From cfe56d0fdb356a468d19dd67ff7eb01fc48955c7 Mon Sep 17 00:00:00 2001 From: Jinwoo-H Date: Thu, 16 Jul 2026 06:54:33 -0400 Subject: [PATCH] docs: record Windows compatibility CI Co-authored-by: Orca --- ...elease-implementation-checklist-summary.md | 10 ++- ...github-release-implementation-checklist.md | 68 +++++++++++++++++-- 2 files changed, 68 insertions(+), 10 deletions(-) diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md index 87d8b6b78eb..6e8f935c9d6 100644 --- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md +++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist-summary.md @@ -9,9 +9,9 @@ keeps commands, hashes, runner identities, timings, and failure details. A checked box means the work has evidence in the detailed ledger. Design approval alone does not complete a box. -Active checkpoint: **Milestone 5 / Work Package 4 desktop resolver/cache — run replacement -exact-head native proof for the corrected Windows first-use progress assertion, 2026-07-15, Codex -implementation owner.** +Active checkpoint: **Milestone 5 / Work Package 4 desktop resolver/cache — audit the smallest +disconnected full host-evidence composition boundary after native acceptance of every individual +compatibility detector, 2026-07-15, Codex implementation owner.** `E-M5-ARTIFACT-CACHE-RESOLUTION-CI-001` closes warm-cache commit `22031fa68` on all six native clients, both Linux supplements, Windows x64 baseline, PR Checks, Golden E2E, and computer-use; Windows arm64 remains the expected build-26200 rejection against 26100. `E-M5-ARTIFACT-CACHE-RESOLUTION-LOCAL-001` passes 9/9 purpose tests, @@ -265,6 +265,10 @@ stderr or that bounded progress shape with no error record; production code rema case workflow oracle, with only native execution skipped on macOS. Five explicit cases accept empty/ bounded-known progress and reject unknown, error, or oversized stderr. Typecheck, targeted lint/ format, max-lines, diff, and protected-resolver gates pass; replacement native CI is mandatory. +`E-M5-WINDOWS-COMPATIBILITY-DETECTION-CI-001` closes exact head `c489ee9f7`: all six primary native +clients, both Linux supplements, Windows x64 baseline, PR Checks, Golden E2E, and computer-use pass. +Both Windows architectures pass all 32 detector cases under native Windows PowerShell. Windows +arm64 completes full runtime proof and retains only the declared hosted build-26200 rejection against 26100. No live SSH, composer, product caller, setting/fallback, tuple, publication, or default exists. `E-M5-ARTIFACT-CACHE-ROOT-CI-001` closes the pure cache-root contract at exact head `aefcaa9a9`: all six primary native Node 24 jobs, both Linux supplements, Windows x64 baseline, PR Checks, Golden E2E, and computer-use pass; Windows arm64 build 26200 remains correctly gated against 26100. The diff --git a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md index 4f84bd00532..c01b7e9fb07 100644 --- a/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md +++ b/docs/reference/plans/2026-07-14-ssh-relay-github-release-implementation-checklist.md @@ -8,8 +8,8 @@ work; keep exact commands, runner identities, hashes, metrics, and residual gaps Date created: 2026-07-14
Last updated: 2026-07-15
-Current phase: Milestone 5 / Work Package 4 desktop resolver/cache — **In progress — 2026-07-15, Codex implementation owner: run replacement exact-head native proof for the corrected Windows first-use progress assertion**. Keep every capability disconnected from host-evidence composition and every production/default SSH path. Real Apple/SignPath rehearsals remain an explicit late gate and are not on this package's critical path.
-Session checkpoint: **WINDOWS COMPATIBILITY CORRECTION LOCAL GREEN / REPLACEMENT CI NEXT — 2026-07-15, Codex implementation owner** — `E-M5-WINDOWS-COMPATIBILITY-DETECTION-CORRECTION-LOCAL-001` accepts only empty or bounded known first-use progress stderr without an error record and rejects unknown, error, or oversized stderr. Purpose/workflow and static gates pass locally; require replacement native x64/arm64 plus all-six proof. Production code and every product/default path remain unchanged. Merging to `main` remains prohibited, SignPath is deferred, and legacy remains the production default.
+Current phase: Milestone 5 / Work Package 4 desktop resolver/cache — **In progress — 2026-07-15, Codex implementation owner: audit the smallest disconnected full host-evidence composition boundary after native acceptance of every individual detector**. Keep every capability disconnected from every production/default SSH path. Real Apple/SignPath rehearsals remain an explicit late gate and are not on this package's critical path.
+Session checkpoint: **WINDOWS COMPATIBILITY CI CLOSED / HOST COMPOSITION AUDIT NEXT — 2026-07-15, Codex implementation owner** — `E-M5-WINDOWS-COMPATIBILITY-DETECTION-CI-001` proves both native Windows architectures pass the strict detector, all six primary clients and both Linux supplements pass, Windows x64 baseline passes, and Windows arm64 retains only the declared build-26200/26100 runner mismatch after full runtime proof. Audit only the next disconnected composition boundary; do not add a product caller, settings/fallback wiring, tuple enablement, publication, or default behavior. Merging to `main` remains prohibited, SignPath is deferred, and legacy remains the production default.
Primary design: [SSH relay GitHub Release plan](./2026-07-14-ssh-relay-github-release-plan.html)
Motivating issues: [#8450](https://github.com/stablyai/orca/issues/8450), [#1693](https://github.com/stablyai/orca/issues/1693) @@ -147,11 +147,11 @@ same change as the work it records. local gates, and all-six native Node 24 proof are green under E-M5-ARTIFACT-CACHE-ROOT-LOCAL-RED-001, E-M5-ARTIFACT-CACHE-ROOT-LOCAL-001, and E-M5-ARTIFACT-CACHE-ROOT-CI-001. No Electron or product caller exists. -- Active package: **In progress — 2026-07-15, Codex implementation owner** — replacement exact-head - native proof for the locally-green test-only correction under - E-M5-WINDOWS-COMPATIBILITY-DETECTION-CORRECTION-LOCAL-001. Require native Windows x64 and arm64 - plus all-six client proof; keep host composition, live SSH, transfer/install, settings, fallback - wiring, tuple enablement, publication, defaults, and SignPath separately gated. +- Active package: **In progress — 2026-07-15, Codex implementation owner** — audit the smallest + disconnected full host-evidence composition boundary after + E-M5-WINDOWS-COMPATIBILITY-DETECTION-CI-001 closes every individual detector on native clients. + Keep live SSH, transfer/install, settings, fallback wiring, tuple enablement, publication, + defaults, and SignPath separately gated. - Completed Work Package 2 gate: target-native Windows source-signature reports from exact-head artifact jobs 87267322867 and 87267322870 were independently downloaded and matched to their identities and signing-stage reports under E-M3-WINDOWS-SOURCE-SIGNATURE-CI-001. PR Checks @@ -15872,6 +15872,60 @@ config/scripts/ssh-relay-runtime-workflow.test.mjs` — PASS, two files, 38 pass mandatory; live SSH, host composition, settings/fallback, tuple enablement, publication, and SignPath remain absent. +### E-M5-WINDOWS-COMPATIBILITY-DETECTION-CI-001 — both native Windows detector contracts close + +- Date/owner/source: 2026-07-15, Codex implementation owner; exact correction head + `c489ee9f712c275b755fa33d2bf72f99253b53b2` on draft PR + [#8741](https://github.com/stablyai/orca/pull/8741). Replacement SSH Relay Runtime Artifacts run + [29491431906](https://github.com/stablyai/orca/actions/runs/29491431906) checks out that exact SHA + and uses Node 24.18.0. +- All six primary native jobs pass: Windows x64 + [87598281195](https://github.com/stablyai/orca/actions/runs/29491431906/job/87598281195), Windows + arm64 [87598281158](https://github.com/stablyai/orca/actions/runs/29491431906/job/87598281158), + Darwin arm64 [87598281186](https://github.com/stablyai/orca/actions/runs/29491431906/job/87598281186), + Darwin x64 [87598281198](https://github.com/stablyai/orca/actions/runs/29491431906/job/87598281198), + Linux arm64 [87598281211](https://github.com/stablyai/orca/actions/runs/29491431906/job/87598281211), + and Linux x64 [87598281215](https://github.com/stablyai/orca/actions/runs/29491431906/job/87598281215). +- Native detector proof: each Windows job passes the 32-case + `ssh-relay-windows-compatibility-detection` suite under native Windows PowerShell — x64 in 2,213 + ms and arm64 in 3,610 ms. Each Windows native contract passes 85 files / 650 tests with 14 + declared skips. Each POSIX native contract passes 84 files / 659 tests with the one native-Windows + execution skip. This closes encoded syntax/execution, registry access, `sshd.exe -V`, bounded + first-use progress handling, strict parsing/rejection, cancellation, and command-construction on + both Windows architectures; it is still client/native-command evidence rather than live SSH. +- Both Linux oldest-userland supplements pass: x64 + [87599209993](https://github.com/stablyai/orca/actions/runs/29491431906/job/87599209993) and arm64 + [87599209998](https://github.com/stablyai/orca/actions/runs/29491431906/job/87599209998). The Windows + x64 oldest-baseline job + [87600150054](https://github.com/stablyai/orca/actions/runs/29491431906/job/87600150054) passes. +- The Windows arm64 oldest-baseline job + [87600150042](https://github.com/stablyai/orca/actions/runs/29491431906/job/87600150042) verifies the + full 60-entry / 42-file / 85,213,511-expanded-byte tree and content identity, Node v24.18.0 ABI + 137, PTY exit/resize, five watcher events, and two-second resource settlement. Smoke takes + 6,101.9951 ms at 50,077,696-byte RSS and complete verification takes 8,303.8299 ms. Its only + rejection is the previously declared hosted OS build 26200 against required build 26100; platform + and arm64 architecture checks pass and no new residual gap is reported. +- Full-size extraction stays at 1,319.09–3,574.53 ms and 31,191,040–47,452,160 incremental RSS + bytes across the six primary clients. Cold immutable-cache publication stays at + 1,789.86–4,013.22 ms and 32,522,240–50,397,184 incremental RSS bytes; warm lookup stays at + 191.14–589.48 ms and 0–6,123,520 incremental RSS bytes. Retention stays at 12.53–46.41 ms and + eviction at 32.54–91.28 ms. Every measurement remains within its existing budget. +- Adjacent exact-head checks pass: PR Checks run + [29491430511](https://github.com/stablyai/orca/actions/runs/29491430511), job + [87598223319](https://github.com/stablyai/orca/actions/runs/29491430511/job/87598223319); Golden E2E + run [29491430552](https://github.com/stablyai/orca/actions/runs/29491430552), Linux job + [87598223336](https://github.com/stablyai/orca/actions/runs/29491430552/job/87598223336) and macOS + job [87598223374](https://github.com/stablyai/orca/actions/runs/29491430552/job/87598223374); + computer-use run [29491430223](https://github.com/stablyai/orca/actions/runs/29491430223), Windows + job [87598222661](https://github.com/stablyai/orca/actions/runs/29491430223/job/87598222661) and + Ubuntu job [87598222670](https://github.com/stablyai/orca/actions/runs/29491430223/job/87598222670). +- Boundary/residual gaps: the detector remains imported only by its purpose test, with no host + composer or product caller. Hosted native PowerShell does not prove live Windows OpenSSH service, + remote startup noise/channel behavior, system-SSH/SFTP transfer capability, or representative + remote Windows versions. Full host composition, live SSH, transfer/install, settings/fallback, + tuple enablement, release publication, defaults, and SignPath remain absent. Legacy remains the + sole production/default path and every tuple stays disabled. + ## Accepted Gaps No product gap is accepted merely because it appears in this list. Each entry requires explicit