Summary
The final v0.5.0 release-record generator emits the correct version, tag, commit SHA, checksum, license, and explicit SBOM/provenance disposition, but its issue lineage still points to retired legacy trackers (#2783, #2793, #2794, #2799, and #742). The accompanying artifact-record guide and clean-environment script header carry the same stale release model.
That output is not acceptable evidence for the current M1 release close in #192.
Scope
Acceptance criteria
graphforge-release-record-v1 output contains no retired tracker IDs.
- Tests pin the current M1 lineage.
- The final SHA record validates with
clean-env-verify.py and has a recorded SHA-256 checksum.
Blocks #192.
Summary
The final v0.5.0 release-record generator emits the correct version, tag, commit SHA, checksum, license, and explicit SBOM/provenance disposition, but its issue lineage still points to retired legacy trackers (
#2783,#2793,#2794,#2799, and#742). The accompanying artifact-record guide and clean-environment script header carry the same stale release model.That output is not acceptable evidence for the current M1 release close in #192.
Scope
Acceptance criteria
graphforge-release-record-v1output contains no retired tracker IDs.clean-env-verify.pyand has a recorded SHA-256 checksum.Blocks #192.