gofix/portal-tunnel-rs
Watch
1
0
Fork
You've already forked portal-tunnel-rs
 0
Code Issues Pull requests Projects Releases 22 Packages 1 Wiki Activity Actions

test: retarget isolated Axis B fixture to v2.6.0 #103

Merged
ada merged 1 commit from test/v260-axis-b-fixture into master 2026-10-03 08:25:58 +00:00
Conversation 0 Commits 1 Files changed 2 +98 -67
ada commented 2026-10-03 08:18:28 +00:00
Collaborator

Problem

The deterministic Axis B fixture still pinned official v2.5.1 client/Go ingress and used an ambiguous IVNP_AXIS_B_PASS token for a network-isolated artifact-equivalence run. Neither is valid evidence for public deployed v2.6.0.

Change

  • Pin exact upstream v2.6.0 695b60121b9aba68c4612a9bb990e086a2bfd36f and official ARM64 clients; verify published .sha256 and hardcoded downloaded-byte hashes.
  • Fail closed on all ten upstream source rewrite anchors, retaining direct-fallback rejection and mesh/cleanup gates.
  • Classify the fixture as artifact-equivalence/developer-only, explicitly public_deployed_path_verified=false, not a public release pass.

Validation

  • bash -n scripts/v240-axis-b-ivnp-smoke.sh; static fixture contract tests in normal and PYTHONOPTIMIZE=1 environments
  • cargo test --locked (198 passed, 3 ignored), fmt/check/clippy, Go IVNP helper tests
  • Exact v2.6.0 Go ingress build and its binary metadata checked against pinned upstream commit
  • No full runtime fixture or public-path Axis B attempted. Rust package version is still 2.5.1; this preparatory test change does not claim v2.6.0 compatibility or authorize a release.

This PR must pass both required CI contexts on its exact head before merge. It does not remove the release worker's public gate latch.

## Problem The deterministic Axis B fixture still pinned official v2.5.1 client/Go ingress and used an ambiguous `IVNP_AXIS_B_PASS` token for a network-isolated artifact-equivalence run. Neither is valid evidence for public deployed v2.6.0. ## Change - Pin exact upstream v2.6.0 `695b60121b9aba68c4612a9bb990e086a2bfd36f` and official ARM64 clients; verify published `.sha256` and hardcoded downloaded-byte hashes. - Fail closed on all ten upstream source rewrite anchors, retaining direct-fallback rejection and mesh/cleanup gates. - Classify the fixture as artifact-equivalence/developer-only, explicitly `public_deployed_path_verified=false`, not a public release pass. ## Validation - `bash -n scripts/v240-axis-b-ivnp-smoke.sh`; static fixture contract tests in normal and `PYTHONOPTIMIZE=1` environments - `cargo test --locked` (198 passed, 3 ignored), fmt/check/clippy, Go IVNP helper tests - Exact v2.6.0 Go ingress build and its binary metadata checked against pinned upstream commit - No full runtime fixture or public-path Axis B attempted. Rust package version is still 2.5.1; this preparatory test change **does not** claim v2.6.0 compatibility or authorize a release. This PR must pass both required CI contexts on its exact head before merge. It does not remove the release worker's public gate latch.
test: retarget Axis B fixture to upstream v2.6.0
All checks were successful
Rust CI / Format, lint, and test (pull_request) Successful in 6m22s
Details
Rust CI / Build and start linux/arm64 image (no push) (pull_request) Successful in 10s
Details
2e1a9b0cac
ada merged commit 8609b23f73 into master 2026-10-03 08:25:58 +00:00
ada deleted branch test/v260-axis-b-fixture 2026-10-03 08:25:58 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
gofix/portal-tunnel-rs!103
No description provided.