Skip to content

Record the v0.2.0 release checks and rollback drill #64

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
professor3333 merged 1 commit into from
Nov 15, 2026
Merged

Record the v0.2.0 release checks and rollback drill #64

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions docs/deployment.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -134,9 +134,11 @@ each step, including that reviews saved along the way survive:
TRIGGERMAP_HOST_PORT=8000 deploy/rollback_drill.sh <release-a> <release-b>
```

Last run (2026-11-06, local Docker): rules release `r1`, then the v0.1.0 CRF release
(`crf-batches-01-02`, a different image, bundle and policy), then rollback to `r1`. Every
step verified, in 15 seconds total. The previous run was on 2026-10-20 (`r1` → `r2` → `r1`).
Last run (2026-11-15, local Docker): v0.1.0, then v0.2.0 (a different image from the same CRF
bundle and policy), then rollback to v0.1.0. Every step verified: ready check against the release
manifest, extraction, idempotent review save, retrieval and export. Reviews were kept, and the
run took 51 seconds. Earlier runs: 2026-11-06 (`r1` → v0.1.0 → `r1`, 15 s) and 2026-10-20
(`r1` → `r2` → `r1`).

The release image (`release.yml`) is built with `EXTRAS="serve baselines"`, so it serves both
rules and CRF releases.
Expand Down
10 changes: 10 additions & 0 deletions docs/release_notes/v0.2.0.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,16 @@ evaluation, reproducibility, demo and documentation work since v0.1.0 ships with
so the measured scores may not carry over to current advisories.
- No usability study has been run.

## Release checks (2026-11-15)

- `release.yml` on the tag passed lint, types and tests, then built the image, passed the
container smoke test and pushed it: `ghcr.io/professor3333/triggermap@sha256:cc1578f9a488a09da717a298db5f0018350272fb5b540157f3d1016b04f376ce`
(from commit `1c2d0cc`). The image can be pulled without logging in.
- The attached `crf-batches-01-02.tgz` is byte-identical to the v0.1.0 asset (SHA-256 above).
- Rollback drill on local Docker: v0.1.0 → v0.2.0 → v0.1.0. Every step was verified (ready check,
extraction, idempotent review save, retrieval, export), reviews were kept, and the run took
51 seconds.

## Deploying it

Follow [`docs/deployment.md`](../deployment.md) with the image digest from
Expand Down