From 68cce125cd3f9a6b6995ddb70be52602b153fa59 Mon Sep 17 00:00:00 2001 From: igneum-labs <337424239+igneum-labs@users.noreply.github.com> Date: Wed, 7 Oct 2026 08:57:10 +0000 Subject: [PATCH] release 0.3.19 plan: owed to 0.4.0 (the signing step, income tiers) Co-Authored-By: Claude Fable 5.1 --- docs/plans/release-0.3.19.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/plans/release-0.3.19.md b/docs/plans/release-0.3.19.md index bdc807a6d..87dc55eb1 100644 --- a/docs/plans/release-0.3.19.md +++ b/docs/plans/release-0.3.19.md @@ -276,3 +276,8 @@ e69e8a39 plus the oracle switch: `ProofOracle::active_from` carries `proving_con ## 25. The canary on dc141409 (c18-1, from the wipe 08:51:50Z) Node 3f9aca09, POLL_EXEC=1 and the exec-status fields; the e69e8a39 node stopped by its kill file (frozen at 2,728 blocks since 08:00Z). The form prints the count of "Proofs: asking" lines and of "carries N proof record" IBD errors beside the IBD-end line. Clock: headers through about 09:27Z, the block stage past 2,728 about 09:35Z, synced about 09:50Z, mining reads to 10:00Z, the restart reads to about 10:15Z, then the relay and poison cases; pool-1's "GetBlockTemplate N ms" line after the publish. + +## 26. Owed to the 0.4.0 cut (the launch-pack lane, 08:5xZ; not this tree) + +- The signing step (docs/plans/launch-pack.md section 2.4 on master 9b98b837, gate LG-3 in docs/plans/testnet-go.md): implemented only once the certificates exist (Windows EV Authenticode and an Apple Developer organisation account, both under Igneum Labs LTD, enrolled the day the entity exists; the owner approved both 7 October 2026). Until then 0.4.0 ships unsigned and the download page says so. The step keeps ship-app.mjs's list and adds: windows.yml signtool through the CA's cloud KSP (two secrets; unsigned and marked so without them), Inno SignTool=; ship-app.mjs fetch osslsigncode verify (CN Igneum Labs LTD, SHA-256, timestamp; unsigned fails); build-dmg.sh codesign Developer ID with runtime and timestamp, notarytool --wait Accepted, stapler on the app and the DMG, no quarantine strip; publish-manifest.sh signed_by and notarized per platform, --public refused without; ship-app.mjs verify osslsigncode and spctl --assess on the live files; the download page and the Discord card say "Signed by Igneum Labs LTD" only when the manifest does; tools/ci/signed-release-check.sh in pre-push. Keys never on igneum-build-1. +- docs/analysis/income-tiers.md regenerated from tools/launch/income-tiers.json at the 0.4.0 cut, the rows re-measured on class v4 (node tools/launch/income-tiers.mjs; --check in pre-push).