docs(marketplace): close release a acceptance

This commit is contained in:
2026-08-30 11:50:06 +08:00
parent 474c6f7688
commit 40df677a31

View File

@@ -8,7 +8,7 @@
- Worktree: D:\Datas\OthersProjects\makelore-plugin-marketplace-client-5f8b3d72
- Base commit: 1ca8deb54b7b530ab8c5b6a5b7e613730c3b97ec
- Owner: codex-root
- Status: In Progress
- Status: Completed
## Scope
@@ -148,6 +148,16 @@
## Outcome
- Marketplace Release A MakeLore implementation and live acceptance are complete.
The final R6 source commit
`32f703e1f4e41b1e7314bd63c6a034c1e412c9fb` was integrated as product commit
`c56ddb9d3b14990f5dcd4f12eaa58d925e569292`; final reviewed documentation head was
`474c6f7688fb728641da5f567e42bbf05ad45117`.
- R7 Standards and Spec independently passed the fixed range
`1ca8deb54b7b530ab8c5b6a5b7e613730c3b97ec...474c6f7688fb728641da5f567e42bbf05ad45117`
with zero actionable findings. XMA-01 then passed all twelve Release A groups.
Production trust activation remains HOLD only because the official Ed25519 public
key has not been supplied; the packaged app correctly fails closed without it.
- MLM-00 completed. The coordinator unit is isolated from the exact accepted P0
evidence head, both documentation gates pass, semantic overlap is clear, and no
client product file changed before opening MLM-01.
@@ -354,15 +364,33 @@
documentation-drift, task-context completion, sole-parent, and clean-worktree gates
passed. No trust key, package layout, packaged resource, or artifact verifier changed,
so artifact packaging was not repeated before the fresh fixed-range review.
- MLM-06 R7 Standards task `20260830-marketplace-mlm06-standards-r7-a8c4e291`
and Spec task `20260830-marketplace-mlm06-spec-r7-b7d5f3a2` both returned PASS
with zero findings at exact clean head
`474c6f7688fb728641da5f567e42bbf05ad45117`. They rechecked Package Store cleanup,
Stable/Beta channel authority, system-included Data Service projection, account
cache/intent, effective resolver/registry/Pi lifecycle, Main/Renderer authority,
packaged trust reachability, and Release B exclusions.
- XMA-01 used the signed-in packaged Windows application at that exact head against
the real reviewed server and PostgreSQL. Marketplace and Data Service catalog/detail
were visible; account A Library state was isolated from account B; package install,
project enablement, Agent assignment, Pi materialization, immutable update/freeze,
cached rollback, lifecycle/account switching, and unknown-key fail-closed behavior
passed. System-included Data Service exposed no account/device download action.
- Final x64 staging, electron-builder, Windows artifact verification, and packed
Marketplace/Pi proof passed. `Makelore-2.0.0-win-x64.exe` was 208,235,670 bytes with
SHA-256 `738A2F6573C502281787F418EA666C6E62C287CA0EC13C6EB22369DAB0B3FFFA`.
The aggregate wrapper's only deviations were two external GitHub uv 0.10.0 download
reset/timeouts; exact cached uv 0.10.0 binaries were verified and used for the
successful x64 stage/build. No tracked client file changed during acceptance.
## Follow-ups
- Run fresh fixed-range MLM-06 R7 Standards and Spec reviews from the post-R6
coordinator documentation checkpoint. Use one remediation owner only if a
supported Release A finding remains.
- Keep XMA-01, production activation, deployment, publication, push/PR, and every
Release B/Provider/hosted ticket closed until both repository reviews pass and the
required external inputs exist.
- Production activation remains HOLD until the official Ed25519 public key is built
into MakeLore. The matching server private key must remain deployment-secret-only;
no production key was generated or committed.
- Release B remains closed behind PROVIDER-GATE. No hosted Provider/runtime, metering,
refund, Plugin Charges, XMB-01, deployment, publication, push, or PR was started.
## Promotion Candidates