Step 5: Review artifacts and safe publication

Pause one candidate for human review and publish only after approval

Goal

Pause one candidate for human review. Publish it only after approval.

Scope

Add @vercel/blob and tar-stream as direct application dependencies. Use Node crypto for AES-256-GCM.

Implement these contracts:

The encrypted review artifact: deterministic tar (sorted paths, mode 0644, UID and GID 0, empty owner names, Unix epoch timestamp), key-ring parsing and validation (reject duplicate versions, invalid Base64, and keys that are not 32 bytes), encryption, private Blob upload, and Turso metadata.
The download route and review decision: fresh-administrator download with the required headers, the rackspace-review:<operationId> hook against a 24-hour durable sleep, and one conditional terminal decision.
The atomic Git publication: reviewed base commit, post-approval validation, deterministic blobs, base_tree, deterministic commit, operation branch, and one reconciled pull request.
The manual cleanup path: retention targets, cleanup authorization, the pnpm rackspace:cleanup command, Blob cleanup reconciliation, and branch cleanup with force-with-lease.

Tests

Deterministic tar bytes and manifest.
Key-ring validation and rotation.
Ciphertext authentication and tamper errors.
Private Blob access and idempotent manual removal.
Fresh-admin download authorization and headers.
Download audit errors fail closed.
Repeated approval resumes the same hook.
Conflicting and late decisions fail.
Approval and expiry produce one result.
Publication never occurs before approval.
The current root tree is always base_tree.
Unrelated repository files remain in the tree.
A generated-path default-branch change stops publication.
A retry reuses the expected branch, commit, and pull request.
A different branch hash stops without force.
Automatic artifact and branch removal never occurs.
Cleanup grants are hashed, single-use, operation-scoped, and valid for five minutes.
Blob cleanup retries reconcile a crash after external removal.
Cleanup uses a dry run unless the operator requests one exact operation.
Cleanup refuses an active, unexpired review.
Cleanup refuses every non-terminal operation, including active publication.
Manual orphan cleanup uses one exact deletion refspec and explicit expected commit.
A changed remote head fails branch cleanup without deletion.
Missing local Git authentication fails without deletion.
Cleanup preserves immutable Turso and audit records.
The second plaintext scan blocks publication.

Production gate

Create one review artifact for the representative database. Download and inspect it. Reject the first artifact and verify that no Git ref exists. Then remove the artifact through the administrator cleanup action and prove that its metadata remains.

Create a second artifact. Approve it and verify that exactly one pull request exists. Do not merge until a human reviews the complete diff. Prove the cleanup command in dry-run mode. Remove retained resources manually after the operation becomes terminal.

Scope

Add @vercel/blob and tar-stream as direct application dependencies. Use Node crypto for AES-256-GCM.

Implement these contracts:

The encrypted review artifact: deterministic tar (sorted paths, mode 0644, UID and GID 0, empty owner names, Unix epoch timestamp), key-ring parsing and validation (reject duplicate versions, invalid Base64, and keys that are not 32 bytes), encryption, private Blob upload, and Turso metadata.

The download route and review decision: fresh-administrator download with the required headers, the rackspace-review:<operationId> hook against a 24-hour durable sleep, and one conditional terminal decision.

The atomic Git publication: reviewed base commit, post-approval validation, deterministic blobs, base_tree, deterministic commit, operation branch, and one reconciled pull request.

The manual cleanup path: retention targets, cleanup authorization, the pnpm rackspace:cleanup command, Blob cleanup reconciliation, and branch cleanup with force-with-lease.

Tests

Deterministic tar bytes and manifest.

Key-ring validation and rotation.

Ciphertext authentication and tamper errors.

Private Blob access and idempotent manual removal.

Fresh-admin download authorization and headers.

Download audit errors fail closed.

Repeated approval resumes the same hook.

Conflicting and late decisions fail.

Approval and expiry produce one result.

Publication never occurs before approval.

The current root tree is always base_tree.

Unrelated repository files remain in the tree.

A generated-path default-branch change stops publication.

A retry reuses the expected branch, commit, and pull request.

A different branch hash stops without force.

Automatic artifact and branch removal never occurs.

Cleanup grants are hashed, single-use, operation-scoped, and valid for five minutes.

Blob cleanup retries reconcile a crash after external removal.

Cleanup uses a dry run unless the operator requests one exact operation.

Cleanup refuses an active, unexpired review.

Cleanup refuses every non-terminal operation, including active publication.

Manual orphan cleanup uses one exact deletion refspec and explicit expected commit.

A changed remote head fails branch cleanup without deletion.

Missing local Git authentication fails without deletion.

Cleanup preserves immutable Turso and audit records.

The second plaintext scan blocks publication.

Production gate

Step 5: Review artifacts and safe publication

Pause one candidate for human review and publish only after approval

Goal

Pause one candidate for human review. Publish it only after approval.

Scope

Add @vercel/blob and tar-stream as direct application dependencies. Use Node crypto for AES-256-GCM.

Implement these contracts:

The encrypted review artifact: deterministic tar (sorted paths, mode 0644, UID and GID 0, empty owner names, Unix epoch timestamp), key-ring parsing and validation (reject duplicate versions, invalid Base64, and keys that are not 32 bytes), encryption, private Blob upload, and Turso metadata.
The download route and review decision: fresh-administrator download with the required headers, the rackspace-review:<operationId> hook against a 24-hour durable sleep, and one conditional terminal decision.
The atomic Git publication: reviewed base commit, post-approval validation, deterministic blobs, base_tree, deterministic commit, operation branch, and one reconciled pull request.
The manual cleanup path: retention targets, cleanup authorization, the pnpm rackspace:cleanup command, Blob cleanup reconciliation, and branch cleanup with force-with-lease.

Tests

Deterministic tar bytes and manifest.
Key-ring validation and rotation.
Ciphertext authentication and tamper errors.
Private Blob access and idempotent manual removal.
Fresh-admin download authorization and headers.
Download audit errors fail closed.
Repeated approval resumes the same hook.
Conflicting and late decisions fail.
Approval and expiry produce one result.
Publication never occurs before approval.
The current root tree is always base_tree.
Unrelated repository files remain in the tree.
A generated-path default-branch change stops publication.
A retry reuses the expected branch, commit, and pull request.
A different branch hash stops without force.
Automatic artifact and branch removal never occurs.
Cleanup grants are hashed, single-use, operation-scoped, and valid for five minutes.
Blob cleanup retries reconcile a crash after external removal.
Cleanup uses a dry run unless the operator requests one exact operation.
Cleanup refuses an active, unexpired review.
Cleanup refuses every non-terminal operation, including active publication.
Manual orphan cleanup uses one exact deletion refspec and explicit expected commit.
A changed remote head fails branch cleanup without deletion.
Missing local Git authentication fails without deletion.
Cleanup preserves immutable Turso and audit records.
The second plaintext scan blocks publication.

Production gate

Scope

Add @vercel/blob and tar-stream as direct application dependencies. Use Node crypto for AES-256-GCM.

Implement these contracts:

The atomic Git publication: reviewed base commit, post-approval validation, deterministic blobs, base_tree, deterministic commit, operation branch, and one reconciled pull request.

The manual cleanup path: retention targets, cleanup authorization, the pnpm rackspace:cleanup command, Blob cleanup reconciliation, and branch cleanup with force-with-lease.

Tests

Deterministic tar bytes and manifest.

Key-ring validation and rotation.

Ciphertext authentication and tamper errors.

Private Blob access and idempotent manual removal.

Fresh-admin download authorization and headers.

Download audit errors fail closed.

Repeated approval resumes the same hook.

Conflicting and late decisions fail.

Approval and expiry produce one result.

Publication never occurs before approval.

The current root tree is always base_tree.

Unrelated repository files remain in the tree.

A generated-path default-branch change stops publication.

A retry reuses the expected branch, commit, and pull request.

A different branch hash stops without force.

Automatic artifact and branch removal never occurs.

Cleanup grants are hashed, single-use, operation-scoped, and valid for five minutes.

Blob cleanup retries reconcile a crash after external removal.

Cleanup uses a dry run unless the operator requests one exact operation.

Cleanup refuses an active, unexpired review.

Cleanup refuses every non-terminal operation, including active publication.

Manual orphan cleanup uses one exact deletion refspec and explicit expected commit.

A changed remote head fails branch cleanup without deletion.

Missing local Git authentication fails without deletion.

Cleanup preserves immutable Turso and audit records.

The second plaintext scan blocks publication.

Production gate

Search documentation

Search documentation

Search documentation

Goal

Scope

Tests

Production gate

Search documentation

Goal

Scope

Tests

Production gate

Search documentation

Search documentation

Goal

Scope

Tests

Production gate

Search documentation

Goal

Scope

Tests

Production gate