Repository navigation
Retain bounded installed evidence with explicit published and qualifier identities - #715
Merged
Merged
Conversation
…etain closed evidence
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The original fresh installed run passed org runtime qualification, then lost its evidence when upload rejected a colon in a copied NuGet HTTP-cache path; public was cancelled before execution. This correction retains closed per-context proof before cleanup and collects both serial feed results independently.
Read-only installed qualification now authenticates immutable published producer/publisher P separately from current reviewed qualifier Q. The complete finite P→Q path/blob/content audit retains unchanged runtime, package, model, trace, project, lock and tool inputs. Default publisher writer constraints remain bound to their own current source. The collector preserves actual archives, hidden metadata, locks, signatures, Core and Worker outputs with separate runtime, collection, cleanup and native upload outcomes under explicit caps.
Owning lineage: WASM-SHARED-01, existing .5-P2→S1 and the shared foundation plan. Accepted publication 39015233527 and failed installed 39016307973 keep their original identities; a new complete installed operation requires separate selection after source delivery.
Validation: independent exact-source review passed 6f5c56e. Full clean static preflight passed, including 37 publisher controls and 12 collector/audit/shell controls; all seven generation inputs and 71 accepted outputs are unchanged. Final required checks and complete 35-minute WASM qualification run on this PR. Local CLR/model/native/browser execution remains held. Actual new installed artifact fit, both feed closures and readback remain outstanding.