Skip to content
This repository was archived by the owner on Sep 8, 2026. It is now read-only.

release-evidence-template.md

Latest commit

 

History

History
102 lines (79 loc) · 2.34 KB

release-evidence-template.md

File metadata and controls

102 lines (79 loc) · 2.34 KB
Raw

Release Evidence Template

Use this checklist for every reviewed release candidate before tagging or publishing lterm. Keep the filled copy with the release notes, PR, or tag artifact.

Release candidate

  • Version:
  • Commit SHA:
  • Release PR:
  • Reviewer:
  • Date / timezone:
  • Host OS and architecture:
  • Rust binary path (command -v rustc):
  • Cargo binary path (command -v cargo):
  • Rust toolchain (rustc -vV):
  • Cargo version (cargo --version):
  • rustfmt version (rustfmt --version):
  • Clippy version (cargo clippy -V):
  • Node version:
  • npm package/platform graph provenance:
    • Root package.json version:
    • Platform package versions:
    • Source commit used for platform binaries:

Required gate

cargo fmt -- --check
cargo clippy --locked --all-targets -- -D warnings
cargo test --locked -- --test-threads=1
cargo build --release --locked
scripts/release-preflight.sh --require-audit

Evidence:

  • cargo fmt -- --check:
  • cargo clippy --locked --all-targets -- -D warnings:
  • cargo test --locked -- --test-threads=1:
  • cargo build --release --locked:
  • scripts/release-preflight.sh --require-audit (include toolchain diagnostic output):

Contract gate

For fast contract-only reruns after doc/schema edits:

scripts/release-preflight.sh --contract-only
python3 scripts/validate_contract_manifest.py --self-test
python3 scripts/check_contract_drift.py --self-test

Evidence:

  • Contract manifest/schema/examples/drift:
  • Manifest validator self-test:
  • Drift checker self-test:
  • Public contract doc owner/table drift:

Security and dependency evidence

cargo audit
scripts/dependency-minor-dry-run.sh

Evidence:

  • cargo audit result:
  • Audit tool version/path:
  • Deferred advisories, if any:
  • Dependency dry-run diff summary:
  • Dependency updates applied in this release:
  • Dependency updates deferred and owner:
  • npm/platform package provenance:

Manual release soak

Run only when the release owner intentionally accepts the time cost:

LTERM_SOAK_DURATION=900 LTERM_SOAK_SESSIONS=16 \
  scripts/release-preflight.sh --run-soak --require-audit

Evidence:

  • Soak run status:
  • Duration / sessions:
  • Failures or flakes:
  • Rationale if skipped:

Publish / rollback notes

  • Artifacts built:
  • Checksums:
  • npm packages / platform packages:
  • Git tag:
  • Rollback plan:
  • Follow-up issues: