From 1c60985c9fe0d999484df6d48cc20a3018d9b8da Mon Sep 17 00:00:00 2001 From: SAPHID Date: Tue, 27 Oct 2026 05:11:26 +0000 Subject: [PATCH] Record v0.4.51 release verification --- docs/evidence/v0451-assets-2026-10-27.json | 76 ++++++++++++++++++++++ docs/evidence/v0451-release-2026-10-27.md | 75 +++++++++++++++++++++ 2 files changed, 151 insertions(+) create mode 100644 docs/evidence/v0451-assets-2026-10-27.json create mode 100644 docs/evidence/v0451-release-2026-10-27.md diff --git a/docs/evidence/v0451-assets-2026-10-27.json b/docs/evidence/v0451-assets-2026-10-27.json new file mode 100644 index 0000000..c44322b --- /dev/null +++ b/docs/evidence/v0451-assets-2026-10-27.json @@ -0,0 +1,76 @@ +{ + "tag": "v0.4.51", + "releaseId": 425049939, + "tagNameAtAudit": "v0.4.51", + "draftAtAudit": true, + "sha256sumsSha256": "9d28eae8610356cba56310c892b6dd16dfc55c0507c9089600ab86e9697a04f8", + "assets": [ + { + "name": "Frame-Control-mac-arm64.dmg", + "size": 177621496, + "sha256": "8c84ef490402c202ad694f9d363d792c5dbc9b046e40d8d834bcb6d7752ab6e8", + "udifTrailer": "ok" + }, + { + "name": "Frame-Control-mac-arm64.zip", + "size": 177449210, + "sha256": "3541b67985e3931b9469af9249df3f71133589d726ffbd7b0c2b9c1c3dd3f67c", + "zipCrc": "ok", + "members": 1673, + "bundleVersion": "0.4.51" + }, + { + "name": "Frame-Control-mac-x64.dmg", + "size": 184691853, + "sha256": "04fecaf012e6ab4ca139823d2220bf61b788568cdffbfdad22b5d0b2c2b63763", + "udifTrailer": "ok" + }, + { + "name": "Frame-Control-mac-x64.zip", + "size": 184535648, + "sha256": "7e9836d62f882fbaac3d9b35831410c5e6138d9b68fb93815cbd2bb9200bd46b", + "zipCrc": "ok", + "members": 1669, + "bundleVersion": "0.4.51" + }, + { + "name": "Frame-Control-Setup-x64.exe", + "size": 151882885, + "sha256": "a45996f621901c2df8fc41d9eca2ae3fcd6b9ff40de66ed8acfca9415a3a81b0", + "peMachine": 332 + }, + { + "name": "Frame-Control-win-x64.zip", + "size": 198837858, + "sha256": "41791b6ca2c40164eb44cdc29e1281886556c257b88bcd5f86941daddd15d66a", + "zipCrc": "ok", + "members": 1517 + }, + { + "name": "Frame-Control-linux-x86_64.AppImage", + "size": 179993078, + "sha256": "5ebbb931276cd3126cb3ecab88c6cde05f490cbd0e0205b418c32d00f765ea42", + "elfMachine": 62 + }, + { + "name": "Frame-Control-linux-arm64.AppImage", + "size": 171579329, + "sha256": "4205422b02b9207bf2cf59ce3eb847b601306cef326df9fb005a7df540d82bb5", + "elfMachine": 183 + }, + { + "name": "Frame-Control-linux-amd64.deb", + "size": 146747460, + "sha256": "7c3a4eae7fb2098c759cbd9a8194c326b70f2fa078030062c047e4c8418b4bef", + "debVersion": "0.4.51", + "architecture": "amd64" + }, + { + "name": "Frame-Control-linux-arm64.deb", + "size": 133829576, + "sha256": "793433d21e457d5422ea982678f50d5f3ac0c1c46d40c5dcebf42d16651d4995", + "debVersion": "0.4.51", + "architecture": "arm64" + } + ] +} diff --git a/docs/evidence/v0451-release-2026-10-27.md b/docs/evidence/v0451-release-2026-10-27.md new file mode 100644 index 0000000..4de10be --- /dev/null +++ b/docs/evidence/v0451-release-2026-10-27.md @@ -0,0 +1,75 @@ +# v0.4.51 tagged release verification, 27 October 2026 + +The annotated `v0.4.51` tag dereferences to merged main commit +`4da7220660ba345bc46cdb525b6c512bc6a9d8bd`. Its tree +`16aa888207e8661280aa659c96a08fee05f17689` exactly matches reviewed +[candidate PR #364](https://github.com/saphid/frame-control/pull/364) head +`728a4dbe9b049e5f5cfcd6de02d9ca858d3e9aa4`. The candidate source +passed the locked smoke described in +[its evidence](v0451-candidate-2026-10-27.md). + +## Exact commit and tagged build gates + +- [Main checks](https://github.com/saphid/frame-control/actions/runs/40451752952) + passed on the tag commit: all seven jobs on the first attempt, including + e2e, iOS, Windows, macOS, Linux and the aggregate check. +- [Native Decky runtime](https://github.com/saphid/frame-control/actions/runs/40451752953) + passed on the tag commit: both published Decky 3.3.0 AMD64 and ARM64 jobs. +- An exact-main [installer preview](https://github.com/saphid/frame-control/actions/runs/40451826490) + built all four platform installers successfully before tagging. Its draft + and checksum jobs were inapplicable to manual preview runs. +- The [exact-tag release workflow](https://github.com/saphid/frame-control/actions/runs/40452627862) + passed all six jobs on its first attempt: draft, Linux, Windows, Intel Mac, + Apple Silicon Mac and checksums. No tagged job failed, was cancelled, + skipped or overridden. + +The unpublished draft held exactly ten installers and `SHA256SUMS` before +publication. Every installer was independently downloaded by GitHub asset ID, +one at a time. Each downloaded size and SHA-256 matched GitHub's asset +metadata; the downloaded `SHA256SUMS` matched all ten entries byte for byte. +Its SHA-256 was +`9d28eae8610356cba56310c892b6dd16dfc55c0507c9089600ab86e9697a04f8`. +The [sanitized asset audit](v0451-assets-2026-10-27.json) records all ten +names, sizes, hashes and package checks. It checked both Mac ZIP CRCs and +bundle version `0.4.51`, both DMG UDIF trailers, Windows ZIP CRC and PE +installer header, both AppImage ELF architectures, and both DEB version and +architecture fields. + +The independently downloaded Linux x86_64 AppImage had SHA-256 +`5ebbb931276cd3126cb3ecab88c6cde05f490cbd0e0205b418c32d00f765ea42`. +It launched under isolated Xvfb with a temporary profile, telemetry and +update checks disabled. Its bundled server returned HTTP 200 with +`FrameControl/1` and stopped after app exit. No physical Mac or Windows +launch of these exact installers was performed. + +## Real Frame and publication + +The [candidate evidence](v0451-candidate-2026-10-27.md) records a unique-lock +real Frame smoke on the version-bumped source: **12 passed, one optional +x86_64 launch skipped, zero failed**. Steam Linux Runtime 4 was absent, so no +x86_64 launch is claimed. A separate fresh-lock audit found no reserved smoke +title files, metadata or owned processes; both locks were released. SteamVR +activity was 3 (standby), proximity raw 4.6875, battery 88% before and 91% +while charging at audit. There was no wearer confirmation, wake command or +worn interaction test. The private smoke result's SHA-256 is +`c2b9611e072fd08109c31f4aa05a4ba6b93de82f532a7d87a4a1c6dcd52024a3`. + +`scripts/publish-release.sh --dry-run v0.4.51` passed exact-main, native +runtime and tagged release jobs, all ten installer hashes, regenerated +`SHA256SUMS`, draft notes and update-manifest checks. The real publisher +repeated those gates, attached `update.json`, and published +[v0.4.51](https://github.com/saphid/frame-control/releases/tag/v0.4.51) at +**05:10:05 UTC**. GitHub's latest-release API returned `draft=false`, +`prerelease=false`, ten installers, `SHA256SUMS` and `update.json`. A fresh +public latest-download of `update.json` reported version `0.4.51`, the correct +release page, ten hashes matching the independent downloads, and the worn +limit in its notes. The public manifest's SHA-256 was +`27bc0e45acf6b9a5677639e66ab501f2acc3eb7f5c0f4f867ced8a5d11825c52`. + +The exact-version Decky catalog is **6 works / 52 partial / 47 broken / +11 N/A**. Managed Decky Localsend is **partial**: real Frame testing proved +only its rebuilt helper's private marker transfer, while the published +Decky 3.3.0 runtime gate proved discovery and stopped status/configuration +RPCs. Real managed-service operation, user-facing transfer, network +discovery, Steam routes, worn visibility and physical-controller input remain +unverified. The hourly shared-lock worn check remains enabled.