docs: Preserve beta.48 as an attestation negative specimen

[hatayama]

Summary

• Document that the broken beta.48 runner release is intentionally retained and must not be deleted.
• Direct consumers to beta.49 or later.

Purpose

• beta.48 is the only current production negative specimen for exercising real attestation mismatches.
• Its tag commit is 2d8d1b9 while its asset attestation digest is 2c73c6a.

Coverage

• Identifies the publish workflow, release sync, and dispatcher download verification paths that can be checked against the specimen.

Verification

• Markdown-only change. No runbook-content static test exists; reviewed the surrounding runbook for duplicate beta.48 guidance.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: a8cb4cf6-90b2-4ae6-b92e-0b6ab85de8e2

📥 Commits

Reviewing files that changed from the base of the PR and between 597a181 and e32d634.

📒 Files selected for processing (1)

• docs/release-recovery-runbook.md

🚧 Files skipped from review as they are similar to previous changes (1)

• docs/release-recovery-runbook.md

---

📝 Walkthrough

Walkthrough

The release recovery runbook adds operational guidance for preserving a broken beta.48 release and using its digest mismatch to validate publish and dispatcher attestation checks. It also directs operators to use beta.49 or later rather than pinning beta.48.

Changes

Release recovery documentation

Layer / File(s)	Summary
Preserved attestation specimen guidance docs/release-recovery-runbook.md	Adds instructions for retaining beta.48, testing digest and attestation verification with it, rejecting mismatched downloads, and using beta.49 or later for pinning.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• hatayama/unity-cli-loop#1799: Updates the same recovery runbook with publish and recovery-target guidance.
• hatayama/unity-cli-loop#1814: Documents recovery-target publishing guards related to release digest mismatches.
• hatayama/unity-cli-loop#1821: Addresses recovery guidance for broken releases caused by digest and attestation mismatches.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes preserving beta.48 as an attestation negative specimen.
Description check	✅ Passed	The description matches the change and clearly explains the preserved beta.48 specimen and its verification purpose.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch docs/preserve-beta48-negative-specimen

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/release-recovery-runbook.md`:
- Around line 95-98: Update the release recovery runbook text around the
production specimen to explicitly state that the publish workflow digest check,
sync’s verify_cli_release_attestations, and dispatcher download-time
verification must each reject a mismatched release. Preserve the existing
specimen context and surrounding instructions.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: d3e33490-3cd0-4cbf-95d1-c657e40c2fd8

📥 Commits

Reviewing files that changed from the base of the PR and between 81933de and 597a181.

📒 Files selected for processing (1)

• docs/release-recovery-runbook.md