chati-dev 4.5.16 → 4.5.28

package/node_modules/@chati/release-lane/README.md

@@ -1,19 +1,23 @@
 # CHATI Release Lane
 
-Fixture-only C-11 contract. This package accepts only `FakeReleaseTransport` and has no network client, credential loader, Git command, deployment command or timer.
+C-11 release authority. The package has no built-in network client, credential loader, deployment command or timer. External release and rollback I/O is possible only through a minted `ReleaseTransport`; tests use `FakeReleaseTransport`.
 
-`ReleaseLane` creates immutable hash-chained records. A release needs non-empty source completion references verified by an injected C-06 completion verifier as `merged` and bound to the same immutable reference, an immutable plan reference, passed fake smoke evidence and a human authorization whose `scope_hash` matches the exact release scope. Rollback is a separate attempt with a separate human authorization and scope hash. The package rejects accessors and non-plain nested inputs before it canonicalizes or records them.
+`ReleaseLane` creates immutable hash-chained records and durable idempotency state. A production release requires C-06 completion references verified as `merged`, exact Git result refs, an immutable plan, Ed25519 smoke evidence bound to the operation scope, environment and released commits, plus separately signed human authorization for the exact scope. Signed smoke evidence must be at most 30 minutes old, allows at most five minutes of future clock skew and is consumed exactly once when intent becomes durable, including across restart and `not_found` reconciliation. Rollback is a distinct attempt with its own authorization, smoke proof and idempotency key. Uncertain external results must be reconciled by lookup before any resend. The package rejects accessors and non-plain nested inputs before canonicalization or persistence.
+
+`FakeSmokeEvidenceVerifier` and `FakeReleaseTransport` are fixture capabilities. The project runtime in `@chati/dev` constructs the production lane with `SignedSmokeEvidenceVerifier` and `SignedHumanAuthorizationVerifier`; caller-authored verdicts or evidence refs are not sufficient.
+
+Durable journal, outbox and release locks are recovered automatically only when the owner is provably dead on the same host. A foreign-host lock fails closed. Before removing that exact lock manually, an operator must verify on the named host that its owner process is gone and that no operation remains in flight. This deliberate procedure prevents split-brain execution across hosts.
 
 ## Legacy removal readiness
 
 | Legacy surface | Replacement in G3 | Parity and migration evidence | Rollback | Responsibility | Status |
 | --- | --- | --- | --- | --- | --- |
-| BUILD agent | `chati-rail` execution attempt | G3-4 fixtures, G3-9 pending | legacy remains intact | Gabriel, technical policy | not-ready |
-| QA Implementation | `chati-review-council` plus RAIL completion | G3-5 fixtures, G3-9 pending | legacy remains intact | Gabriel, technical policy | ready-for-shadow |
-| QA Visual | browser capability contract | G3-7B fixtures, real visual parity pending | legacy remains intact | Gabriel, browser policy | not-ready |
-| DevOps / release | this fake-only release lane | C-11 tests below, real release deliberately absent | legacy remains intact | Gabriel, release policy | ready-for-shadow |
-| Legacy hooks | provider-neutral policy and adapters | G3-9 migration fixture pending | legacy remains intact | Gabriel, CHATI core | not-ready |
-| Provider maps | provider registry and harness adapters | G3-1 to G3-3 tests, parity pending | legacy remains intact | Gabriel, CHATI core | ready-for-shadow |
+| BUILD agent | `chati-rail` execution attempt | G3-4 and G3-9 fixtures | legacy remains intact | Gabriel, technical policy | shadow-verified |
+| QA Implementation | `chati-review-council` plus RAIL completion | G3-5 and G3-9 fixtures | legacy remains intact | Gabriel, technical policy | shadow-verified |
+| QA Visual | browser capability contract | G3-7B fixtures, real visual parity remains a release gate | legacy remains intact | Gabriel, browser policy | shadow-only |
+| DevOps / release | signed release lane plus injected transport | C-11 signed smoke, authorization, idempotency and reconciliation tests | legacy remains intact | Gabriel, release policy | authority-ready, transport-injected |
+| Legacy hooks | provider-neutral policy and adapters | G3-9 migration fixtures | legacy remains intact | Gabriel, CHATI core | shadow-verified |
+| Provider maps | signed provider registry and harness adapters | G3-1 to G3-3 plus selected-only parity | legacy remains intact | Gabriel, CHATI core | shadow-verified |
 
 No row is `ready-for-removal`. This matrix is not authorization to delete or deploy.
 

package/node_modules/@chati/release-lane/package.json

@@ -2,7 +2,7 @@
   "name": "@chati/release-lane",
   "version": "0.1.0",
   "private": true,
-  "description": "Local, fake-only release and rollback authorization contract for CHATI",
+  "description": "Signed, durable and reconcilable release and rollback authority for CHATI",
   "type": "module",
   "exports": "./src/index.js",
   "dependencies": {