Verify reproducible release artifacts and map acceptance evidence

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e6f0-a6f6-7b93-9124-55ef584930e2
This commit is contained in:
tegwick 2026-09-28 10:22:52 +02:00
parent c976c9c277
commit c29bf39b5d
13 changed files with 577 additions and 3 deletions

View file

@ -22,3 +22,11 @@ later workplan tasks.
The 2026-09-14 live JSON receipt accompanies the human-readable host inventory.
Six unit tests cover transport failure, host argument validation, fixed command
transport and unknown-versus-synchronized semantics.
# Release verification
`python3 tools/verify_release.py --output /tmp/rclk-release-UNIQUE` builds and
compares source archives and wheels, installs the wheel into a fresh environment,
and runs `wheel_smoke.py` with isolated imports. It retains artifact/input hashes
and a runtime component SBOM. See [the procedure](../docs/release-verification.md)
for build pins, evidence and platform limits.