v0.30.0 Release Preparation
Status: release candidate qualified, published, and externally audited (2026-09-03). This record owns the candidate identity, qualification contract, and local artifact evidence. The immutable publication evidence is ../releases/v0.30.0.md.
Release Boundary
v0.30.0 adds one synchronous subprocess operation for exact executable paths. Command owns its validated path and arguments, inherits current process state, consumes itself into one create-and- reap operation, and returns ExitStatus. Exec rejection crosses a private close-on-exec channel and cannot be confused with a child exit code. The public subprocess-status package carries the same contract through native execution, formatter, editor, and installed-home boundaries.
The Phase 5 review found no remaining correctness or architecture finding. Public release notes are ../../releases/v0.30.0.md. Root download links and the public release index advance to v0.30.0 in the separate publication commit.
Candidate Identity
The release inputs agree on 0.30.0:
development/packaging/VERSION, the sole authored release-version input;- the
#packageversion indevelopment/std/index.nct; - the archive name and installed manifest derived from
VERSIONandRELEASE.json; - compiler and language-server reporting derived from the validated installed home.
The qualified release-content commit is 35ce75b3cb8b64fe918c5f4066d3bde14d2521b5. Documentation-only qualification evidence recorded after that commit is not an artifact input.
Qualification Contract
The clean release-content commit must pass:
- 1. two independent complete locked workspace test runs in distinct external Cargo targets;
- warnings-denied all-target Clippy in both external targets;
- formatter, no-default-features checking, documentation generation and reproducibility, repository whitespace, and packaging-input validation;
- the explicit public-HTTPS dependency-acquisition test;
- checks of every public example and representative native execution against an isolated candidate home;
- two independent optimized package builds with byte-identical archives and recursively identical installed homes;
- fresh extraction checks for version, doctor, help, initialization, locked/offline check and
test, deterministic graph, exact
text-banner,stdin-prefix, andsubprocess-statusprocess contracts, native run, explicit build and execution, and framed LSP analysis; - rejection after either the installed compiler or standard-library content is changed, plus proof that ordinary qualification commands do not mutate the installed home.
Qualification Evidence
The exact candidate commit passed two complete locked workspace runs in distinct external Cargo targets. Each run executed 1,538 tests and reported 1,537 passed, zero failed, and one ignored public-network test. Warnings-denied all-target Clippy passed independently in both targets. The ignored HTTPS Git acquisition test was then run explicitly and passed without invoking an external Git executable.
The candidate also passed no-default-features checking, formatter verification, documentation generation and reproducibility, packaging-script syntax validation, manifest-input validation, and repository whitespace validation. Documentation generation produced 415 pages.
Two independent optimized package builds produced byte-identical archives and recursively identical installed homes. Fresh extraction then passed:
--version,doctor, and--helpagainst release0.30.0;- package initialization plus locked/offline checking and testing;
- locked/offline checking of every public single-file and package example;
- exact
text-bannernative output with empty stderr; - exact
stdin-prefixargument, stdin, status, stdout, and stderr behavior throughnocter run; - exact
subprocess-statuslaunch, argument, typed nonzero status, stdout, and stderr behavior; - two byte-identical package-graph queries;
- package
run, explicitbuild, and direct execution; - one framed LSP initialize/open/diagnostic/hover/completion/definition/shutdown session;
- installed-home immutability across all ordinary commands;
- rejection of separately tampered compiler and standard-library copies.
The retained local candidate is:
- archive:
dist/nocter-v0.30.0-arm64-darwin.tar.gz; - size: 8,278,398 bytes;
- archive SHA-256:
2a23e254fbfb07f387b6489d947945c7481f7c03be8d659efefe1c3c697412a8; - compiler SHA-256:
6ac577f60551674f91d739ad23ed82ea6a6225847fd3b6c5538d9a27670115e7; - standard-library tree SHA-256:
c38dce81c1b5933f7115ef884122729643a2594761059807ef1b15147d49e928; - standard-library regular files: 138.
Publication Boundary
Separately authorized publication reused the qualified archive without rebuilding it, advanced public latest-release links in a separate commit, created and pushed one annotated v0.30.0 tag, uploaded exactly one archive, and verified the public asset byte for byte. Existing tags and assets must not be replaced.