[megyptm]

يجهّز الأرشيف المستهدف لـ 1.0.0-rc.3 قبل النشر. اعتمد المالك هذا الإصدار كحد لتغيير توافق PHP في DEC-006. Composer يقبل الآن >=8.4.27 <8.5.0 || >=8.5.12 <8.6.0، مع تحقق مستقل باستخدام Composer Semver بجانب فحص إصدار PHP الفعلي.

• RED على قيد main السابق: Composer Semver قبل 8.4.26 وفشل الفحص.
• GREEN: قُبل 8.4.27 و8.5.12 ورُفض 8.4.26 و8.5.11 و8.6.0.
• فحص Git وComposer archive نجح محليًا على HEAD. روجعت هوية الهدف، وأمر التثبيت، وCHANGELOG غير المؤرخ، وحالة النشر عند التأهيل، والترخيص.
• Manifest VALID على d3dd98b. لا تغييرات في runtime API.
• rc.2 هو الإصدار المنشور. تأهيل rc.3 النهائي يتم على SHA الناتج في main، والدمج والـTag والنشر تحتاج اعتمادًا منفصلًا.

[megyptm]

Archive verification on f9ced1c465a007b3ef621593faa56fa963db1d2c passed for both Git and Composer archives. The check now compares the entire extracted src/ tree to the candidate checkout.

Two isolated negative runs separately excluded src/DTO/VerifiedReturnTargetDTO.php through Git export attributes and Composer archive configuration. Each run failed at the corresponding archive comparison and named the missing file.

[megyptm]

تأهيل 1.0.0-rc.3 بعد الدمج السكواش على main@22100b0581600ee51c89f08f93aaf2662023d994، بشجرة Git مطابقة للـHEAD المراجع f9ced1c.

• Final Gate على main نجحت مع كل الفحوصات السبعة.
• Quality على نفس SHA سجّلت قبول PHP 8.4.27 و8.5.12 ورفض 8.4.26 و8.5.11 و8.6.0. فحص أرشيفَي Git وComposer نجح محليًا وفي CI، وطابقت شجرة src/ في كل أرشيف شجرة المرشّح. دليل رفض الأرشيف عند نقص ملف Runtime.
• المراجعة الدلالية أكدت هوية الأرشيف 1.0.0-rc.3، أمر التثبيت الدقيق بعد النشر، حالة النشر عند التأهيل، ومدخل CHANGELOG بلا تاريخ. الترخيص وحدود PHP متّسقين مع Composer، والـManifest VALID على d3dd98b.
• التأهيل مرتبط بالـSHA أعلاه. إصدار rc.3 لسه غير منشور وينتظر اعتماد النشر.

[megyptm]

Published artifact verification — v1.0.0-rc.3

• Published as a GitHub Pre-release and available on Packagist. The tag and Composer source and dist references resolve to 22100b0581600ee51c89f08f93aaf2662023d994.
• Installation and identity — PASS. A clean Composer project with an isolated cache and configuration, minimum-stability: stable, and actual PHP 8.4.27 with sodium installed the exact requirement maatify/php-return-target:1.0.0-rc.3@RC without platform overrides. Composer recorded installation-source=dist at vendor/maatify/php-return-target from the GitHub ZIP. Real platform checks passed.
• Archive contents and presentation — PASS. All 75 installed files matched the tagged Git archive, including the full runtime tree and consumer documentation. The archive contains neither a nested vendor directory nor a Composer lockfile. README identifies rc.3 and gives the exact installation command. README, SECURITY, and the package reference scope publication facts to qualification time. CHANGELOG has the undated rc.3 entry, and the Maatify Ltd. license and PHP requirements agree with the manifest.
• The bundled example ran directly from the installed package with the consumer's production autoloader and preserved the percent-encoded query space.

Qualification evidence on main

[megyptm]

Published Consumer Verification Harness — PASS

The harness shipped in maatify/php-return-target v1.0.0-rc.3 passed twice in separate clean Composer consumers on actual PHP 8.4.27 with sodium. Each resolved the exact RC from Packagist with minimum-stability: stable, isolated Composer configuration and cache, and no platform overrides. Platform requirements passed in both runs.

Composer recorded installation-source=dist at vendor/maatify/php-return-target. The ZIP distribution, its source reference, and the tag all matched 22100b0581600ee51c89f08f93aaf2662023d994.

For each run, the shipped consumer-verification/verify.php was copied verbatim to the clean consumer root and used that project's production autoloader. The two runs produced identical passing output for the public issue/verify flow, exact target preservation, query-space handling, restriction policy, safety checks, and expiry.

Published artifact verification