From c25545e8d6d61646199e1effb311e19f616e920d Mon Sep 17 00:00:00 2001 From: Erik Date: Sat, 15 Aug 2026 02:16:41 +0200 Subject: [PATCH] docs(launcher): prepare Campaign LA user gate --- CLAUDE.md | 8 +++++--- docs/plans/2026-04-11-roadmap.md | 11 +++++++---- docs/plans/2026-08-14-launcher-campaign.md | 2 +- 3 files changed, 13 insertions(+), 8 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index c361d6bc..9baa7773 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -245,14 +245,16 @@ NO 3D preview (chargen-only machinery); UI Studio no longer exists (deleted at Campaign V — ignore stale memory/docs claims otherwise); App `Program.cs` has no subcommand dispatch (the `--session-config` flag is additive). -LA0 through LA10 are review-closed. The launcher composer is now +LA0 through LA11's automated scope are review-closed. The launcher composer is now compiled into both host test suites, and Launcher.Core runs in the portable Windows/Ubuntu CI closure. The self-contained Avalonia launcher, transactional two-host plugin lifetime, shared login-command route, Runtime-owned retail selection state, authored DAT character screen, and crash-safe verified installer plus atomic cross-platform updater/self-updater -are integrated; the combined Release gate passes 13,972 tests / 5 skips. LA11 -automated and connected/visual closeout is the only remaining slice. +are integrated. Windows group-isolated Headless stop, isolated update fixtures, +strict status/redaction evidence, and the exact Windows/Ubuntu operator script +are landed; the integrated preflight passes 32/32 commands and 14,012 tests / +5 skips. Only the connected/visual/real-DAT user gate remains before shipment. **Placement cutover — C4 COMPLETE 2026-08-05, merged to main.** Every placement route now runs through the canonical residence + continuation- diff --git a/docs/plans/2026-04-11-roadmap.md b/docs/plans/2026-04-11-roadmap.md index 5f64967f..4f2cc180 100644 --- a/docs/plans/2026-04-11-roadmap.md +++ b/docs/plans/2026-04-11-roadmap.md @@ -103,15 +103,18 @@ a future campaign). Spec: [`2026-08-14-launcher-campaign-design.md`](../superpowers/specs/2026-08-14-launcher-campaign-design.md); plan + ledger: [`2026-08-14-launcher-campaign.md`](2026-08-14-launcher-campaign.md). -LA0 through LA10 are review-closed: the portable path boundary, +LA0 through LA11's automated scope are review-closed: the portable path boundary, failure-isolated launch/status contract, BCL-only launcher core, shared composer-to-both-host-loader anti-drift gate, and character wire messages are landed. The self-contained Avalonia launcher, transactional two-host plugin lifetime, shared login-command route, Runtime-owned retail selection state, authored DAT character screen, crash-safe verified installer, and atomic -cross-platform updater/self-updater are integrated. The combined Release gate -passes 13,972 tests / 5 skips. LA11 automated and connected/visual closeout is -the only remaining slice. +cross-platform updater/self-updater are integrated. Windows group-isolated +Headless stop, isolated A/B update fixtures, strict status/redaction evidence, +and one exact Windows/Ubuntu operator script are also landed. The integrated +clean preflight passes 32/32 commands and 14,012 tests / 5 skips. Campaign code +is complete but not shipped: the connected/visual/real-DAT user gate is the +only remaining boundary. **Remaining physics-divergence closeout (ACTIVE, checkpoint 2026-08-03):** the user then authorized retirement of the remaining proven collision/placement gaps before diff --git a/docs/plans/2026-08-14-launcher-campaign.md b/docs/plans/2026-08-14-launcher-campaign.md index d4592726..4541b36f 100644 --- a/docs/plans/2026-08-14-launcher-campaign.md +++ b/docs/plans/2026-08-14-launcher-campaign.md @@ -732,4 +732,4 @@ LA6 adds CH-regression scrutiny; LA0 adds guard-integrity scrutiny. | LA8 | **DONE + MERGED 2026-08-14** | `6cfab727`, `aeac874d`, `1dd5706e`, merge `fe63ce18` | Initial retail/architecture review found 4 issues; first narrow re-review left 2 retry-transaction/order gaps; final narrow re-review PASS | Installed DAT enum table 5 proves `0x10000005 -> 0x21000004`, root `0x1000039A`, exact flat list/buttons/templates/dialog assets, and no viewport. Runtime remains the only selection owner; row sizing, modal priority/retry, restore ordering, reset/disposal, and explicit live-DAT skip/probe are covered. Branch full suite 13,796+5 skip; LA11 owns physical visual/live-ACE acceptance. | | LA9 | **DONE + MERGED 2026-08-14** | `ff6ebb6a`, `3f688951`, `208a70ac`, merge `2198a0cc` | Initial integrity review found 5 issues; narrow re-review left one orphan-child publication race; final narrow re-review PASS | First-run installer validates four DATs, consumes strict v1 Bake JSONL, preserves/reverifies SHA+size+tool-version records, and co-publishes self-contained launcher+Bake. Cross-process install/publish locks plus durable nonce prevent post-recovery mutation across real parent-only hard kills on Windows/Linux. Branch full suite 13,799+4 skip; real retail-DAT bake remains LA11. | | LA10 | **DONE + MERGED 2026-08-14** | `2d2a5b50`, `1955ca8a`, `09d84387`, merge `da4fb3de` | Initial architecture/security review found 10 crash, trust, integrity, cleanup, and lifecycle issues; first narrow re-review left one rollback-source P1; final narrow re-review PASS | Production feeds and redirects are HTTPS-only, fixture loopback trust is explicit, downloads and archives are bounded and verified, version activation and rollback are atomic, active sessions hold the cross-process update lease, and schema-v3 self-update recovery verifies every prior/replacement file before apply, rollback, or restart. Real Windows/Linux process tests cover kill boundaries, staging races, lease deferral, corrupt backups, junctions/symlinks, and fail-closed recovery. Branch gates: Core 302/302 and Launcher 29/29 on Windows/WSL, full Release 13,945+4 skip, win/linux self-contained publishes. Integrated LA0–LA10 gate: 13,972+5 skip. | -| LA11 | **AUTOMATED CLOSEOUT REVIEW-CLOSED + MERGED 2026-08-15 — USER GATE PENDING** | `f881e5b4`, `134edabe`, `accd01a0`, `9f9c1167`, merge `d39f3098` | Initial dual-lens review found 7 startup/evidence/safety issues; first narrow re-review left 2 PID-reuse/ZIP-mode gaps; final narrow re-review PASS | Strict isolated roots and process-local feed override compose one exact launcher path graph. Windows targeted CTRL_BREAK is group-isolated and preserves stdin; exact-PID/start-identity status validation, credential-value scanning, deterministic Unix-mode A/B fixtures, Windows/native-Linux helper safety, and the exact A–I operator script are implemented. Clean branch preflight passed 32/32 with 13,985 tests + 4 skips. No connected/UI/real-DAT row has run; campaign shipment and #397 closure remain pending the user gate. | +| LA11 | **AUTOMATED CLOSEOUT REVIEW-CLOSED + MERGED 2026-08-15 — USER GATE PENDING** | `f881e5b4`, `134edabe`, `accd01a0`, `9f9c1167`, merge `d39f3098` | Initial dual-lens review found 7 startup/evidence/safety issues; first narrow re-review left 2 PID-reuse/ZIP-mode gaps; final narrow re-review PASS | Strict isolated roots and process-local feed override compose one exact launcher path graph. Windows targeted CTRL_BREAK is group-isolated and preserves stdin; exact-PID/start-identity status validation, credential-value scanning, deterministic Unix-mode A/B fixtures, Windows/native-Linux helper safety, and the exact A–I operator script are implemented. Clean branch preflight passed 32/32 with 13,985 tests + 4 skips. Integrated clean-head preflight at `a22f5411` passed 32/32 with 14,012 tests + 5 skips and report SHA-256 `49f225bc6043b9256f17b7bf0f29df919c894b8355633077751fd279756470df`. No connected/UI/real-DAT row has run; campaign shipment and #397 closure remain pending the user gate. |