From 3cb8c48e74d7ee9883fd2e6d94d8e5aea7421d8c Mon Sep 17 00:00:00 2001 From: Affaan Mustafa Date: Tue, 19 May 2026 20:23:53 -0400 Subject: [PATCH] docs: sync May 20 ECC Tools evidence --- docs/ECC-2.0-GA-ROADMAP.md | 92 ++++++++++++++++++- .../2.0.0-rc.1/preview-pack-manifest.md | 2 +- .../publication-evidence-2026-05-19.md | 22 ++++- 3 files changed, 108 insertions(+), 8 deletions(-) diff --git a/docs/ECC-2.0-GA-ROADMAP.md b/docs/ECC-2.0-GA-ROADMAP.md index 589847c7..4790ae89 100644 --- a/docs/ECC-2.0-GA-ROADMAP.md +++ b/docs/ECC-2.0-GA-ROADMAP.md @@ -17,6 +17,35 @@ The May 19 release/growth execution map lives at It is the operator surface for the final ECC 2.0 repo identity, video suite, partner/sponsor funnel, consulting/talk funnel, and social launch plan. +## 2026-05-20 Delta + +- The tracked platform audit is still green on May 20 with 0 open PRs, + 0 open issues, 0 discussion maintainer-touch gaps, 0 answerable Q&A gaps, + 0 conflicting PRs, and 0 blocking dirty files across `affaan-m/ECC`, + `affaan-m/agentshield`, `affaan-m/JARVIS`, `ECC-Tools/ECC-Tools`, and + `ECC-Tools/ECC-website`. +- The new #2015 setup-location Q&A was answered and marked accepted. The + answer keeps install guidance conservative: do not install into `C:\`; use a + normal workspace, install the `ecc@ecc` Claude plugin once, copy only needed + rule folders when using manual rules, and avoid stacking plugin plus full + manual install. +- ECC-Tools PRs #80-#88 landed the next hosted-platform batch: runtime + receipts now require failure reasons; AgentShield fleet approval IDs survive + hosted security review and render into comments/check-runs; Linear follow-up + sync reuses deterministic external IDs; hosted AgentShield remediation items + sync to Linear; hosted job observability events are emitted for queued, + completed, blocked, failed, and budget-blocked states; and both hosted job + status comments and hosted depth-plan check-runs read back recent + observability/budget events. PR #88 adds the authenticated observability API + readback for operator dashboards and production smoke tests. +- Linear ITO-54 and the ECC Platform Roadmap now have the May 20 ECC-Tools + hosted observability update comments + `74dcc101-3be5-4173-be13-62b80d54f569` and + `348ea8f5-2a2d-46d9-a0fe-ed99653e7fe5`, after earlier PR #84/#85 comments + recorded remediation sync and hosted observability events. PR #88 is recorded + in Linear comments `291e2a4b-06e3-4672-a057-cdb141478161` and + `b2d35de0-ca49-44cb-982a-ddec229e7691`. + ## 2026-05-19 Delta - The public repo identity is now `affaan-m/ECC`; release, package, plugin, @@ -38,7 +67,7 @@ partner/sponsor funnel, consulting/talk funnel, and social launch plan. ## Current Evidence -As of 2026-05-19: +As of 2026-05-20: - GitHub queues are clean across `affaan-m/ECC`, `affaan-m/agentshield`, `affaan-m/JARVIS`, `ECC-Tools/ECC-Tools`, and @@ -56,9 +85,10 @@ As of 2026-05-19: now at 0 open PRs and 0 open issues by live `gh search`. Archived repos touched during closure were restored to archived state. - GitHub discussions are current across those tracked repos: - `affaan-m/ECC` has 59 total discussions and 0 without + `affaan-m/ECC` has 60 total discussions and 0 without maintainer touch after the May 19 #2003 AURA integration proposal was routed - as an external-adapter proposal, not core wallet/escrow coupling; AgentShield, + as an external-adapter proposal, not core wallet/escrow coupling, and the + May 20 #2015 setup-location Q&A was answered and accepted; AgentShield, JARVIS, ECC Tools, and the ECC Tools website have discussions disabled or 0 total discussions. `docs/architecture/discussion-response-playbook.md` now supplies the ITO-59 response categories, public templates, security-escalation @@ -108,6 +138,16 @@ As of 2026-05-19: comment `d42bf0e2-7a8e-4934-9f3f-e281498ee805`. The supply-chain gate now also records the `@types/node@25.7.0` pin and `brace-expansion` lock refresh needed for current npm audit/signature verification. +- The May 20 ECC-Tools hosted-platform pass extends that evidence with PR #80 + through PR #88, all merged after green GitHub Verify/Security Audit/Workers + Builds checks. Local validation for the final depth-plan observability slice + passed the focused hosted depth-plan route test, the full route suite + (89/89), typecheck, lint, full ECC-Tools Vitest suite (683/683), and + `git diff --check`. PR #88 additionally exposes authenticated hosted + observability readback at `/api/analysis/observability` for operator + dashboards and production smoke tests; its local verification passed + typecheck, lint, the full ECC-Tools Vitest suite (686/686), and + `git diff --check`. - `docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-19.md` regenerates the ITO-44 prompt-to-artifact dashboard from live platform audit evidence: PR queue, issue queue, discussion queue, local worktree gate, @@ -662,6 +702,44 @@ As of 2026-05-19: fleet summaries are collected as harness evidence, target paths are mapped to Claude, Codex, OpenCode, MCP, plugin, and cross-harness owners, and routed findings carry source evidence paths for operator review. +- ECC-Tools PR #79 merged as `67ee247ae1b7b50ecc1261ed5d62d65cc8390da8` + and redacts billing announcement gate account output: the billing preflight + and live readback now print stable account fingerprints and sanitized + readiness booleans instead of raw account logins or KV key names. +- ECC-Tools PR #80 merged as `4efc8cc858022f84c844690f3298633b081c4398` + and requires runtime receipt failure reasons before harness runtime receipts + can count as hosted observability evidence. +- ECC-Tools PR #81 merged as `1fbf635f492284f75ba7166c029c39eb8cc15794` + and preserves AgentShield fleet approval IDs through hosted security review + so policy-promotion follow-ups keep owner-review identity stable. +- ECC-Tools PR #82 merged as `7a7b4d096a176ae80b3a2076c09d45601e36013a` + and renders AgentShield fleet approval IDs in hosted comments and check-runs, + giving operators a direct bridge from hosted security review back to + AgentShield policy-promotion review items. +- ECC-Tools PR #83 merged as `b6b107f33961bef18a85fb619f3a976eb5d752dd` + and makes Linear follow-up sync reuse deterministic external IDs before title + fallback, preventing duplicate deferred backlog issues during repeated + `/ecc-tools followups sync-linear` runs. +- ECC-Tools PR #84 merged as `73bac7058071c55cb30c6b8ac6db779b3660c02c` + and syncs hosted AgentShield remediation items to Linear when the workspace + token/team are configured; hosted result comments now include created/reused + Linear remediation links. +- ECC-Tools PR #85 merged as `1637e0f2bfa0a889387f2c20675680ccc5528123` + and emits hosted job observability events for queued, completed, blocked, + failed, and budget-blocked states into `ANALYSIS_CACHE`, including budget + snapshots and result counts. +- ECC-Tools PR #86 merged as `5a9e94d3ff860307c3e7fd9fd065f0de2bd633dd` + and reads recent hosted observability events in + `/ecc-tools analyze --job status`, so status comments show budget snapshots, + blocked results, and budget-blocked outcomes alongside latest job runs. +- ECC-Tools PR #87 merged as `508fbc02b63cf1fcb5af2f3624608fa66e53b5d4` + and adds the same hosted observability readback to hosted depth-plan + check-runs, keeping the PR check surface aligned with status comments. +- ECC-Tools PR #88 merged as `c836ac3fb24ed7e2ae38cd61e41c9651ac9c00f8` + and exposes authenticated hosted observability API readback at + `/api/analysis/observability`, summarizing recent hosted events by event type + and job while skipping malformed stale KV records. The deployment runbook now + includes the production smoke command for operator/dashboard readback. - AgentShield PR #90 merged as `6d1c57c92000541d65a3b6bc366f0322d7d0dacc` and adds durable fleet `reviewItems`: `agentshield evidence-pack fleet --json` now returns owner-ready review items with route, severity, repository/target @@ -1062,6 +1140,14 @@ Acceptance: ECC-Tools commit `632e059` adds sanitized target-account readback, so the final operator gate should verify the exact Marketplace test account without printing its login or raw KV key names. + ECC-Tools PR #79 redacts the billing announcement gate account output; + PR #80 requires failure reasons in runtime receipts; PRs #81/#82 preserve + and render AgentShield fleet approval IDs; PR #83 makes Linear follow-up + sync idempotent by external ID; PR #84 syncs hosted AgentShield + remediation items into Linear; PR #85 emits hosted job observability events + including budget-blocked outcomes; PRs #86/#87 read those events back into + hosted status comments and hosted depth-plan check-runs; and PR #88 exposes + authenticated hosted observability API readback for operator dashboards. 2. Run `npm run billing:announcement-gate -- --preflight --account `, then run the same command without `--preflight` against a Marketplace-managed test account and require `announcementGate.ready === diff --git a/docs/releases/2.0.0-rc.1/preview-pack-manifest.md b/docs/releases/2.0.0-rc.1/preview-pack-manifest.md index a3e397e9..e423d3c4 100644 --- a/docs/releases/2.0.0-rc.1/preview-pack-manifest.md +++ b/docs/releases/2.0.0-rc.1/preview-pack-manifest.md @@ -26,7 +26,7 @@ surfaces, or posting announcements. | `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-16.md` | Current May 16/17 queue cleanup, recsys skill merge, GateGuard triage, PR #1947 supply-chain protection, AgentShield #87 plugin-cache confidence evidence, AgentShield #88 evidence-pack inspect/readback, AgentShield #89 evidence-pack fleet routing, AgentShield #90 fleet review items, AgentShield #91 policy export, AgentShield #92 policy promotion, ECC-Tools #76 fleet-summary consumption, ECC-Tools #77 hosted finding evidence paths, ECC-Tools #78 harness policy-route linking, dashboard refresh, and combined Node/Rust/release-surface gate evidence through the May 16 mirror | Must still be repeated from a strict clean checkout before real publication | | `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-17.md` | May 17 queue-zero state, Japanese localization merge, Dependabot TypeScript and Node type merges, post-merge ja-JP lint repair, Mini Shai-Hulud/TanStack protection recheck, npm audit/signature checks, legacy and Linear progress routing, deterministic preview-pack smoke, operator dashboard refresh, Linear sync, and GitHub CI evidence for `27dc2918` | Superseded by the May 18 evidence snapshot; repeat from a strict clean checkout before real publication | | `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-18.md` | May 18 queue-zero state, #1970/#1971/#1972 merge batch, #1978 review/closure, supply-chain recheck, AgentShield evidence mirror, Linear sync, current-head CI/security scan success for `4470e2e6`, and ITO-46 naming/plugin publication closure | Superseded by the May 19 ECC identity, video, and growth evidence snapshot | -| `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-19.md` | Current May 19 evidence for canonical ECC identity, release video suite, partner/sponsor/talk outreach pack, owner approval packet, release approval gate, May 19 operator dashboard, preview-pack smoke digest `531328aaaa53`, 2568-test local suite, PR #1998 visual QA CI success, PR #1999 dashboard evidence CI success, PR #2000 suite-count evidence success, PR #2001 owner approval packet CI success, PR #2002 owner-approval dashboard gate CI success, PR #2004 Linear readiness evidence sync CI success, PR #2008 supply-chain evidence gate CI success, post-PR #2006 main CI success, PR #2009 project-registry hygiene CI success, post-PR #2009 main CI success, post-PR #2011 GateGuard CI success, post-PR #2013 release-approval-gate CI success, ECC-Tools #79 billing-announcement redaction hardening, JARVIS #15/#16 queue/deploy repair, and the May 19 Linear sync document | Current strongest readiness snapshot; must still be repeated from a strict clean checkout before real publication | +| `docs/releases/2.0.0-rc.1/publication-evidence-2026-05-19.md` | Current May 19/20 evidence for canonical ECC identity, release video suite, partner/sponsor/talk outreach pack, owner approval packet, release approval gate, May 19 operator dashboard, preview-pack smoke digest `531328aaaa53`, 2568-test local suite, PR #1998 visual QA CI success, PR #1999 dashboard evidence CI success, PR #2000 suite-count evidence success, PR #2001 owner approval packet CI success, PR #2002 owner-approval dashboard gate CI success, PR #2004 Linear readiness evidence sync CI success, PR #2008 supply-chain evidence gate CI success, post-PR #2006 main CI success, PR #2009 project-registry hygiene CI success, post-PR #2009 main CI success, post-PR #2011 GateGuard CI success, post-PR #2013 release-approval-gate CI success, ECC-Tools #79 billing-announcement redaction hardening, ECC-Tools #80-#88 runtime-receipt, AgentShield approval-ID, Linear sync, remediation sync, hosted observability event/status/depth-plan/API readback, JARVIS #15/#16 queue/deploy repair, and the May 19/20 Linear sync comments | Current strongest readiness snapshot; must still be repeated from a strict clean checkout before real publication | | `docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-17.md` | Previous prompt-to-artifact operator dashboard | Superseded by the May 18 generated dashboard | | `docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-18.md` | Previous prompt-to-artifact operator dashboard | Superseded by the May 19 generated dashboard | | `docs/releases/2.0.0-rc.1/operator-readiness-dashboard-2026-05-19.md` | Current prompt-to-artifact operator dashboard | Shows PR/issue/discussion/platform/supply-chain gates current and adds the current `$1,728/mo` to `$10,000/mo` hypergrowth, video owner-approval, and outbound-pack operating lanes | diff --git a/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-19.md b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-19.md index 54b04b53..05aa2bc9 100644 --- a/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-19.md +++ b/docs/releases/2.0.0-rc.1/publication-evidence-2026-05-19.md @@ -70,6 +70,18 @@ Tracked repositories in the platform audit were: | JARVIS deploy repair | JARVIS PR #16 merged as `4369c34babd21d539c420866da51c7a8365f1c9e`; the deploy workflow no longer uses an invalid job-level `secrets.*` condition, Vercel deploy skips cleanly when secrets are absent, backend image build/push succeeds, and main CI, CodeQL, and Deploy runs `26129539376`, `26129539427`, and `26129539425` completed successfully | | Linear roadmap sync | Linear document `ecc-may-19-late-queue-zero-and-release-gate-sync-1c26f65e6b3f`, project comment `d42bf0e2-7a8e-4934-9f3f-e281498ee805`, and issue comments on ITO-44, ITO-50, ITO-54, ITO-56, and ITO-61 record the late-pass queue-zero, release-gate, billing-safety, and progress-sync state. | +## May 20 Hosted Observability Sync + +| Surface | Evidence | +| --- | --- | +| ECC discussion queue | Discussion #2015 was answered and marked accepted with conservative setup guidance: do not install in `C:\`; use a normal workspace; install `ecc@ecc` once through the Claude plugin marketplace; copy only needed rule folders when using manual rules; do not stack plugin plus full manual install. | +| ECC platform audit | `node scripts/platform-audit.js --json` at `2026-05-20T00:25:38Z` returned ready true with 0 open PRs, 0 open issues, 0 discussion maintainer-touch gaps, 0 answerable Q&A gaps, 0 conflicting PRs, and 0 dirty blockers across `affaan-m/ECC`, `affaan-m/agentshield`, `affaan-m/JARVIS`, `ECC-Tools/ECC-Tools`, and `ECC-Tools/ECC-website`. | +| ECC-Tools #80/#81/#82 | PR #80 merged runtime-receipt failure-reason enforcement as `4efc8cc858022f84c844690f3298633b081c4398`; PR #81 preserved AgentShield fleet approval IDs as `1fbf635f492284f75ba7166c029c39eb8cc15794`; PR #82 rendered those approval IDs in hosted security review comments/check-runs as `7a7b4d096a176ae80b3a2076c09d45601e36013a`. | +| ECC-Tools #83/#84 | PR #83 merged deterministic Linear external-ID reuse for deferred follow-ups as `b6b107f33961bef18a85fb619f3a976eb5d752dd`; PR #84 merged hosted AgentShield remediation sync to Linear as `73bac7058071c55cb30c6b8ac6db779b3660c02c`. Local validation covered focused route/client tests, typecheck, lint, full ECC-Tools test suite, and whitespace checks before merge; GitHub Verify, Security Audit, and Workers Builds passed. | +| ECC-Tools #85/#86/#87 | PR #85 merged hosted job observability events as `1637e0f2bfa0a889387f2c20675680ccc5528123`; PR #86 merged hosted status observability readback as `5a9e94d3ff860307c3e7fd9fd065f0de2bd633dd`; PR #87 merged hosted depth-plan observability readback as `508fbc02b63cf1fcb5af2f3624608fa66e53b5d4`. Local validation for the final depth-plan readback slice passed the focused hosted depth-plan route test, full route suite (89/89), typecheck, lint, full ECC-Tools Vitest suite (683/683), and `git diff --check`; GitHub Verify, Security Audit, and Workers Builds passed before merge. | +| ECC-Tools #88 | PR #88 merged authenticated hosted observability API readback as `c836ac3fb24ed7e2ae38cd61e41c9651ac9c00f8`. `GET /api/analysis/observability` now summarizes hosted events by event type and job for operator/dashboard readback, skips malformed stale KV records, and the deployment runbook includes the production smoke command. Local verification passed typecheck, lint, full ECC-Tools Vitest suite (686/686), and `git diff --check`; GitHub Verify, Security Audit, and Workers Builds passed before merge. | +| Linear roadmap sync | Linear ITO-54 comment `74dcc101-3be5-4173-be13-62b80d54f569` and ECC Platform Roadmap project comment `348ea8f5-2a2d-46d9-a0fe-ed99653e7fe5` record the May 20 hosted observability status/depth-plan readback batch; Linear comments `291e2a4b-06e3-4672-a057-cdb141478161` and `b2d35de0-ca49-44cb-982a-ddec229e7691` add the #88 observability API readback; earlier comments on ITO-54, ITO-48, and the project record the #84 hosted remediation sync and #85 hosted observability event emission batches. | + ## Release And Growth Evidence | Gate | Command | Result | @@ -111,7 +123,7 @@ Tracked repositories in the platform audit were: | Owner approval proof | `owner-approval-packet-2026-05-19.md` centralizes release, package, plugin, video, billing, social, and outbound decision gates | | Business baseline | Hypergrowth command center and partner pack use `$1,728/mo` current MRR, `$10,000/mo` target MRR, and `$8,272/mo` gap | | Operator dashboard | `operator-readiness-dashboard-2026-05-19.md` pulls the growth baseline into the same queue, publication, video, outbound, AgentShield, ECC Tools, Linear, and supply-chain control surface | -| Linear progress proof | Linear project document `ecc-may-19-post-pr-2002-sync-64cef8f668e0` mirrors the post-PR #2002 state and records active lanes for launch materials, AgentShield, ECC Tools deep analysis, observability, and final release publication; Linear document `ecc-may-19-late-queue-zero-and-release-gate-sync-1c26f65e6b3f` adds the PR #2013 approval gate, ECC-Tools #79 redaction hardening, and JARVIS #15/#16 queue/deploy repair evidence | +| Linear progress proof | Linear project document `ecc-may-19-post-pr-2002-sync-64cef8f668e0` mirrors the post-PR #2002 state and records active lanes for launch materials, AgentShield, ECC Tools deep analysis, observability, and final release publication; Linear document `ecc-may-19-late-queue-zero-and-release-gate-sync-1c26f65e6b3f` adds the PR #2013 approval gate, ECC-Tools #79 redaction hardening, and JARVIS #15/#16 queue/deploy repair evidence; May 20 Linear comments `74dcc101-3be5-4173-be13-62b80d54f569`, `348ea8f5-2a2d-46d9-a0fe-ed99653e7fe5`, `291e2a4b-06e3-4672-a057-cdb141478161`, and `b2d35de0-ca49-44cb-982a-ddec229e7691` add ECC-Tools #86/#87/#88 hosted observability readback evidence to ITO-54 and the project | ## Current Publication Blockers @@ -138,9 +150,11 @@ The tracked public PR queue, issue queue, discussion queue, canonical ECC identity, release video suite, preview pack, growth outreach packet, per-project Claude Code adapter surface, continuous-learning project registry hygiene, GateGuard quoted git introspection fix, deterministic release approval gate, -ECC-Tools billing-announcement redaction hardening, and JARVIS security/deploy -queue repairs are current on May 19, 2026 for `main` through -`9819626459a662773be7d0b1c18d82c1316b8c36`. The remaining video work is owner +ECC-Tools billing-announcement redaction hardening, ECC-Tools hosted +observability readback, and JARVIS security/deploy queue repairs are current on +May 20, 2026 for ECC `main` through +`b3c015c7443c6617f897654613c21eddc3d25764` plus ECC-Tools `main` through +`c836ac3fb24ed7e2ae38cd61e41c9651ac9c00f8`. The remaining video work is owner approval, upload, and public URL attachment, not render or QA production. This improves publication readiness but does not replace the approval-gated