morluto b4fc0ecaa1 fix(release): publish from explicit source checkpoints (#1006) ... * fix(release): publish from explicit source checkpoints Dispatch preparation and publication against a frozen release branch. Bind package builds and provenance to the same tagged commit, enable release-branch PR CI, and document the maintainer workflow. Assisted-by: Sakuya (gensokyo-skills:sakuya-checkpointed-execution) * fix(release): stop publication when the checkpoint has moved Reject unknown phases and a release-branch tip that differs from the dispatch SHA before Release Please creates a tag. Keep registry jobs and catalog pushes on their own phase, and run website checks for release PRs. * fix(release): require a token that can trigger release CI Stop falling back to GITHUB_TOKEN, which cannot start workflow runs for the release pull request it creates. * test(release): require the CI-capable release token Lock the workflow to RELEASE_PLEASE_TOKEN and fail preparation when that secret is missing. * style(release): format the release-token test --------- Co-authored-by: N0zoM1z0 <1705004398@qq.com> Co-authored-by: Cursor Agent <cursoragent@cursor.com>		2026-10-08 01:15:54 +08:00
..
.vitepress	fix(release): publish from explicit source checkpoints (#1003)	2026-10-08 01:12:18 +08:00
adr	refactor(binary): move production composition outside application workflows (#965)	2026-10-07 21:56:58 +08:00
assets	docs: add Discord community links to README	2026-10-05 17:36:29 +08:00
verification	fix(browser): preserve authorized redirect hops (#986)	2026-10-08 01:08:31 +08:00
android-analysis.md	docs: publish VitePress documentation on GitHub Pages	2026-10-07 16:58:04 +08:00
apple-application-analysis.md	docs(apple): describe directory-based framework plist ambiguity	2026-10-07 12:21:41 +00:00
architecture.mermaid	refactor(binary): move production composition outside application workflows (#965)	2026-10-07 21:56:58 +08:00
browser-observation.md	fix(browser): preserve authorized redirect hops (#986)	2026-10-08 01:08:31 +08:00
browser-scenario-contract.md	feat(browser): capture correlated network content and lifecycle evidence (#797)	2026-10-07 04:35:49 +08:00
capability-migration.md	refactor(process): separate capture implementation from analyst workflows (#988)	2026-10-08 00:46:21 +08:00
electron-observation.md	fix(tools)!: simplify direct invocation and harden boundary contracts (#555)	2026-10-05 20:16:44 +08:00
error-contract.schema.json	refactor!: simplify runtime tools and remove replay engines (#572)	2026-10-05 21:15:04 +08:00
firmware-analysis.md	docs: publish VitePress documentation on GitHub Pages	2026-10-07 16:58:04 +08:00
ghidra-dos.md	fix(ghidra): admit the 12.1 line and the install's JDK range (#840)	2026-10-07 12:24:36 +08:00
ghidra-nativeaot.md	fix(ghidra): admit the 12.1 line and the install's JDK range (#840)	2026-10-07 12:24:36 +08:00
ida-provider.md	feat(ida): add read-only GUI and headless MCP providers (#754)	2026-10-07 01:47:05 +08:00
index.md	docs: publish VitePress documentation on GitHub Pages	2026-10-07 16:58:04 +08:00
installation.md	docs: publish VitePress documentation on GitHub Pages	2026-10-07 16:58:04 +08:00
javascript-application-graph.md	refactor!: simplify runtime tools and remove replay engines (#572)	2026-10-05 21:15:04 +08:00
javascript-application-workflows.md	fix(javascript): keep mutated object initializer values unknown (#752)	2026-10-07 10:51:44 +08:00
javascript-artifact-reconstruction.md	fix(javascript): hash graph and evidence JSON incrementally (#646)	2026-10-06 11:54:55 +08:00
javascript-recovery.md	feat(javascript): recover readable modules with Wakaru (#848)	2026-10-07 12:46:13 +08:00
javascript-runtime-observation.md	docs: clarify onboarding and align provider guidance (#745)	2026-10-06 22:57:36 +08:00
javascript-runtime-reconciliation.md	fix(tools)!: simplify direct invocation and harden boundary contracts (#555)	2026-10-05 20:16:44 +08:00
managed-code-analysis.md	chore: merge main and resolve PR #889 conflicts	2026-10-07 17:28:56 +08:00
mcp-contracts.md	feat(evidence): accept exact retained application references (#734)	2026-10-06 20:17:59 +08:00
mcp-prompts.md	fix(target): explain the JavaScript directory analysis route (#733)	2026-10-06 19:53:08 +08:00
native-investigation.md	feat(native): decode chained fixups, binds, ObjC categories and properties	2026-10-07 12:18:24 +00:00
process-capture.md	fix(process): clarify Windows capture support and recovery (#798)	2026-10-07 04:20:53 +08:00
product-catalog.json	fix(browser): preserve authorized redirect hops (#986)	2026-10-08 01:08:31 +08:00
provider-evaluation.md	fix(ghidra): admit the 12.1 line and the install's JDK range (#840)	2026-10-07 12:24:36 +08:00
reconstruction-obligation-ledgers.md	refactor: return complete analysis results inline	2026-09-29 08:07:24 +08:00
reconstruction-readiness.md	fix(tools)!: simplify direct invocation and harden boundary contracts (#555)	2026-10-05 20:16:44 +08:00
releasing.md	fix(release): publish from explicit source checkpoints (#1006)	2026-10-08 01:15:54 +08:00
roadmap.md	fix(ghidra): admit the 12.1 line and the install's JDK range (#840)	2026-10-07 12:24:36 +08:00
testing.md	refactor(process): separate capture implementation from analyst workflows (#988)	2026-10-08 00:46:21 +08:00
tool-design.md	refactor!: simplify runtime tools and remove replay engines (#572)	2026-10-05 21:15:04 +08:00
user-visible-errors.csv	refactor(process): separate capture implementation from analyst workflows (#988)	2026-10-08 00:46:21 +08:00
web-runtime.md	feat(browser): attribute native execution and listener sources (#917)	2026-10-07 21:45:07 +08:00
web-source-location.md	feat(browser): trace captured website source-map locations (#897)	2026-10-07 16:21:18 +08:00
website-module-trace.md	feat(browser): trace captured website module imports (#879)	2026-10-07 14:59:52 +08:00
website-script-export.md	feat(web): export captured scripts for JavaScript application analysis (#801)	2026-10-07 05:24:32 +08:00
windows-ghidra-p0.md	docs: publish VitePress documentation on GitHub Pages	2026-10-07 16:58:04 +08:00