse Source
This commit is contained in:
Hermes Agent
2026-07-17 10:11:09 +09:00
parent 81c9259be1
commit 3190c4b3f7
3 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/batches/bat-058_20260716_cost-basis-safe-sync-seed/verification.md
+1
View File
@@ -37,6 +37,7 @@
- Lead 판정: 사용자 지시에 따라 QC-7 `PASS-WITH-NOTES`를 수용하여 BAT-058의 `confirm-batch-verification`을 완료하고 `release-candidate`로 승격한다.
- Note 해소: REQ-123 AC-10의 release artifact/explicit approval/dry-run evidence/live execution은 **Release 단계의 별도 gate**다. 이 batch confirmation은 release approval, `sync --live`, 배포, credential 접근을 승인하지 않는다.
- Ledger note: 이전 QC 반복 횟수 표기는 과거 handoff 사이에 불일치가 있어 이 verification의 판정 근거로 사용하지 않는다. 이번 confirmation의 근거는 QC-7의 독립 verdict와 위 재실행 증적이다.
- Immutable provenance mapping: 구현 payload는 PR #43의 [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61)이다. post-commit PR QC는 docs-only head `81c9259`에서 focused `113 passed`, full `833 passed, 47 skipped`, Ruff/compileall/diff hygiene를 독립 재실행했고, `81a853a..81c9259`의 `trex_core`/`tests` delta가 없음을 확인했다. 그 QC의 initial FAIL은 코드 동작이 아니라 REL-012 source-publication 문서 모순이며, 해당 문서-only remediation과 re-QC가 merge 전 필요하다.
## 실행 커맨드 및 실제 재실행 결과
docs/releases/rel-012_20260717_cost-basis-safe-sync-seed-hotfix.md
+5 -4
View File
@@ -19,9 +19,10 @@ portfolio-hub의 기존 cost-basis 응답에서 canonical `cost_basis_per_unit`
| --- | --- | --- |
| Remote `origin/main` | `18bd8d9f0b7bb76b08303bbf8743e6ddf916de89` (2026-07-17 fetch) | BAT-058 source is **not included** in this remote revision. |
| BAT-058 candidate | [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) on `origin/feat/dcy-038-cost-basis-safe-sync-seed` | Reviewed code + BAT/REL/runbook source is published; target remains subject to production approval. |
| Immutable deploy target | [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) | Published and remote-ref verified 2026-07-17; operations independently re-verifies before execution. |
| Immutable deploy payload | [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) | Published and remote-ref verified 2026-07-17; this is the immutable **code/test payload** used for the daemon checkout. |
| Authoritative release manifest | This REL-012/runbook revision on PR #43 | A docs-only successor of `81a853a`; it is **not** the daemon payload. Before execution, operations records both the immutable payload SHA and the exact manifest commit URL used for the approved runbook. |
This document is a release draft and a preflight request only. It does **not** authorize deployment, daemon restart, broker/portfolio access, `sync --live`, database writes, configuration activation, or credential access.
The immutable daemon deploy payload and the release manifest have distinct roles: `81a853a` is the verified code/test payload; the REL-012/runbook document is an immutable docs-only successor on the same PR. Operations must record both revisions in its evidence. This document is a release draft and preflight request only. It does **not** authorize deployment, daemon restart, broker/portfolio access, `sync --live`, database writes, configuration activation, or credential access.
## Included scope
@@ -48,14 +49,14 @@ A single-target `sync --live --yes` remains a separately approved post-release a
| Focused Ruff | **PASS** | Changed adapter/reconcile/CLI and relevant tests: `All checks passed!`. |
| Focused compile check | **PASS** | Six changed source/test paths, `compileall -q`, exit `0`. |
| Live broker, live PostgreSQL, production deploy | **NOT EXECUTED** | Outside batch verification and this draft; no claim is made. |
| Source publication | **PENDING** | No immutable remote candidate SHA exists yet. |
| Source publication | **PUBLISHED** | Immutable daemon payload [`81a853a`](https://github.com/fourblocks2020/trex-core/commit/81a853a314391da7a8bc9df5517013c7fd296d61) is remote-ref verified on `origin/feat/dcy-038-cost-basis-safe-sync-seed`; authoritative REL/runbook is a docs-only successor in PR #43. Operations records both revisions before execution. |
## Release approval gates
All items must be satisfied before operations executes the runbook:
- [x] Git-ops published the reviewed source and initial REL/runbook draft; target `81a853a` is remote-ref verified on `origin/feat/dcy-038-cost-basis-safe-sync-seed`.
- [ ] Operations verifies that exact target SHA contains REL-012 and its runbook, and captures the actual deployed revision as `ROLLBACK_REVISION`.
- [ ] Operations verifies the exact immutable daemon payload SHA **and** records the exact immutable REL/runbook manifest commit URL used for the run; captures the actual deployed revision as `ROLLBACK_REVISION`.
- [ ] User/approver explicitly authorizes production execution and the approved off-market window is recorded.
- [ ] Operations confirms the source checkout is clean; existing runtime configuration and credential/break-glass modes will not change.
- [ ] Operations confirms no dependency or migration delta exists between `ROLLBACK_REVISION` and the exact target SHA.
docs/runbooks/rel-012-cost-basis-safe-sync-seed-deployment.md
+2 -1
View File
@@ -99,7 +99,8 @@ Approved by / timestamp: [REDACTED AS NEEDED]
Window: [REDACTED]
Host / instance key: [REDACTED]
Pre-deploy revision (ROLLBACK_REVISION): <sha>
Target revision: <approved immutable sha>
Target revision: <approved immutable daemon payload SHA>
Release manifest revision: <immutable commit URL of the REL-012/runbook revision used>
Configuration/credential mode unchanged: yes/no (values not recorded)
Checkout clean: pass/fail
Dependency/migration path delta: none / stop