f0d695ec97
Save the current implementation and README, status, and known-issue documentation at the user-requested stop. No completed release or deployment is claimed. Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: GPT-6 Codex <noreply@openai.com>
2.9 KiB
qbit-scripting standalone status
This replaces the pre-extraction session notes, TODO list and private-host evidence logs, which were not carried into this repository (see PROVENANCE.md).
Release blocker: core API gap
The source in this repository was developed and reviewed against a reviewed private QQQ core/RDBMS build. It does not compile against public qqq-backend-core:4.1.0-RC.21. Missing from RC.21 (found by compiling, not by inspection): ScriptExecutionIsolation / ScriptExecutionMode, TableCustomizerInterface.whenToRunPreUpdate / PreUpdatePhase, TransactionalRecordChangeMetaData / TransactionalRecordChangeScope, DurableProcessMetaData.get/withTransactionalRevision, BoundedIntentData, FixedProcessRequest, ScriptTableCustomizer, requireEnlistedExecution. Eight main source files are affected (hooks, service and the QBit producer). Publishing the Maven modules therefore needs a public QQQ release that contains those APIs, or a reviewed source change; neither is done here.
What the code is
A control plane: script projects, immutable strict-TypeScript builds, capability broker, native record hooks. It never compiles or runs script code in the JVM. With no qualified worker configured, every build and execution fails closed.
Runtime source (not part of the Maven QBit artifacts)
worker/ (Node/TypeScript), supervisor/ (Java, Extism/Javy host), wasm-runtime/ (Rust, pinned Wasm), deploy/ (qualification packaging). They are source only. No worker image was built, rebuilt, signed or deployed for this extraction, and qualified=false / productionQualified=false / redistributionCleared=false stay as written. See worker/QUALIFICATION.md, deploy/NOTICE-GAPS.md, wasm-runtime/docs/release-license-review.md.
Production gates still open
- Independent qualification of a real worker image and runsc deployment (escape/exhaustion/CPU/memory/process/fd/output/wall controls, no ambient network/secrets/mounts).
- Durable ownership journal and reaper proven across coordinator/host death.
- Host-managed HMAC key lifecycle (rotation, revocation); no signing keys in records or workers.
- Supported schema is MySQL 8.4 / file H2 only; PostgreSQL and Aurora are unsupported by the current adapter. Immutable-trigger migration and restore need qualification on the target host.
- Audit pool capacity and reconciliation of unresolved STARTED events; no exactly-once execution guarantee.
- Broker integration review under permission changes; GitHub access wiring to a managed credential provider.
- Upstream SPDX attestation and residual advisory/license review for the worker image.
Build
Use the wrapper. ./mvnw verify builds the base module (Checkstyle incl. tests, tests, JaCoCo 85%/65%). Optional modules are separate POMs that need the base module installed first: ./mvnw install, then ./mvnw -f rdbms/pom.xml verify (and middleware, github). supervisor/pom.xml is a standalone, non-QBit runtime build.