unaltraweb 0.7.2 → 0.7.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: acaf4cf39c6e712f16e9815d41d137e94972a0224fb685d19fe36c3f82a7a195
-  data.tar.gz: fc287067a780f72c8d51ec287a889767cdce5420557733aff7a5e988fa17e45a
+  metadata.gz: 66c0a140c30b1c7d9f1353efc62b28eb3c379649160ba68ad6b262d1f91ec90a
+  data.tar.gz: f6d0c69a53d4b1a5de92777335c6cd1705f4946fb6390cac260fcbeac7db3361
 SHA512:
-  metadata.gz: 98a42d39c19df577bb5c69b08d2b20abdfa283d38e18dbbd45239cd7a887f0c43615b3d5a5d614f77f37f309b92aaaed666a5b90863a23595ff1e03f91e15de4
-  data.tar.gz: 765b280a1315f2be24e6bfc6894d5dc9f394ce201ccce86d7a994a6643e518bc45aceec473fea77d2e5cd3bf647031ca1a4943a72c9470b8d6607c53f0843bb9
+  metadata.gz: d3dff0655f66a91f8a56c301c2da3fd395ef4b2ef7cd33e80a2c858a86cb3a734058480d62bdfc7753663d93b44f2906076c8ce74a2504de1295856ae2b1cf04
+  data.tar.gz: 9e8ffdb6047bde3d209f47fe339dcb97fe3d60ca365468cc7a056860b041c7e1823b9c47e7974da3f20e7be0e0c0719f986a617318876f64556e551c169a71e6

data/Makefile

@@ -1,9 +1,9 @@
 PYTHON ?= python3
 override PROJECT := $${MCP_CONSUMER_WORKSPACE:?MCP_CONSUMER_WORKSPACE is required}
 override PROJECT_ROOT := $(PROJECT)
-MCP_RUNTIME_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.7.2
-MCP_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.7.2
-MCP_RELEASE_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:6aa20cff86c3891a876e37ba0548fa36f3c5633c9f22ba672e9f50123d677cf6
+MCP_RUNTIME_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.7.4
+MCP_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.7.4
+MCP_RELEASE_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:8183e7117f5902fc0ad4d930b757d874b2da1f93d5ef4db102ae4c1b03e357a3
 MCP_DOCKER_BUILD_NETWORK ?= default
 INIT_SITE_PROFILE ?= unaltreselfie
 NEW_WEB_PROFILE ?= unaltreselfie
@@ -40,7 +40,7 @@ WEB_CAPTURE_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-web-capture@sha256:0bf1b
 WEB_CAPTURE_DEV_IMAGE ?= unaltraweb-web-capture:dev
 WEB_CAPTURE_DOCKER_BUILD_NETWORK ?= default
 VEGAVISUALS_CLI ?=
-DOCKER_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.7.2
+DOCKER_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.7.4
 MANUAL_PDF_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:1bb3f2dafd741e96c28639ec1cc8ccaeb81cbaa73e649f787c0b4ef59997bd4b
 MANUAL_PDF_DEV_IMAGE ?= unaltraweb-manual-pdf:dev
 MCP_SMOKE_MANUAL_PDF_IMAGE ?= $(MANUAL_PDF_IMAGE)

data/README.md

@@ -34,7 +34,7 @@ The default distribution is Docker-first. Generated sites run their normal build
 
 ## Current Status
 
-- Public release [`v0.5.0`](https://github.com/dosquartsdedocs/unaltraweb/releases/tag/v0.5.0) provides the Docker images, Ruby gem and Python wheel as one receipt-bound distribution.
+- Published releases provide receipt-bound Docker images, Ruby gems and Python wheels. The 0.7.4 source unit corrects the native core/gem tuple and adds reviewed scaffold conflict resolution; see [the acceptance and migration record](docs/agents/scaffold-closeout-118.md) for publication status and exact boundaries.
 - `ghcr.io/dosquartsdedocs/unaltraweb-mcp` is the canonical normal local runtime for generated sites; `ghcr.io/dosquartsdedocs/unaltraweb` is its lower-level Jekyll runtime base.
 - The Ruby gem supports native Bundler/Jekyll consumers. The modular MCP wheel supports native creation and inspection, and does not bundle the gem, factory checkout, worker images or companion renderers.
 - PDF, browser-capture and computation environments remain separate images so the normal site image does not carry every heavy toolchain.

data/docs/_documentation/en/40-distribution.md

@@ -25,6 +25,23 @@ The template is the better place to validate gem consumption, centralized styles
 
 ## Component Contract
 
+### Coherent core pins and reviewed scaffold updates
+
+The 0.7.4 source contract distinguishes the package release from the gem version
+at the selected Git core. `consumer_integration.core_gem_version` drives the native
+Gemfile and lock, while the controller and reusable workflow retain independent
+pins. Source checks inspect the real referenced Git contract; installed acceptance
+resolves and builds that core with Bundler rather than comparing generated text.
+
+Conflicting managed ignore/workflow files can use explicit hash-bound reviews.
+The provider proposes conservative `keep`, `prepend-package` and `pins-only`
+results; it never accepts an arbitrary replacement or ignores a conflict.
+Local ignore order/negations and workflow controls are preserved, and stale
+reviews fail before mutation. The same manifest-last transaction and recovery
+guards apply. Subsequent plans retain the customization visibly.
+See the [owner migration record](https://github.com/dosquartsdedocs/unaltraweb/blob/main/docs/agents/scaffold-closeout-118.md)
+for the plan/review/apply sequence, acceptance and publication status.
+
 ### Published 0.7.1 release
 
 [**0.7.1**](https://github.com/dosquartsdedocs/unaltraweb/releases/tag/v0.7.1)

data/docs/agents/mcp-contract.md

@@ -333,7 +333,21 @@ source conservation and retained-input/domain validation. See
 
 At session start, `site_context.update_status` supplies an offline advisory against the active MCP package, including current literal version pins, target integration tuple, planned paths, preserved files, conflicts and `plan_sha256`. The agent explains available updates and asks for explicit acceptance before invoking `scaffold_sync` with that digest as `expected_plan_sha256`. The digest binds the consumer path, configuration, baseline, observed managed bytes and target package bytes; stale approval is rejected before writes. The parameter is optional for compatibility with existing explicit sync callers, but the guided flow always supplies it. An update can refresh scaffold controls without claiming a newer semver release. Unmanaged sites report an unavailable plan instead of being reinitialized. A declined update leaves normal content work available; there is no background network poll, self-upgrade, Git operation or automatic artefact regeneration. This flow requires a reviewed MCP/package release containing it and a reconnected client; updating the discovery checkout alone cannot replace the public digest-pinned runtime.
 
-Planning, version comparisons, conflict/preservation decisions and replacement bytes are deterministic code, also callable through the CLI without an agent. The agent controls invocation, explanation, collection of user acceptance and Git/review orchestration; the server cannot guarantee that an agent will present the startup offer. No LLM generates managed replacements or resolves conflicts within `scaffold_sync`. The plan is repeatable for the same bound path and input bytes; diagnostic time in the surrounding `site_context` response does not enter its digest.
+Planning, version comparisons, conflict/preservation decisions and replacement bytes are deterministic code, also callable through the CLI without an agent. The agent controls invocation, explanation, collection of user acceptance and Git/review orchestration; the server cannot guarantee that an agent will present the startup offer. No LLM generates managed replacement bytes within `scaffold_sync`. The plan is repeatable for the same bound path and input bytes; diagnostic time in the surrounding `site_context` response does not enter its digest.
+
+From 0.7.4, `scaffold_sync(..., review=...)` exposes a bounded reviewed-resolution
+path. Conflicted plans return `review_inputs` and deterministic `resolution_options`.
+The versioned `unaltraweb-scaffold-review` binds the original `base_plan_sha256`,
+each path/mode, baseline/local/payload/result hashes and a review reason. Supported
+modes retain all local ignore bytes (`keep` or package-before-local
+`prepend-package`) or update only defined workflow scalar pins (`pins-only`),
+preserving mandatory controls and unrelated local behavior. Missing/unsafe paths,
+unknown modes and version guards cannot be overridden. The resolved dry-run has
+its own hash, mandatory on apply together with the same review and confirmation.
+The manifest records the real upstream baseline and reviewed-result receipts;
+subsequent plans remain honest about customization. CLI uses `--review-json JSON`.
+See [scaffold-closeout-118.md](scaffold-closeout-118.md) for the public migration
+sequence and the independently selected native `core_gem_version`.
 
 Each scaffold is already reduced to one profile, so `profile_prune_plan` is not part of new-site creation. The prune rule remains available for existing mixed-profile sites.
 

data/docs/agents/qgis-0.6.1-adoption-109.md

@@ -0,0 +1,156 @@
+# Web #109 — QGIS 0.6.1 compatibility point
+
+Web **0.7.3 is published and verified**, with real consumer adoption remaining
+separate. This maintenance point changes the exact external private-QGIS
+dependency from 0.6.0 to 0.6.1. Published Web 0.7.2 remains immutable.
+
+Provider handoff: [Web #109](https://github.com/dosquartsdedocs/unaltraweb/issues/109#issuecomment-6283746978).
+Hub preparation: [gaContExt #38](https://github.com/dosquartsdedocs/gacontext/issues/38#issuecomment-6301327451).
+The latter has prepared/enrolled QGIS independently; it has not selected this new
+Web point or changed a real consumer cohort.
+
+## Published delivery
+
+[Release v0.7.3](https://github.com/dosquartsdedocs/unaltraweb/releases/tag/v0.7.3)
+was published at `2026-10-21T00:18:07Z`. Source PR110 and the two-line release-runner
+correction PR111 produced artifacts from `9d97197dec5fc9346ab795191a3afd18884c27fb`.
+Receipt-only PR112 integrated at `bff69e372b623ffba880be3d075bcc6f07d8c82b`, with
+that source as its first parent and no other file change. Annotated tag object:
+`5faa7bbd4d00994032f7b15b2d3aee7c8d836346`.
+
+The [machine-readable handoff](https://github.com/dosquartsdedocs/unaltraweb/releases/download/v0.7.3/release-handoff.json)
+has 13578 bytes and SHA-256
+`bd2962be42f296df856430a4e31c8aae6daf17f6858e4aaf240712da49cbb585`.
+It contains the complete credential-free artifact URLs, sizes, hashes, independent
+worker provenance, native selector roles and acceptance limits.
+
+| Published component | Identity |
+| --- | --- |
+| Web receipt | `7b3c8b12734554d60ae212d88028132ee982f96b8f9465b75a1ea84ad3e71f9e` |
+| Wheel, 286769 bytes | `bb27901e03063280f06be282559fefeb936c5350ace9c5d4ee9f322d57539af7` |
+| Gem, 33491456 bytes | `80886c7195bd6f6fa4b1c90f808864769d392abfdbc4deca3e7cadafae96589a` |
+| MCP registry digest | `sha256:8183e7117f5902fc0ad4d930b757d874b2da1f93d5ef4db102ae4c1b03e357a3` |
+| MCP configuration ID | `sha256:0a5b91a4c1c8b3b0bd8d3c4160ed1e5b9ccc8ad3cd0abee67f621d8636d15bd6` |
+| Base runtime registry digest | `sha256:fd23c62f31b4c0a612a17bfbbb93990dad367f261b415607b90219847efbf67a` |
+| Base runtime configuration ID | `sha256:6a067fc0de6054e7e882ffb5f84dc39709a4a6f3b2fe6ddf9817339085873564` |
+
+Signed candidate workflow `39516559493`, package preparation `39516559072`,
+receipt PR CI `39518426989`, tag CI `39519357013`, image promotion `39519454438`
+and Trusted Publishing `39519455129` pass. All source PRs used protected normal
+merges and explicit owner technical reviews. Copilot returned quota exhaustion;
+no independent human or completed Copilot approval is claimed.
+
+All 17 final GitHub assets, both registry packages, OCI aliases, configuration IDs
+and source labels were verified anonymously. The previous 17 Web 0.7.2 assets and
+its annotated tag remain identical. Final candidate synthetic acceptance:
+`ec07eef91c66411e166c0117b3a205491198bf2342776c8087eb647f5ad4c906`.
+A fresh launcher installed from the public GitHub wheel then passed real MCP
+resource reads, complete package-file equality, binding, no drift, limits and
+drain/EOF/exact absence:
+`849c38b70a8b634fb0757357747522b8e60769f29819f5c75365dd674693152e`.
+The earlier local preparation records below remain historical evidence.
+
+The post-release checkout selector uses the published MCP digest above. This is
+a later source-only pin, not a rebuild or alteration of the immutable tag/receipt.
+No global/consumer registration or existing connection was replaced.
+
+## Exact private dependency
+
+All inputs below were downloaded through authenticated GitHub acquisition into
+ignored `tmp/qgis-061-adoption-109/assets/`, then checked by bytes and SHA-256.
+Only the public metadata descriptor travels in Web; no private source, wheel,
+archive or credentials are included in the public wheel or image.
+
+| Identity | Value |
+| --- | --- |
+| QGIS source/tag | `1ca6ed95195d44097057d7165dc5dc0730cdf1c0`, `v0.6.1` |
+| External `release.json` | 1251 bytes, `c09148927767855e6694e246ae38a9bdda4181086d18f78c204999648ec1089c` |
+| Private wheel | 334648 bytes, `89998d9e41dcc90b8768ac036bf480e3501138d715824e12f928ab15f75dfbb7` |
+| Private two-image archive | 1372056314 bytes, `fa870962e40bf416aeea262047b32a148bb3a73f8ae2dff6cbd4b20426453d1d` |
+| Controller configuration ID | `sha256:d06b742c3e7d2e9383cf8a1d22bce928dd806f316a0bcbb1f676f50e22e94b05` |
+| Auxiliary QGIS engine | `sha256:1003721d96abe9607d8337b36851f9b29f84c2f8f92b377d1a73ff03c9d15cd2` |
+| Release producer revision | `sha256:35443a3343f403892b387c1622656ff3a242044b890fe4ea0cd1e66dd52653e1` |
+| Native `practice-schema` revision | `sha256:4604801be887a19747aa74c84a2d99141308fadde44f5cddacb4d821b6861398` |
+| Separately scoped published D0 code revision | `sha256:8e5f451cd0669c80e17c6b1b72f3e22dce53dbd405098ef67f6980cf759553bc` |
+| Web descriptor SHA-256 | `8f2ff3531ad2a65fab9992ac5ef01d3cec65b88625ee26d5b2149be8ad065b99` |
+
+The canonical private receipt URL is
+`https://github.com/dosquartsdedocs/unaltracaptura-qgis/releases/download/v0.6.1/release.json`.
+Its source, version, producer, wheel and two images match the Web declaration.
+The archive checksum, both configuration hashes, platform and declared layer
+presence were checked without extracting/loading/retagging the archive.
+The controller OCI source label remains actually absent (`null`), not the Git SHA.
+
+The native practice fingerprint is **4604801b…**, observed both through the
+installed provider CLI and inside its pinned controller. The D0 fingerprint
+**8e5f451c…** cannot replace it: an initial schema probe using that other scope
+was refused. Both v1/v2 probes pass with the native practice revision. Regression
+tests reject the old 0.6.0 revision, the D0 revision and the release producer as
+substitutes. The schema hashes remain respectively
+`9bc7f15ede9d67b3e1209c329da13d9fcb08004090d05b27662a43de6edf3445` and
+`528c8be229c72c346f134ffaa60094f94224094a25b6fb11bcc87802ddc7fffb`.
+
+`practice_verifier` remains the Web startup worker role. `engine.image_id` is the
+separate QGIS auxiliary, checked before native reopen, not a `qgis` entry in Web
+`--worker-images`. The bridge and lifecycle implementation are unchanged.
+PDF 0.7.1, its producer `b7ec1d7a139c65b3b0b88699cdbeb19080f13be1`, core/workflow
+`3332e0b93933f12317e05f1ce8d38ce80046feab`, Dia 0.5.0 and Vega 0.5.1 retain their
+independent selections. Public CI reports private execution as `not_run`.
+
+## Local synthetic acceptance
+
+`test/qgis_compatibility_smoke.py` accepts explicit already-acquired inputs and
+immutable image IDs. Its only GIS input is the provider's pinned
+`examples/portable-practice/`: two invented projected points, an 80 m buffer and
+a 32×24 synthetic raster. No manual, real dataset or existing screenshot is used.
+The provider example stays outside Git/public packages and its source blobs and
+hashes are retained alongside the downloaded inputs.
+
+The complete passing run is
+`tmp/qgis-061-adoption-109/local-acceptance-03/evidence.json`, SHA-256
+`3122e0751813ad24f0f2456adae84c792f7d3b0693bc504f3d9d73a30201a6fc`.
+
+- Local Web-only image: `sha256:765b10855cc70f5cdaf18d998bac8cdbe60621c3a8fcbc90f66bca8a02c0dfc7`.
+- Local wheel: `14fca099e7b725a0041f42bc32dfdb80bc34c454d5983bfda9ffbc090fe17827`.
+- Descriptor bytes match the source, built wheel and installed Web image.
+- Real MCP initialization, both practice `resources/read`, worker identity and
+  dry-run/actual composition pass with the fresh installed host launcher.
+- The native QGIS run retains eight successful controls, two GeoPackages, one
+  raster, two portable projects and its synthetic capture/bundle.
+- Each recipient receives a PDF and ZIP. Exact declared ZIP membership, member
+  hashes, PDF bytes/receipts, readable pages, recipient-specific text and retained
+  original inputs are checked. Repeated composition refuses overwrite.
+- Selected packet bytes extracted from each ZIP are rechecked and reopened in
+  QGIS. The observed engine uses only the selected readonly packet, network none,
+  and its exact CID is absent afterward. Private verifier teardown and Web
+  drain/EOF/session-status confirm resource release.
+
+Attempts 01/02 are retained: the acceptance driver initially inherited the host
+test `PYTHONPATH` in its wheel-install/session-status subprocesses. The driver now
+scrubs that environment, as it already did for the MCP launch. These were test
+driver failures, not successful installed acceptance or changes to production
+transport. The complete attempt 03 passes with the same Web package/runtime.
+
+Host suite: **731 discovered, 703 passed, 28 explicit optional skips**.
+`distribution-check`, `workflow-check`, `wheel-check`, `gem-check`, `mcp-check`
+and the full `mcp-smoke` pass. `docs-build` also passes. Docker Make checks use issue-owned development
+names (`unaltraweb:issue109-073`, `unaltraweb-mcp:issue109-073` and
+`unaltraweb-manual-pdf:issue109-073`), not published aliases. Gem checks execute
+inside that prepared Web image with network disabled.
+The wheel gate additionally checks descriptor/BOM byte equality and absence of
+private QGIS package roots. At this preparation checkpoint, exact-head review/CI
+and publication were still pending; the completed delivery is recorded above.
+
+## Publication contract and remaining adoption
+
+Use the normal reviewed-source image/package workflows and receipt-only release
+commit. Reverify exact downloaded Web artifacts and the same descriptor against
+the final candidates; retain the public controller/PDF archives separately from
+the private QGIS dependency. Do not publish the private intake directory.
+
+Final immutable Web/package/descriptor/receipt/image references were returned in
+[gaContExt #38](https://github.com/dosquartsdedocs/gacontext/issues/38#issuecomment-6304912982).
+The hub owns new preparation, compatibility curation and any
+explicit consumer CAS selection/reload. Local acceptance, verified publication
+and actual consumer adoption are distinct states. No teaching approval, scientific
+manual recomputation, W1/SDK expansion or automatic consumer migration is claimed.

data/docs/agents/scaffold-closeout-118.md

@@ -0,0 +1,140 @@
+# Scaffold correction #115 / #118 — 0.7.4
+
+This owner unit starts from published 0.7.3's post-release `main`
+`2f9a8bdbc84a2ce5f5d10617174d36bcbde63f95`. The separate experimental #116 WIP
+was checked against its retained source inventory and preserved without source
+rewrites in **`6a8cd85ff75c8ad41dc67f8fb1c3c5a8f8919e53`**, branch
+`feat/116-common-practice-sdk`. This scaffold correction does not contain that
+checkpoint or close its QGIS/shared-runtime gates.
+
+Implementation branch: `fix/118-reviewed-scaffold-resolution`. Clean preflight
+was eligible after preservation. No worktree, stash, reset, manual checkout edit,
+hub distribution edit or global cleanup is used.
+
+## Coherent independent tuple
+
+The source target for package, gem artifact and controller/runtime is **0.7.4**.
+The native Git adapter explicitly selects:
+
+- Core: `9d97197dec5fc9346ab795191a3afd18884c27fb`.
+- `consumer_integration.core_gem_version`: **0.7.3**, matching that actual source.
+- Workflow: `3332e0b93933f12317e05f1ce8d38ce80046feab`.
+- PDF 0.7.1: `ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:1bb3f2dafd741e96c28639ec1cc8ccaeb81cbaa73e649f787c0b4ef59997bd4b`.
+- Classic QGIS 0.6.1 and all other independent worker/companion pins are preserved.
+
+The generated native Gemfile/lock use the selected core's gem version, not the
+wheel's release version. The controller-only `consumer-core.json` declares that
+version and binds it to the BOM's exact core SHA; `consumer_advisory.py` projects
+it into the public target as `core_gem_version`. The shared retained-document
+checker module **and schema** remain byte-identical to the core and PDF worker.
+Source validation reads the immutable Git commit's
+contract and rejects a mismatch. Doctor/update comparisons use independent
+component targets, so a coherent 0.7.4 MCP / 0.7.3 Git core is not perpetually
+reported as out of date. Docker's existing generated Bundler state still loads
+the core bundled in its selected image; author Gemfile/lock bytes stay intact.
+
+## Reviewed resolutions
+
+The public `scaffold_sync` tool and CLI accept an optional `review` object.
+Conflicted plans expose `review_inputs` and `resolution_options`, with exact
+baseline, current, package and candidate-result hashes and UTF-8 review text.
+The baseline is hash-only: these fields do not pretend to recover old source bytes.
+
+Supported conservative decisions:
+
+| Path | Mode | Preserved behavior |
+| --- | --- | --- |
+| `.gitignore` | `keep` | Keep the entire current byte sequence and inode. |
+| `.gitignore` | `prepend-package` | Put package rules before the entire unmodified local sequence; local order and negation precedence remain last. |
+| `.github/workflows/source-checks.yml` | `pins-only` | Replace only the two package/image env scalars. |
+| `.github/workflows/deploy.yml` | `pins-only` | Replace only reusable-workflow, PDF-image and Vega-revision scalars. |
+
+Workflow changes preserve every non-pin author value and all bytes outside the
+pin scalars. Required controls and ordered steps must remain; extra independent
+jobs/steps are preserved. Altered trigger/permission/concurrency controls, required
+job execution modifiers, aliases, ambiguous keys, unsupported structures and
+unsafe paths stay blocked. There is no arbitrary replacement-content or force API.
+
+The existing staged-write, final CAS, no-clobber installation, manifest-last commit
+and rollback implementation performs the writes. A concurrent author edit is
+preserved with its original recovery backup when rollback cannot safely restore
+that path. The next baseline retains the actual package hash, not a counterfeit
+hash of a merged file. `reviewed_resolutions` records each decision and its hashes;
+subsequent plans honestly show `preserved` / `current_customized` and detect later
+upstream conflicts again.
+
+## Public migration sequence
+
+For each idle consumer, preserve its current work and use the normal project
+admission/reservation flow. After the coordinator prepares the published package:
+
+1. Obtain a fresh `site_context` and `scaffold_sync(dry_run=true)` plan. Never
+   reuse the old 0.7.3 plans or manually modify `.unaltraweb/scaffold.json`.
+2. Inspect each `review_inputs` row and the full proposed `resolution_options`.
+   For #118's broad `/dist/` and QGIS exclusions, `keep` preserves exact local
+   bytes; `prepend-package` is available if the additional package rules are
+   desired with local priority. Do not narrow the existing rules.
+3. Build a review containing the selected option's `path`, `mode`, all four hash
+   fields (omit its display `content`) and a concise human-reviewed `reason`:
+
+   ```json
+   {
+     "schema_version": 1,
+     "kind": "unaltraweb-scaffold-review",
+     "base_plan_sha256": "<fresh unresolved plan hash>",
+     "files": [
+       {
+         "path": ".gitignore",
+         "mode": "keep",
+         "baseline_sha256": "<from option>",
+         "local_sha256": "<from option>",
+         "payload_sha256": "<from option>",
+         "result_sha256": "<from option>",
+         "reason": "Preserve broad dist and four QGIS state exclusions"
+       }
+     ]
+   }
+   ```
+
+   Include reviewed `pins-only` entries for the source workflow and, where
+   conflicted, deployment workflow. A missing baseline hash is the empty string
+   only when that exact new-managed-file option says so.
+4. Call `scaffold_sync(dry_run=true, review=...)`. All conflicts must be resolved;
+   review the new `resolved`, `preserved`, target tuple and **resolved** plan hash.
+5. Apply the same review with `dry_run=false`, `confirm_sync=true` and that hash
+   as `expected_plan_sha256`. It is mandatory for reviewed resolutions. Changes
+   to local bytes, config, baseline, payload, decisions or project invalidate it.
+6. Inspect the next `site_context`/plan and run `site_check`. A valid preserved
+   customization remains visible; it must not be reported as pristine upstream.
+   Build/review through the consumer's native commands before its own publication.
+
+CLI equivalent: `mcp scaffold-sync --review-json JSON` for the resolved dry-run,
+then the same argument plus `--apply --confirm-sync --expected-plan-sha256 HASH`.
+Git commits and manual publication remain separately coordinated owner actions.
+
+## Acceptance record
+
+`scripts/test_scaffold_release.py` uses actual installed wheels and synthetic
+consumers. The old creator is the downloaded published 0.5.0 wheel; baseline
+files are never hand-written. Local ignore rules and workflow guards are then
+added as author customizations. The candidate's CLI prepares the reviewed plan,
+its real installed MCP applies it, and the following state is
+`current_customized` with no repeated update. A stale review is refused.
+
+`tmp/scaffold-118/acceptance-02/acceptance.json` records actual network Git fetch,
+frozen Bundler resolution and consumption of **gem0.7.3 at core9d97197…**. Jekyll
+build succeeds using the same explicit core/site config combination as the
+generated Makefile. Gemfile, lock, ignore and manifest bytes remain unchanged by
+Bundler. The first test used a bare Jekyll invocation without the core config;
+its failed build log remains in `acceptance-01`, separately from the already
+successful Git/gem resolution it observed.
+
+The implementation tests also cover real ignore negations, all-path conflicts,
+required workflow guards, stale input/result/decision hashes, cross-project and
+unsafe-path refusal, symlinks, rollback and concurrent-edit recovery. Wheel tests
+compare the complete top-level module inventory against source, excluding stale
+build-cache modules and the separate #116 checkpoint.
+
+Publication receipts, verified immutable images and final cold-download evidence
+will be added after their actual gates complete. Source preparation or a passing
+local acceptance is not a claim of release or manual activation.

data/scripts/test_scaffold_release.py

@@ -0,0 +1,130 @@
+"""Opt-in installed-package scaffold migration and real Git/Bundler acceptance.
+
+Uses synthetic consumers only. Old/new interpreters and an already-prepared Ruby
+image are explicit; all evidence is create-only. Native Git/gem fetching during
+the Bundler check is explicit, not part of normal site builds or scaffold plans.
+"""
+from __future__ import annotations
+import argparse
+import asyncio
+import hashlib
+import json
+import os
+from pathlib import Path
+import subprocess
+
+
+def sha(path):
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def save(path, value):
+    with path.open("x") as stream:
+        json.dump(value, stream, sort_keys=True, indent=2)
+        stream.write("\n")
+
+
+def execute(command, *, env=None, timeout=180, expected=0):
+    result = subprocess.run(command, capture_output=True, text=True, env=env, timeout=timeout)
+    if expected is not None and result.returncode != expected:
+        raise RuntimeError(f"Command failed ({result.returncode}): {command}\n{result.stdout[-8000:]}\n{result.stderr[-8000:]}")
+    return result
+
+
+def cli(python, project, *arguments, expected=0):
+    result = execute([str(python), "-I", "-B", "-m", "unaltraweb_mcp.cli", "--project", str(project), *arguments], expected=expected)
+    return json.loads(result.stdout)
+
+
+async def mcp_roundtrip(python, project, factory, review, plan_hash):
+    from mcp import ClientSession, StdioServerParameters
+    from mcp.client.stdio import stdio_client
+    def payload(result):
+        return result.structuredContent or json.loads("\n".join(row.text for row in result.content if hasattr(row, "text")))
+    params = StdioServerParameters(command=str(python), args=["-I", "-B", "-m", "unaltraweb_mcp.cli", "--project", str(project), "mcp", "serve"],
+        env={"UNALTRAWEB_FACTORY_DIR": str(factory), "HOME": str(project), "PATH": os.environ["PATH"]})
+    async with stdio_client(params) as (incoming, outgoing):
+        async with ClientSession(incoming, outgoing) as client:
+            await client.initialize()
+            identity = payload(await client.call_tool("runtime_identity", {}))
+            assert identity["package"]["mode"] == "installed" and not identity["package"]["drift"]
+            result = payload(await client.call_tool("scaffold_sync", {"review": review, "dry_run": False, "confirm_sync": True, "expected_plan_sha256": plan_hash}))
+            assert result["ok"] and result["applied"], result
+            following = payload(await client.call_tool("site_context", {}))["update_status"]
+            assert following["state"] == "current_customized" and not following["update_available"], following
+            await client.call_tool("runtime_drain", {"confirm": True})
+            return {"identity": identity, "applied": result, "following": following}
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    for name in ("old-python", "new-python", "output", "factory"):
+        parser.add_argument("--" + name, type=Path, required=True)
+    parser.add_argument("--runtime-image", required=True)
+    args = parser.parse_args()
+    root = args.output.resolve()
+    assert root == args.output and root.is_relative_to(args.factory / "tmp") and root.parent.is_dir()
+    root.mkdir(mode=0o700)
+    project, fresh = root / "upgrade", root / "fresh"
+    for python, path in ((args.old_python, project), (args.new_python, fresh)):
+        assert cli(python, path, "new-web", "--site-profile", "unaltremanual")["ok"]
+    original_baseline = sha(project / ".unaltraweb/scaffold.json")
+    ignore = project / ".gitignore"
+    ignore.write_bytes(ignore.read_bytes() + b"\n/dist/\n/.unaltracaptura-qgis/jobs/\n/.unaltracaptura-qgis/probes/\n/.unaltracaptura-qgis/render-locks/\n/.unaltracaptura-qgis/runtime/\n/notes/*\n!/notes/public/\n")
+    for name in ("source-checks.yml", "deploy.yml"):
+        path = project / ".github/workflows" / name
+        path.parent.mkdir(parents=True, exist_ok=True)
+        # A local workflow with the official controls plus an author guard and
+        # previous pins; its older package baseline remains untouched.
+        current = (fresh / ".github/workflows" / name).read_text()
+        current = current.replace("unaltraweb-mcp==0.7.4", "unaltraweb-mcp==0.7.3")
+        current += "\n  author-guard:\n    runs-on: ubuntu-latest\n    steps:\n      - run: test -f _config.yml\n"
+        path.write_text(current)
+    assert sha(project / ".unaltraweb/scaffold.json") == original_baseline
+    ignored_before = ignore.read_bytes()
+    plan = cli(args.new_python, project, "mcp", "scaffold-sync", expected=None)
+    save(root / "initial-plan.json", plan)
+    assert not plan["ok"] and {row["path"] for row in plan["conflicts"]} == {".gitignore", ".github/workflows/deploy.yml", ".github/workflows/source-checks.yml"}, plan
+    modes = {".gitignore": "keep", ".github/workflows/deploy.yml": "pins-only", ".github/workflows/source-checks.yml": "pins-only"}
+    decisions = [{key: value for key, value in row.items() if key != "content"} | {"reason": "Preserve synthetic author rules and controls; accept exact package pins"}
+                 for row in plan["resolution_options"] if modes.get(row["path"]) == row["mode"]]
+    assert len(decisions) == 3
+    review = {"schema_version": 1, "kind": "unaltraweb-scaffold-review", "base_plan_sha256": plan["plan_sha256"], "files": decisions}
+    save(root / "review.json", review)
+    resolved = cli(args.new_python, project, "mcp", "scaffold-sync", "--review-json", json.dumps(review))
+    save(root / "resolved-plan.json", resolved)
+    assert resolved["ok"] and not resolved["applied"]
+    applied = asyncio.run(mcp_roundtrip(args.new_python, project, args.factory, review, resolved["plan_sha256"]))
+    save(root / "installed-mcp.json", applied)
+    assert ignore.read_bytes() == ignored_before
+    for name in ("source-checks.yml", "deploy.yml"):
+        assert "author-guard:" in (project / ".github/workflows" / name).read_text()
+    stale = execute([str(args.new_python), "-I", "-B", "-m", "unaltraweb_mcp.cli", "--project", str(project), "mcp", "scaffold-sync",
+                     "--review-json", json.dumps(review), "--apply", "--confirm-sync", "--expected-plan-sha256", resolved["plan_sha256"]], expected=None)
+    assert stale.returncode != 0
+    assert cli(args.new_python, fresh, "mcp", "site-context")["update_status"]["state"] == "current"
+    snapshots = {name: sha(project / name) for name in ("Gemfile", "Gemfile.lock", ".gitignore", ".unaltraweb/scaffold.json")}
+    ruby = '''require "json"; require "unaltraweb/version"; require "open3"; s=Gem.loaded_specs.fetch("unaltraweb"); revision,status=Open3.capture2("git","-C",s.full_gem_path,"rev-parse","HEAD"); abort "missing git source" unless status.success?; puts JSON.generate({version: Unaltraweb::VERSION, gem_version: s.version.to_s, revision: revision.strip, path: s.full_gem_path})'''
+    command = ["docker", "run", "--rm", "--pull=never", "--network=bridge", "--cpus=2", "--memory=2g", "--pids-limit=256",
+        "--env", "HOME=/tmp", "--env", "BUNDLE_FROZEN=true", "--env", "BUNDLE_APP_CONFIG=/site/tmp/bundle-config",
+        "--label", "io.context.mcp-factory=unaltraweb", "--label", "io.context.mcp-role=scaffold-118-bundler",
+        "--mount", "type=bind,source=" + str(project) + ",target=/site", "--workdir", "/site", "--entrypoint", "bash", args.runtime_image,
+        "-lc", "bundle install && bundle exec ruby -e \"$1\" && core=\"$(bundle info --path unaltraweb)\" && bundle exec jekyll build --config \"$core/_config.yml,_config.yml\" --disable-disk-cache --trace", "acceptance", ruby]
+    built = execute(command, timeout=900, expected=None)
+    (root / "bundler.log").write_text(built.stdout + built.stderr)
+    assert built.returncode == 0, built.stderr[-8000:] + built.stdout[-8000:]
+    observed = next(json.loads(line) for line in built.stdout.splitlines() if line.startswith('{"version":'))
+    assert observed["version"] == observed["gem_version"] == resolved["target"]["core_gem_version"]
+    assert observed["revision"] == resolved["target"]["core_sha"]
+    assert all(sha(project / name) == expected for name, expected in snapshots.items())
+    assert (project / "_site/index.html").is_file()
+    record = {"ok": True, "synthetic_only": True, "native_bundler": observed, "target": resolved["target"],
+              "old_baseline_sha256": original_baseline, "initial_plan_sha256": plan["plan_sha256"],
+              "resolved_plan_sha256": resolved["plan_sha256"], "managed_bytes_unchanged_by_bundler": snapshots,
+              "following": applied["following"], "stale_review_refused": True}
+    save(root / "acceptance.json", record)
+    print(json.dumps(record, indent=2))
+
+
+if __name__ == "__main__":
+    main()

data/scripts/test_wheel_install.py

@@ -61,6 +61,12 @@ def main() -> int:
             raise RuntimeError(f"Expected one wheel, found: {wheels}")
         with zipfile.ZipFile(wheels[0]) as archive:
             names = archive.namelist()
+            expected_modules = {path.name: path.read_bytes() for path in (ROOT / "src/unaltraweb_mcp").iterdir()
+                                if path.is_file() and path.suffix in {".py", ".json"}}
+            installed_modules = {Path(name).name: archive.read(name) for name in names
+                                 if Path(name).parent.as_posix() == "unaltraweb_mcp" and Path(name).suffix in {".py", ".json"}}
+            if installed_modules != expected_modules:
+                raise RuntimeError("Wheel contains missing, stale or foreign package modules")
             launcher_prefix = f"{wheels[0].name.split('-')[0]}-{wheels[0].name.split('-')[1]}.data/data/share/unaltraweb-launcher/"
             launcher_files = {
                 "Makefile": "packaging/launcher/Makefile",
@@ -76,6 +82,11 @@ def main() -> int:
             for installed_path, source_path in launcher_files.items():
                 if archive.read(launcher_prefix + installed_path) != (ROOT / source_path).read_bytes():
                     raise RuntimeError(f"Wheel launcher asset differs from source: {installed_path}")
+            for name in ("component-contract.json", "practice-verifier-runtime.json"):
+                if archive.read("unaltraweb_mcp/" + name) != (ROOT / "src/unaltraweb_mcp" / name).read_bytes():
+                    raise RuntimeError(f"Wheel dependency declaration differs from source: {name}")
+            if any(name.startswith(("veure_qgis_mcp/", "unaltracaptura_annotations/")) for name in names):
+                raise RuntimeError("Private QGIS implementation leaked into the public wheel")
         forbidden_roots = {"docs", "scripts", "_layouts", "_includes", "_sass"}
         leaked = []
         for name in names:

data/scripts/unaltraweb-mcp-bootstrap.sh

@@ -15,7 +15,7 @@ Managed mode requires an immutable reference or an expected full image ID.
 USAGE
 }
 
-image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:6aa20cff86c3891a876e37ba0548fa36f3c5633c9f22ba672e9f50123d677cf6}"
+image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:8183e7117f5902fc0ad4d930b757d874b2da1f93d5ef4db102ae4c1b03e357a3}"
 project="${MCP_CONSUMER_WORKSPACE:-${UNALTRAWEB_PROJECT:-}}"
 operation=serve
 expected_image="${UNALTRAWEB_EXPECTED_IMAGE_ID:-}"

data/scripts/validate_distribution.py

@@ -105,6 +105,17 @@ def selected_deployment_errors(contract: dict[str, Any], workflow: dict[str, Any
     return errors
 
 
+def selected_core_gem_errors(contract: dict[str, Any], core_contract: dict[str, Any]) -> list[str]:
+    from unaltraweb_mcp.consumer_advisory import consumer_core_policy
+    policy = consumer_core_policy()
+    expected = policy["gem_version"]
+    actual = core_contract.get("release", {}).get("version")
+    declared = core_contract.get("components", {}).get("gem", {}).get("version")
+    if policy["core_sha"] != contract["consumer_integration"]["core_sha"] or expected != actual or expected != declared:
+        return ["selected immutable core source's gem version differs from consumer_integration.core_gem_version"]
+    return []
+
+
 def validate(root: Path = ROOT) -> list[str]:
     errors: list[str] = []
     contract = distribution_contract()
@@ -173,6 +184,13 @@ def validate(root: Path = ROOT) -> list[str]:
         )
         if core_ancestor.returncode != 0:
             errors.append("consumer integration core SHA must be an ancestor of the current source")
+        core_record = subprocess.run(["git", "show", f"{core_sha}:src/unaltraweb_mcp/component-contract.json"],
+                                     cwd=root, text=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=False)
+        try:
+            selected_core = json.loads(core_record.stdout) if core_record.returncode == 0 else {}
+            errors.extend(selected_core_gem_errors(contract, selected_core))
+        except (ValueError, TypeError, AttributeError):
+            errors.append("selected immutable core has no readable gem version contract")
         pinned_workflow = subprocess.run(
             ["git", "show", f"{workflow_sha}:.github/workflows/site-deploy.yml"],
             cwd=root,

data/src/unaltraweb_mcp/component-contract.json

@@ -2,13 +2,13 @@
   "$schema": "component-contract.schema.json",
   "schema_version": 1,
   "release": {
-    "version": "0.7.2",
-    "tag": "v0.7.2"
+    "version": "0.7.4",
+    "tag": "v0.7.4"
   },
   "consumer_integration": {
     "schema_version": 1,
     "core_repository": "https://github.com/dosquartsdedocs/unaltraweb.git",
-    "core_sha": "3332e0b93933f12317e05f1ce8d38ce80046feab",
+    "core_sha": "9d97197dec5fc9346ab795191a3afd18884c27fb",
     "site_deploy_workflow": "dosquartsdedocs/unaltraweb/.github/workflows/site-deploy.yml",
     "site_deploy_workflow_sha": "3332e0b93933f12317e05f1ce8d38ce80046feab",
     "manual_pdf_image": "ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:1bb3f2dafd741e96c28639ec1cc8ccaeb81cbaa73e649f787c0b4ef59997bd4b",
@@ -62,10 +62,10 @@
     "gem": {
       "kind": "gem",
       "name": "unaltraweb",
-      "version": "0.7.2",
-      "release": "v0.7.2",
+      "version": "0.7.4",
+      "release": "v0.7.4",
       "release_status": "ready",
-      "reference": "unaltraweb (= 0.7.2)",
+      "reference": "unaltraweb (= 0.7.4)",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": false,
       "features": ["jekyll-core", "site-build"]
@@ -73,10 +73,10 @@
     "wheel": {
       "kind": "python-wheel",
       "name": "unaltraweb-mcp",
-      "version": "0.7.2",
-      "release": "v0.7.2",
+      "version": "0.7.4",
+      "release": "v0.7.4",
       "release_status": "ready",
-      "reference": "unaltraweb-mcp==0.7.2",
+      "reference": "unaltraweb-mcp==0.7.4",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": true,
       "features": ["calibre-import", "doctor", "new-web", "offline-inspection", "mcp-control-plane", "source-ci"]
@@ -84,10 +84,10 @@
     "runtime": {
       "kind": "container",
       "name": "unaltraweb runtime",
-      "version": "0.7.2",
-      "release": "v0.7.2",
+      "version": "0.7.4",
+      "release": "v0.7.4",
       "release_status": "ready",
-      "reference": "ghcr.io/dosquartsdedocs/unaltraweb:0.7.2",
+      "reference": "ghcr.io/dosquartsdedocs/unaltraweb:0.7.4",
       "image_repository": "ghcr.io/dosquartsdedocs/unaltraweb",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": false,
@@ -96,10 +96,10 @@
     "mcp": {
       "kind": "container",
       "name": "unaltraweb MCP runtime",
-      "version": "0.7.2",
-      "release": "v0.7.2",
+      "version": "0.7.4",
+      "release": "v0.7.4",
       "release_status": "ready",
-      "reference": "ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.7.2",
+      "reference": "ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.7.4",
       "image_repository": "ghcr.io/dosquartsdedocs/unaltraweb-mcp",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": false,
@@ -156,10 +156,10 @@
     "qgis_practice_verifier": {
       "kind": "companion",
       "name": "unaltracaptura-qgis",
-      "version": "0.6.0",
-      "release": "v0.6.0",
+      "version": "0.6.1",
+      "release": "v0.6.1",
       "release_status": "released",
-      "reference": "https://github.com/dosquartsdedocs/unaltracaptura-qgis.git@v0.6.0",
+      "reference": "https://github.com/dosquartsdedocs/unaltracaptura-qgis.git@v0.6.1",
       "repository": "https://github.com/dosquartsdedocs/unaltracaptura-qgis",
       "included_in_wheel": false,
       "features": ["qgis-practice-v1", "qgis-practice-v2", "private-prepared-runtime"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: unaltraweb
 version: !ruby/object:Gem::Version
-  version: 0.7.2
+  version: 0.7.4
 platform: ruby
 authors:
 - dosquartsdedocs
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-12 00:00:00.000000000 Z
+date: 2026-10-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: classifier-reborn
@@ -817,8 +817,10 @@ files:
 - docs/agents/practice-pdf-installable-98.md
 - docs/agents/practice-runtime-archives-98.md
 - docs/agents/private-practice-verifier-98.md
+- docs/agents/qgis-0.6.1-adoption-109.md
 - docs/agents/quarto-computation-adoption.md
 - docs/agents/retained-letter-import.md
+- docs/agents/scaffold-closeout-118.md
 - docs/agents/source-ci-98.md
 - docs/agents/visual-companions-0.4.0.md
 - docs/assets/img/caption-credits-demo.svg
@@ -857,6 +859,7 @@ files:
 - scripts/prepare_practice_editions_candidate.py
 - scripts/test_gem_build.py
 - scripts/test_reproducible_jekyll_build.py
+- scripts/test_scaffold_release.py
 - scripts/test_wheel_install.py
 - scripts/unaltraweb-docker-mount.sh
 - scripts/unaltraweb-mcp-bootstrap.sh