From dd976607c367977608505c20c0a4f16efa304348 Mon Sep 17 00:00:00 2001 From: James Maes Date: Tue, 13 Oct 2026 08:21:37 -0500 Subject: [PATCH] fix(releases): record MSI checklist preflight recovery Preserve the reserved failed1.2.0 tag and recover with1.2.1, including actual checklist/conformance/scan evidence in the signed annotation. MSI implementation and technical gates remain unchanged. Co-Authored-By: Codex GPT-6 Signed-off-by: James Maes --- docs/msi-release-recovery.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 docs/msi-release-recovery.md diff --git a/docs/msi-release-recovery.md b/docs/msi-release-recovery.md new file mode 100644 index 0000000..08dc091 --- /dev/null +++ b/docs/msi-release-recovery.md @@ -0,0 +1,18 @@ +# MSI builder release recovery + +The signed v1.2.0 tag is reserved by a preflight failure: its annotation omitted +the required MINOR-release checklist. No1.2.0 assets were published. Preserve +that tag and recover through a new1.2.1 release proposal and signed tag. + +The optional MSI implementation is unchanged from merged PR47. Hosted checks +and40 signing regressions pass; native MSI compilation and the actual wrapped +extraction body preserve all6 signed fixture application binaries. Production +MSI signing, installation and distributed-payload verification remain mandatory. + +Before tagging the recovery, complete and link the release checklist, retain full +conformance/scanning evidence and verify main/release-proposal gates. Include the +checklist URL in the signed annotation even for this PATCH recovery. Publish only +after its protected deployment and verify all actual bundle hashes/provenance. + +This preserves existing EXE callers, signing identity/profile/trust, branch/tag +protections and public1.1.2 assets. No account onboarding is repeated. -- 2.54.0