Skip to content

Add approved release automation#19

Merged
hudsonaikins merged 12 commits into
mainfrom
codex/v0.3-release-automation
Jul 16, 2026
Merged

Add approved release automation#19
hudsonaikins merged 12 commits into
mainfrom
codex/v0.3-release-automation

Conversation

@hudsonaikins

@hudsonaikins hudsonaikins commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add a fail-closed tabellio-preflight command for GitHub, Entire, hook trust, and release readiness
  • add integrity-bound release intents, one-hour approvals, and resumable exact post-merge publication
  • publish all three private control refs, one canonical annotated version tag, and a final GitHub release as one approved workflow
  • harden all 50 review findings across ten review passes: effective fetch/push-target binding, private control verification, successful-receipt reconciliation, canonical tag metadata, release locking, squash evidence, terminal-check blocking, ready-event retention, versioned review/validation evidence, live-main checks, external receipt state, exact review-head binding, per-phase approval expiry, pinned control publication, and pre-release remote-tag revalidation
  • ship immutable tabellio-review-cycle/v0.2 and v0.3 schemas plus tabellio-validation-result/v0.1 and v0.2 schemas with latest-version aliases
  • add v0.3.0 package entry points, release notes, examples, operations guidance, and tests

Why

The GitHub-only migration removed alternative hosted Git surfaces, but onboarding still exposed Entire hook-trust failures only through raw doctor output and release finalization remained manual. This makes both boundaries deterministic, actionable, and fail-closed.

Merge remains an explicit action outside the release executor because a squash merge SHA cannot be bound before GitHub creates it.

Validation

  • npm run check — 86 tests plus every repository contract/example check
  • fallow@2.89.0 audit --base origin/main --gate new-only — pass; zero introduced dead code, complexity, or duplication
  • npm pack --dry-run --json — 120 package entries; all four immutable versioned schemas included
  • git diff --check
  • isolated end-to-end dogfood: complete three-ref control publication, verbatim approved tag titles, canonical annotated tag objects, live-main pre-tag recheck, per-phase approval expiry, external receipt roots, commit-bound release notes, successful-receipt rollback reconciliation, and existing-release reconciliation
  • exact publication-target regressions: control-remote retargeting cannot redirect private refs, and between-phase remote-tag replacement blocks GitHub release publication
  • squash regression: commands run on the merged commit while Entire checkpoint proof remains bound to the exact pull-request head
  • review-head drift regression: terminal REST sync cannot substitute a different head for the earlier GitHub PR-view and checkpoint evidence
  • ready-event saturation regression: exact-head readiness survives a terminal sync when the 100-event audit window trims old events
  • legacy compatibility regressions: v0.2 review cycles and v0.1 validation results remain readable, retain resolvable schemas, and upgrade on later writes
  • effective Git target regression: explicit push URLs and pushInsteadOf rewrites fail closed when fetch/push repositories differ
  • live preflight: all checks pass except local Codex hook trust; remediation is to approve the four repository hooks through /hooks

Safety

No production tag, GitHub release, npm publish, deploy, or live control-ref publication is part of this merge.

Entire-Checkpoint: a23449f406cf
@hudsonaikins
hudsonaikins marked this pull request as ready for review July 15, 2026 22:58
Entire-Checkpoint: a23449f406cf

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 18bc63336d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/preflight.mjs
Comment thread scripts/lib/release-planner.mjs Outdated
Comment thread scripts/lib/preflight.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-planner.mjs
Comment thread scripts/lib/preflight.mjs Outdated
Comment thread scripts/lib/release-operation.mjs Outdated
Comment thread schemas/release-operation-receipt.schema.json Outdated
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c891023bfb

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/release-workflow.mjs
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-planner.mjs
Comment thread scripts/lib/preflight.mjs Outdated
Comment thread schemas/release-operation.schema.json Outdated
Comment thread scripts/lib/contract-checks.mjs
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5e631e02a7

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/review-cycle.mjs
Comment thread scripts/lib/release-operation.mjs
Comment thread scripts/lib/release-operation.mjs
Comment thread scripts/lib/release-planner.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-planner.mjs
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 72d579611d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/release-planner.mjs
Comment thread scripts/lib/release-workflow.mjs
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/github-repository.mjs
Comment thread scripts/lib/release-workflow.mjs Outdated
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 29248aabd3

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/release-planner.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/preflight.mjs Outdated
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2fd2c98b05

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/release-workflow.mjs Outdated
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4d29e282f9

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/review-cycle.mjs Outdated
Comment thread scripts/lib/validation-runner.mjs
Comment thread scripts/lib/release-workflow.mjs Outdated
Comment thread scripts/lib/review-cycle.mjs Outdated
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3dd78619ed

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/release-workflow.mjs
Comment thread schemas/validation-result.schema.json Outdated
Comment thread scripts/lib/release-workflow.mjs
Comment thread scripts/lib/release-operation.mjs
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5413ea000d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/release-planner.mjs Outdated
Comment thread scripts/lib/release-workflow.mjs Outdated
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b47b0329ab

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread scripts/lib/release-workflow.mjs
Comment thread scripts/lib/release-workflow.mjs
Entire-Checkpoint: 1e7d65448717
@hudsonaikins

Copy link
Copy Markdown
Contributor Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. You're on a roll.

Reviewed commit: 2a04334143

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

@hudsonaikins
hudsonaikins merged commit 617b89a into main Jul 16, 2026
3 checks passed
@hudsonaikins
hudsonaikins deleted the codex/v0.3-release-automation branch July 16, 2026 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant