Skip to content

Record patch 0.1.1 Python wheel reproducibility blocker#154

Merged
docushell-dev merged 1 commit into
mainfrom
dev/0.1.1-python-wheel-reproducibility-blocker
Jun 24, 2026
Merged

Record patch 0.1.1 Python wheel reproducibility blocker#154
docushell-dev merged 1 commit into
mainfrom
dev/0.1.1-python-wheel-reproducibility-blocker

Conversation

@docushell-dev

Copy link
Copy Markdown
Collaborator

Summary

  • record that the approved Python wheel SHA did not match a fresh pre-upload rebuild
  • classify the root cause as wheel ZIP metadata timestamp drift, with member byte content unchanged
  • record deterministic SOURCE_DATE_EPOCH=0 rebuild evidence and keep PyPI upload blocked pending a new deterministic candidate request/decision

Verification

  • python3 .github/scripts/test_patch_0_1_1_python_wheel_reproducibility_blocker.py
  • python3 .github/scripts/test_patch_0_1_1_python_publication_approval_decision.py
  • python3 .github/scripts/test_release_candidate_prep.py
  • python3 .github/scripts/test_milestone_e_source_snapshot_candidate_audit.py
  • make light-check PYTHON=python3
  • make release-candidate-prep PYTHON=python3
  • git diff --check

Boundaries

  • no PyPI upload is performed or approved by this PR
  • the prior approval decision is treated as historical evidence, not sufficient for upload
  • deterministic wheel SHA e0292276e711e75d4f7e1bb8c2c6137c6e89d4c343dd308943eb9b22094ea451 is recorded for a future approval request, not approved here
  • hosted surfaces, production positioning, Windows packaged artifacts, bundled PDFium, public benchmark claims, ethos-doc, and ethos-rag remain blocked

Signed-off-by: docushell-admin <hello@docushell.com>
@docushell-dev docushell-dev merged commit d3e3953 into main Jun 24, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant