diff --git a/.project-docs/30-worklog/tasks/20260828-plugin-marketplace-client-5f8b3d72.md b/.project-docs/30-worklog/tasks/20260828-plugin-marketplace-client-5f8b3d72.md index 0144218..338d503 100644 --- a/.project-docs/30-worklog/tasks/20260828-plugin-marketplace-client-5f8b3d72.md +++ b/.project-docs/30-worklog/tasks/20260828-plugin-marketplace-client-5f8b3d72.md @@ -8,7 +8,7 @@ - Worktree: D:\Datas\OthersProjects\makelore-plugin-marketplace-client-5f8b3d72 - Base commit: 1ca8deb54b7b530ab8c5b6a5b7e613730c3b97ec - Owner: codex-root -- Status: In Progress +- Status: Completed ## Scope @@ -148,6 +148,16 @@ ## Outcome +- Marketplace Release A MakeLore implementation and live acceptance are complete. + The final R6 source commit + `32f703e1f4e41b1e7314bd63c6a034c1e412c9fb` was integrated as product commit + `c56ddb9d3b14990f5dcd4f12eaa58d925e569292`; final reviewed documentation head was + `474c6f7688fb728641da5f567e42bbf05ad45117`. +- R7 Standards and Spec independently passed the fixed range + `1ca8deb54b7b530ab8c5b6a5b7e613730c3b97ec...474c6f7688fb728641da5f567e42bbf05ad45117` + with zero actionable findings. XMA-01 then passed all twelve Release A groups. + Production trust activation remains HOLD only because the official Ed25519 public + key has not been supplied; the packaged app correctly fails closed without it. - MLM-00 completed. The coordinator unit is isolated from the exact accepted P0 evidence head, both documentation gates pass, semantic overlap is clear, and no client product file changed before opening MLM-01. @@ -354,15 +364,33 @@ documentation-drift, task-context completion, sole-parent, and clean-worktree gates passed. No trust key, package layout, packaged resource, or artifact verifier changed, so artifact packaging was not repeated before the fresh fixed-range review. +- MLM-06 R7 Standards task `20260830-marketplace-mlm06-standards-r7-a8c4e291` + and Spec task `20260830-marketplace-mlm06-spec-r7-b7d5f3a2` both returned PASS + with zero findings at exact clean head + `474c6f7688fb728641da5f567e42bbf05ad45117`. They rechecked Package Store cleanup, + Stable/Beta channel authority, system-included Data Service projection, account + cache/intent, effective resolver/registry/Pi lifecycle, Main/Renderer authority, + packaged trust reachability, and Release B exclusions. +- XMA-01 used the signed-in packaged Windows application at that exact head against + the real reviewed server and PostgreSQL. Marketplace and Data Service catalog/detail + were visible; account A Library state was isolated from account B; package install, + project enablement, Agent assignment, Pi materialization, immutable update/freeze, + cached rollback, lifecycle/account switching, and unknown-key fail-closed behavior + passed. System-included Data Service exposed no account/device download action. +- Final x64 staging, electron-builder, Windows artifact verification, and packed + Marketplace/Pi proof passed. `Makelore-2.0.0-win-x64.exe` was 208,235,670 bytes with + SHA-256 `738A2F6573C502281787F418EA666C6E62C287CA0EC13C6EB22369DAB0B3FFFA`. + The aggregate wrapper's only deviations were two external GitHub uv 0.10.0 download + reset/timeouts; exact cached uv 0.10.0 binaries were verified and used for the + successful x64 stage/build. No tracked client file changed during acceptance. ## Follow-ups -- Run fresh fixed-range MLM-06 R7 Standards and Spec reviews from the post-R6 - coordinator documentation checkpoint. Use one remediation owner only if a - supported Release A finding remains. -- Keep XMA-01, production activation, deployment, publication, push/PR, and every - Release B/Provider/hosted ticket closed until both repository reviews pass and the - required external inputs exist. +- Production activation remains HOLD until the official Ed25519 public key is built + into MakeLore. The matching server private key must remain deployment-secret-only; + no production key was generated or committed. +- Release B remains closed behind PROVIDER-GATE. No hosted Provider/runtime, metering, + refund, Plugin Charges, XMB-01, deployment, publication, push, or PR was started. ## Promotion Candidates