Package Commons code with a pinned schema profile - #39
Merged
ClaudiuSchuster merged 1 commit intoSep 8, 2026
Conversation
ClaudiuSchuster
marked this pull request as ready for review
September 8, 2026 15:09
ClaudiuSchuster
deleted the
oss-oo/commons-release-artifact-60f8-20260908
branch
September 8, 2026 15:09
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Commons releases need a bounded code package before they can be promoted separately from the static site. This adds an offline create/verify CLI for the six production modules, with a caller-expected commit, exact byte hashes, fixed runtime requirements and a profile of the three existing migrations.
Capture rejects unexpected modules, changed migrations, unsafe filesystem references and oversized inputs. Packet verification rejects malformed metadata and altered bytes; an optional independent source capture checks reproducibility. The schema fingerprint preserves quoted SQL values and token boundaries. It establishes structural identity, while service behavior, authenticated provenance and live promotion remain separate gates.
The contributor guide and documentation map include the new contract and checks. The production paragraph now consistently describes the already active automatic static workflow. Worker and schema promotion remain unactivated.
Validation: complete local repository CI passed, with the final 21 artifact tests also rerun in normal and optimized Python after the last filter and race cases were added. The final repository check and 122 relative documentation links passed. A separate read-only production metadata comparison matched all 35 schema objects and six existing modules; it read no application rows and performed no mutation. The static site, production modules and migration files are unchanged.