feature-factory 0.7.4 → 0.7.5

package/README.md

@@ -47,6 +47,16 @@ Each omitted timeout independently defaults to `900000`; neither shares the othe
 operator-owned, committed, and protected as a privileged path: a run cannot create, write, merge,
 archive, package, or repair it.
 
+An inherited `FACTORY_PUBLISHING_IDENTITY` that exists and contains at least one character replaces the
+file value, used exactly as inherited. One repository may be published from more than one environment — a
+maintainer's own checkout and an automated host — while `.factory.json` is tracked and can carry only one
+value, so the expectation belongs with the environment and the file carries the fallback. An absent or
+zero-length override leaves the file value in force; it never means no declaration, and only an absent
+`.factory.json` skips the guards. That is what keeps a forgotten override a park rather than a publish
+under whatever credential happens to exist. Never derive the value from `gh`, the token, stored
+authentication, Git configuration, or any command result — an expectation read from the credential being
+checked would always match, and the guard would stop guarding.
+
 Validation refuses the first matching defect in this order: unreadable or invalid JSON, a non-object root, or unknown keys; invalid `pr_draft`; invalid `bootstrap`; `bootstrap_timeout_ms` without `bootstrap`; invalid `bootstrap_timeout_ms`; invalid `verify_timeout_ms`; then missing or invalid required entries.
 
 The named forms are `.factory.json entry 'pr_draft' must be a boolean`, `.factory.json entry 'bootstrap' must be a non-empty string`, `.factory.json entry 'bootstrap_timeout_ms' requires a declared bootstrap command`, `.factory.json entry 'bootstrap_timeout_ms' must be a positive integer`, and `.factory.json entry 'verify_timeout_ms' must be a positive integer`.

package/WORKFLOW.md

@@ -273,6 +273,17 @@ names only `bootstrap_timeout_ms`. Validate this order before executing `resolve
 Retain the validated `publishing_identity` string exactly as parsed, without trimming,
 normalizing, case-folding, or reserializing it, as `DECLARED_PUBLISHING_IDENTITY` for this driver
 invocation. Do not tighten the existing non-whitespace validation to the observed-login grammar.
+An inherited `FACTORY_PUBLISHING_IDENTITY` that exists and contains at least one character replaces the
+file value as `DECLARED_PUBLISHING_IDENTITY`, used exactly as inherited under the same no-trimming,
+no-normalizing, no-case-folding rule. One repository may be published from more than one environment -- a
+maintainer's own checkout and an automated host -- while `.factory.json` is tracked and can carry only one
+value, so the expectation belongs with the environment and the file carries the fallback.
+An absent or zero-length override leaves the file value in force.
+It never means no declaration; only an absent `.factory.json` skips the publishing-identity guards, which
+is what keeps a forgotten override a park rather than a publish under whatever credential happens to exist.
+Never derive this value from `gh`, the token, stored authentication, Git configuration, or any command
+result: an expectation read from the credential being checked would always match, and the guard would
+silently stop guarding.
 Credential values must not appear in the file; command strings may refer only to credentials supplied
 through inherited environment-variable names.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "feature-factory",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "description": "Durable, observed control plane for /feature runs. Host-agnostic: no opencode dependency.",
   "type": "module",
   "license": "MIT",