Skip to content

feat: first Flow 1.34.0 remote-safe-synthetic qualification-release - #31

Merged
abrichr merged 2 commits into
mainfrom
agent/flow-134-ledger
Sep 2, 2026
Merged

feat: first Flow 1.34.0 remote-safe-synthetic qualification-release#31
abrichr merged 2 commits into
mainfrom
agent/flow-134-ledger

Conversation

@abrichr

@abrichr abrichr commented Sep 2, 2026

Copy link
Copy Markdown
Member

This is a remote-safe-synthetic Flow 1.34.0 package admission, until revoked; not seven-target Production; not a MockMed production_acceptance flip; native DMG still unsigned.

#30 parked the signed objects under local-candidates/. This PR copies them to production-evidence/, installs the until-revoked signer registry (inner qa-ed25519-9cf4bca214c01d79, outer oa-public-trust-ed25519-9cf4bca214c01d79), and appends the first qualification-release/v2 row for target flow with claim_scope production_flow.

Two commits, on purpose. 6e28818a holds the objects and registry. The ledger reference's registry_source_commit is that SHA. Don't re-sign; the nested refs inside the signed object still name the pre-registry commit they were built with.

Bound PyPI files, checked live:

  • openadapt_flow-1.34.0-py3-none-any.whl sha256:56d32818989cb3a92830080ead39e10b08718c55e00988117f22cbfeaac98854
  • openadapt_flow-1.34.0.tar.gz sha256:a941a70015fe91897e655bfc9bf83e6cf8fbcf8bd4e4c7206ffb133c505203f8

validate_production_lifecycle.py accepts the row and still reports 0 active Production admissions. Synthetic evidence isn't enough to move Flow (or anyone else) into Production. The campaign is 1 cell x 3 trials per class. It isn't the MockMed evals set.

Reviewer check: confirm the ledger kind is qualification-release, expires_at on the signed object is JSON null, and the registry revision is exactly 2 against empty-v2 genesis.

Opened by an agent session, not the founder.

Install the until-revoked signer registry and the signed Flow 1.34.0
object pairs under production-evidence/. The ledger row that binds
these objects is the next commit, with registry_source_commit set to
this SHA.
Bind the registered qualification-release/v2 object as the first
ledger row. registry_source_commit is 6e28818, the commit that
holds the objects. The row is until-revoked remote-safe-synthetic
evidence. It does not derive seven-target Production.
@abrichr
abrichr merged commit a8b3c06 into main Sep 2, 2026
3 checks passed
@abrichr
abrichr deleted the agent/flow-134-ledger branch September 2, 2026 18:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant