refresh: bring the repo ceremony current with v5.3.0#47
Merged
Conversation
Everything below was months behind the compiler; each item verified
against the tree or executed through its real pipeline.
- LICENSE: Licensed Work was pinned to 'Rail v1.0.0' (4 months stale) —
now covers each version published in this repository. CRLF->LF.
README license line matched to the actual parameters (MIT on
2030-03-14; it claimed Apache on a different date).
- releases/: backfilled attested entries for v5.2.0 and v5.3.0 via
tools/attest/backfill_releases.sh — real beacon pulses, real fleet0
witness signatures, flagged backfilled:true; binaries dropped from the
entries per the attestations-in-tree convention.
- rail_safe: rebuilt from current master through a v5-aware
build_safe.sh — two-stage in-process self-compile + byte-identical
fixed-point check + the full 19-test adversarial gate (19/19). The sed
arena patch is gone: since v5 the arena is mmap'd at startup sized by
RAIL_ARENA_MB, so Dockerfile.safe now sets ENV RAIL_ARENA_MB=32 —
enforcement moved from build time to launch time.
- grammar/rail.ebnf: refreshed against the v5.3.0 parser — import/as,
multi-arg lambdas, match guards ('| pat if e -> e'), real reserved-word
list from kw_list.
- tree-sitter-rail: lambda takes repeat1 params, match_arm takes an
optional guard; parser regenerated (tree-sitter-cli 0.24.7) and
smoke-parsed multi-arg lambda + guarded arms with zero errors.
- editors/vscode: keyword set matched to the lexer's kw_list (drops
stale prop/do, adds in/foreign/link).
- SECURITY.md + README: v3.0.0 framing updated (content re-verified);
CertificateVerify sig-alg list corrected to the actual dispatch
(p256/p521/rsa-pss); honest-limits section re-dated to v5.3.0.
15/15 quick suite; full suite in CI.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pb4TJEdqhSKkRdLsDYD2JF
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The compiler kept moving; the ceremony stalled at ~v5.1. This brings every months-old surface current — each item verified against the tree or executed through its real pipeline.
backfill_releases.sh— real beacon pulses, real fleet0 witness signatures,backfilled: true, no binary snapshots (per convention).build_safe.sh— two-stage in-process self-compile, byte-identical fixed-point check, full adversarial gate 19/19. The sed arena patch is gone (since v5 the arena is mmap'd at startup, sized byRAIL_ARENA_MB), soDockerfile.safenow setsENV RAIL_ARENA_MB=32— enforcement moved from build time to launch time.import … as, multi-arg lambdas, match guards, the lexer's real reserved-word list.prop/do, addsin/foreign/link).ecdsa_secp256r1_sha256 | ecdsa_secp521r1_sha512 | rsa_pss_rsae_sha256); honest-limits re-dated to v5.3.0.15/15 quick suite locally; full suite in CI.
🤖 Generated with Claude Code
https://claude.ai/code/session_01Pb4TJEdqhSKkRdLsDYD2JF