From 0efd19c9c3e82979554804d4e72b6fb5a3cbff7e Mon Sep 17 00:00:00 2001 From: Jinwoo-H Date: Tue, 14 Jul 2026 23:41:45 -0400 Subject: [PATCH] docs(ssh): record macOS signature policy CI Co-authored-by: Orca --- ...elease-implementation-checklist-summary.md | 8 +++-- ...github-release-implementation-checklist.md | 34 ++++++++++++++++++- 2 files changed, 38 insertions(+), 4 deletions(-) diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md index 8050f6335bf..3db90ccca3a 100644 --- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md +++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md @@ -40,9 +40,11 @@ complete a box. - Proven locally and in exact-head run [29385274738](https://github.com/stablyai/orca/actions/runs/29385274738): exact returned-file application into a fresh full runtime and final post-sign content identity contracts. - - Proven locally at `debb13f30` under `E-M3-MACOS-SIGNATURE-LOCAL-001`: final-tree-first, bounded - strict-codesign and exact Node/Orca Developer ID policy contracts. - - Active next: exact-head Node 24 execution on all six native jobs; real signing and missing + - Proven locally and in exact-head run + [29386372366](https://github.com/stablyai/orca/actions/runs/29386372366): final-tree-first, + bounded strict-codesign and exact Node/Orca Developer ID policy contracts run under Node 24 on + all six native jobs. This is contract proof, not proof of real Orca signatures or native trust. + - Active next: credential-free Windows Authenticode policy verification; real signing and missing oldest-floor snapshots remain externally gated. - Next external proof: kernel 4.18, macOS 13.5, Windows arm64 build 26100, and native signing/trust. - No tuple is enabled; every SSH transfer/runtime and rollout cell remains open. diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md index 005fbfb0b0d..86004609a38 100644 --- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md +++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md @@ -9,7 +9,7 @@ work; keep exact commands, runner identities, hashes, metrics, and residual gaps Date created: 2026-07-14
Last updated: 2026-07-14
Current phase: Milestone 3 / Work Package 2 oldest-supported-baseline and native-trust proof — **In progress — 2026-07-14, Codex implementation owner**; exact-head run [29373507297](https://github.com/stablyai/orca/actions/runs/29373507297) passes all six target-native build, smoke, exact clean-build equality, upload, SBOM, license, provenance, runner/toolchain, and prohibited-content cells, and direct inspection of every downloaded payload passes exact archive/subject hashes, archive-scoped SPDX identity, one-owner-per-file, dependency, commit/run/builder/runner, tool-version/hash, and closure assertions (E-M3-METADATA-CI-001); Windows x64/arm64 record strict `MSVC 14.44.35207` identities and distinct exact linker SHA-256 values despite the Git-for-Windows PATH collision; the all-six metadata/provenance gate is closed, while oldest-baseline execution, native signing/trust, cross-family remotes, and measured legacy baselines remain open; production/default behavior and every tuple state remain unchanged; no bundled-runtime path is enabled and no artifact is published
-Session checkpoint: **In progress — 2026-07-14, Codex implementation owner** — credential-free macOS post-sign strict-codesign and signer-policy verification contracts are implemented at `debb13f30` and locally green under E-M3-MACOS-SIGNATURE-LOCAL-001. Exact-head Node 24 execution on all six native jobs is the active gate; real Apple signing, returned production signatures, Gatekeeper/notarization, missing exact-floor snapshots, and native trust remain separately gated. Nothing is published or enabled, and legacy remains the production default.
+Session checkpoint: **In progress — 2026-07-14, Codex implementation owner** — credential-free macOS post-sign strict-codesign and signer-policy verification contracts are locally green under E-M3-MACOS-SIGNATURE-LOCAL-001 and pass under Node 24 on all six target-native jobs in exact-head run 29386372366 under E-M3-MACOS-SIGNATURE-CI-001. Credential-free Windows Authenticode policy verification is the next bounded artifact-only package; real Apple/SignPath signing, returned production signatures, Gatekeeper/notarization, Defender/WDAC, missing exact-floor snapshots, and native trust remain separately gated. Nothing is published or enabled, and legacy remains the production default.
Primary design: [SSH relay GitHub Release plan](./2026-07-14-ssh-relay-github-release-plan.html)
Motivating issues: [#8450](https://github.com/stablyai/orca/issues/8450), [#1693](https://github.com/stablyai/orca/issues/1693) @@ -8385,6 +8385,38 @@ diff --check`. prior build/smoke/equality/baseline, PR-check, and Golden control retains its outcome. Keep native signing/trust unchecked until real returned bytes pass target-native policy and endpoint gates. +### E-M3-MACOS-SIGNATURE-CI-001 — macOS signature-policy contracts pass on all six native jobs + +- Date: 2026-07-14 +- Owner: Codex implementation owner +- Source: exact head `6d47ef1458a9c57cc96fa26e1745eba8d73a7987`. +- Runner/remote/network: GitHub-hosted target-native Linux x64/arm64, macOS x64/arm64, and Windows + x64/arm64 artifact jobs under Node v24.18.0. This used no SSH remote, signing credential/service, + artifact publication, production path, or enabled tuple. +- Runs: + - Artifact: [29386372366](https://github.com/stablyai/orca/actions/runs/29386372366) + - PR Checks: [29386372337](https://github.com/stablyai/orca/actions/runs/29386372337) + - Golden E2E: [29386372362](https://github.com/stablyai/orca/actions/runs/29386372362) +- Result: PASS. All six native artifact jobs passed their macOS signature contract step. The macOS + arm64 job ran the focused suite 7/7 in 345 ms and the aggregate 28 files/148 tests in 3.95 + seconds. The Windows x64 job ran the suite 7/7 in 2.944 seconds and the aggregate 29 files/152 + tests (145 pass, 7 platform skips) in 8.69 seconds. Native job durations were Linux x64 4m09s, + Linux arm64 4m37s, macOS x64 10m27s, macOS arm64 2m47s, Windows x64 5m37s, and Windows arm64 + 10m29s. +- Regression controls: both digest-pinned oldest-Linux-userland supplements passed (x64 35s, arm64 + 53s); Windows x64 build-20348 passed in 1m10s. Windows arm64 retained the expected floor failure: + hosted build 10.0.26200 does not prove required build 26100 (`osBuild: false`). PR Checks passed + in about 14m05s; Golden Linux/macOS passed in about 4m37s/3m01s. +- Oracle proved: the credential-free policy suite parses and executes under the pinned release Node + on every target-native shell family while prior artifact and repository controls retain their + expected outcomes. +- Does not prove: real Orca Developer ID signatures, actual Apple signing or returned production + bytes, Gatekeeper/notarization, macOS 13.5, Windows Authenticode/Defender/WDAC, Windows arm64 build + 26100, SSH transfer/install, packaged desktop use, fallback/performance, or an enabled tuple. +- Follow-up: keep native signing/trust and every tuple unchecked. Implement the independent + credential-free Windows final-signature policy contract, and require real returned bytes plus + target-native endpoint gates before recording native-trust evidence. + ## Accepted Gaps No product gap is accepted merely because it appears in this list. Each entry requires explicit