v0.29.0 Release Preparation

Status: release candidate qualified, published, and externally audited (2026-09-03). This record owns the candidate identity, qualification contract, and final local artifact evidence. The immutable publication evidence is ../releases/v0.29.0.md.

Release Boundary

v0.29.0 completes ordinary process input for command-line applications. nocter run partitions compiler and child arguments once and transports every child value as an opaque native OS string. io.stdin() creates a borrowed File, while explicit BufReader state owns read-ahead bytes and line assembly. The same process contract crosses native execution, command orchestration, semantic editor queries, formatting, public examples, and installed-home qualification.

The Phase 5 review found no remaining correctness or architecture finding in that boundary. The public release notes are ../../releases/v0.29.0.md. Root download links and the public release index advance to v0.29.0 in the separate publication commit.

Candidate Identity

The release inputs agree on 0.29.0:

• development/packaging/VERSION, the sole authored release-version input;
• the #package version in development/std/index.nct;
• the archive name and installed manifest derived from VERSION and RELEASE.json;
• compiler and language-server reporting derived from the validated installed home.

The qualified release-content commit is 724bf0bb6edcb9c7c8a45d2e8aa0645f6ae78544. Documentation-only qualification evidence recorded after that commit is not an artifact input.

Qualification Contract

The clean release-content commit must pass:

1. 1. two independent complete locked workspace test runs in distinct external Cargo targets;
2. warnings-denied all-target Clippy in both external targets;
3. formatter, no-default-features checking, documentation generation and reproducibility, repository whitespace, and packaging-input validation;
4. the explicit public-HTTPS dependency-acquisition test;
5. checks and representative native execution for every public example against an isolated candidate home;
6. two independent optimized package builds with byte-identical archives and recursively identical installed homes;
7. fresh extraction checks for version, doctor, help, initialization, locked/offline check and test, deterministic graph, exact text-banner and stdin-prefix process contracts, native run, explicit build and execution, and framed LSP analysis;
8. rejection after either the installed compiler or standard-library content is changed, plus proof that ordinary qualification commands do not mutate the installed home.

Qualification Evidence

The exact candidate commit passed two complete locked workspace runs in distinct external Cargo targets. Each run executed 1,533 tests and reported 1,532 passed, zero failed, and one ignored public-network test. Warnings-denied all-target Clippy passed independently in both targets. The ignored HTTPS Git acquisition test was then run explicitly and passed without invoking an external Git executable.

The candidate also passed no-default-features checking, formatter verification, documentation generation and reproducibility, packaging-script syntax validation, manifest-input validation, and repository whitespace validation. Documentation generation produced 397 pages.

Two independent optimized package builds produced byte-identical archives and recursively identical installed homes. Fresh extraction then passed:

• --version, doctor, and --help against release 0.29.0;
• package initialization plus locked/offline checking and testing;
• locked/offline checking of every public single-file and package example;
• exact text-banner native output with empty stderr;
• exact stdin-prefix argument, stdin, status, stdout, and stderr behavior through nocter run;
• two byte-identical package-graph queries;
• package run, explicit build, and direct execution;
• one framed LSP initialize/open/diagnostic/hover/completion/definition/shutdown session;
• installed-home immutability across all ordinary commands;
• rejection of separately tampered compiler and standard-library copies.

The retained local candidate is:

• archive: dist/nocter-v0.29.0-arm64-darwin.tar.gz;
• size: 8,271,538 bytes;
• archive SHA-256: 3f3fabf70062fc33707206739966b5f4c5234d44f93ed2add428e15cfb3bdb1d;
• compiler SHA-256: 13f8952b35c671518dbd3537868c6cfd19bf6282031b4ecf7c45cf8106ea5efe;
• standard-library tree SHA-256: 6f968d1cd4d98a6cf49145217194867165d948b2600cdccdc2a4ab16bd432b52;
• standard-library regular files: 133.

Publication Boundary

Separately authorized publication reused the qualified archive without rebuilding it, advanced public latest-release links in a separate commit, created and pushed one annotated v0.29.0 tag, uploaded exactly one archive, and verified the public asset byte for byte. Existing tags and assets must not be replaced.