verifier-gatedPASS.cw/runs

Release Cut

Run: release-cut-20260907T123403Z-48839c
Workflow: release-cut
Workflow App: release-cut@0.2.8
Workflow App Source: /home/runner/work/cool-workflow/cool-workflow/plugins/cool-workflow/apps/release-cut/app.json
Created: 2026-09-07T12:34:03.616Z
Updated: 2026-09-07T12:35:08.619Z
Repository: /home/runner/work/cool-workflow/cool-workflow
Question:
Invariants:
Loop Stage: checkpoint

Phase Status

Phase	Status	Completed	Total
Preflight	completed	1	1
Version Audit	completed	1	1
Changelog and Notes	completed	1	1
Package	completed	1	1
Verify	completed	1	1
Release Verdict	completed	1	1

State Commits

state-0001: initial-plan [interpret; checkpoint; verifierGated=false] (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/commits/state-0001.json)
state-0002: Dogfood One Real Repo 0.2.8 verifier-gated checkpoint [act; verifier-gated commit; verifier=release-cut-20260907T123403Z-48839c:verifier:verdict:release, evidence=23] (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/commits/state-0002.json)

Error Feedback

No feedback records.

Workers

Total: 6
By status: verified=6
worker-preflight:repo-state-0001: backend=node guarantees write=enforced read=attested command=absent network=attested env=attested model=absent
worker-audit:versions-0001: backend=node guarantees write=enforced read=attested command=absent network=attested env=attested model=absent
worker-notes:update-0001: backend=node guarantees write=enforced read=attested command=absent network=absent env=attested model=absent
worker-package:artifacts-0001: backend=node guarantees write=enforced read=attested command=absent network=absent env=attested model=absent
worker-verify:package-0001: backend=node guarantees write=enforced read=attested command=absent network=attested env=attested model=absent
worker-verdict:release-0001: backend=node guarantees write=enforced read=attested command=absent network=attested env=attested model=absent

State Size & Compaction

Records: 0; graph nodes: 24; graph edges: 50; messages: 0
Compaction: not needed
Summary freshness: absent
Graph compacted: 6 nodes collapsed into 1 summary nodes

Use: `cw multi-agent graph release-cut-20260907T123403Z-48839c --view full --json`

Hidden workers: 6 records; expand: `cw multi-agent graph release-cut-20260907T123403Z-48839c --view full --focus workers --json`
Next: `cw summary refresh release-cut-20260907T123403Z-48839c`

Multi-Agent Runtime

No multi-agent runtime records yet.

Blackboard / Coordinator

No blackboard records yet.

Sandbox Profiles

readonly: read=2, write=0, execute=any, network=none enforcedByCW=profile validation; path normalization; worker result acceptance against sandbox write policy; durable ErrorFeedback for denied worker output hostRequired=OS-level read isolation; OS-level write isolation before result acceptance; process execution restrictions; network restrictions; environment variable filtering
workspace-write: read=2, write=1, execute=any, network=any enforcedByCW=profile validation; path normalization; worker result acceptance against sandbox write policy; durable ErrorFeedback for denied worker output hostRequired=OS-level read isolation; OS-level write isolation before result acceptance; process execution restrictions; network restrictions; environment variable filtering

Trust Audit

Events: 76
Chain integrity: verified (76 chained, 0 legacy)
Decisions: accepted=9, allowed=33, recorded=34
Sources: cw-validated=42, host-attested=21, operator-recorded=1, runtime-derived=12
Sandbox profiles: readonly=56, workspace-write=18
Event log: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/audit/events.jsonl
Summary: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/audit/summary.json
Index: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/audit/index.json
Model provenance: 0 agent-self-reported · 6 absent (agent-self-reported, never CW-verified)
App code execution: in-process-unsandboxed (trustedRoot=true, /home/runner/work/cool-workflow/cool-workflow/plugins/cool-workflow/apps/release-cut/workflow.js)

Acceptance Rationale

Selection selection-dogfood-release-0.2.8-0001: candidate=dogfood-release-0.2.8, score=score-dogfood-release-0.2.8-0001, verifier=release-cut-20260907T123403Z-48839c:verifier:verdict:release, evidence=43, sandbox=readonly, worker=worker-verdict:release-0001
Commit state-0002: gate=passed, candidate=dogfood-release-0.2.8, score=score-dogfood-release-0.2.8-0001, verifier=release-cut-20260907T123403Z-48839c:verifier:verdict:release, evidence=43, sandbox=readonly, worker=worker-verdict:release-0001

Candidates

Total: 1
By status: verified=1
By kind: release=1
Selections: 1
Index: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/candidates/index.json
Ranking: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/candidates/ranking.json

Pending Tasks

No pending tasks.

Results

preflight:repo-state

Result: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/results/preflight:repo-state.md

Dogfood preflight:repo-state

Worker: worker-preflight:repo-state-0001

Sandbox: readonly

Mode: full

Dry run: true

Commands

PASS git status --short --branch (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/git-status.log:1)
PASS git rev-parse HEAD (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/git-head.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node --version (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/node-version.log:1)
PASS npm --version (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/npm-version.log:1)


{
  "summary": "preflight:repo-state completed with real dogfood evidence.",
  "findings": [],
  "evidence": [
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/git-status.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/git-head.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/node-version.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/npm-version.log:1"
  ]
}

audit:versions

Result: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/results/audit:versions.md

Dogfood audit:versions

Worker: worker-audit:versions-0001

Sandbox: readonly

Mode: full

Dry run: true

Commands

PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node scripts/version-sync-check.js (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-audit:versions-0001/logs/version-sync.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node -e const cp=require('child_process');const fs=require('fs');function readHead(f){ const r=cp.spawnSync('git',['show','HEAD:'+f],{encoding:'utf8',maxBuffer:1024*1024*32}); if(r.status===0) return r.stdout; return null;}function readSurface(f){ const h=readHead(f); if(h!==null) return h; return fs.existsSync(f)?fs.readFileSync(f,'utf8'):null;}function surfaceExists(f){ const r=cp.spawnSync('git',['cat-file','-e','HEAD:'+f],{encoding:'utf8'}); if(r.status===0) return true; return fs.existsSync(f);}for (const f of ['plugins/cool-workflow/package.json','plugins/cool-workflow/src/core/version.ts']) { const t=readSurface(f); if (t===null) throw new Error(f+' missing from release commit'); if (!t.includes('0.2.8')) throw new Error(f+' missing 0.2.8');}console.log('version surfaces include target release (from release commit)'); (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-audit:versions-0001/logs/version-surfaces.log:1)


{
  "summary": "audit:versions completed with real dogfood evidence.",
  "findings": [],
  "evidence": [
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-audit:versions-0001/logs/version-sync.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-audit:versions-0001/logs/version-surfaces.log:1"
  ]
}

notes:update

Result: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/results/notes:update.md

Dogfood notes:update

Worker: worker-notes:update-0001

Sandbox: workspace-write

Mode: full

Dry run: true

Commands

PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node -e const cp=require('child_process');const fs=require('fs');function readHead(f){ const r=cp.spawnSync('git',['show','HEAD:'+f],{encoding:'utf8',maxBuffer:1024*1024*32}); if(r.status===0) return r.stdout; return null;}function readSurface(f){ const h=readHead(f); if(h!==null) return h; return fs.existsSync(f)?fs.readFileSync(f,'utf8'):null;}function surfaceExists(f){ const r=cp.spawnSync('git',['cat-file','-e','HEAD:'+f],{encoding:'utf8'}); if(r.status===0) return true; return fs.existsSync(f);}const files=['plugins/cool-workflow/docs/dogfood-one-real-repo.7.md','README.md','plugins/cool-workflow/README.md'];for (const f of files) { if (!surfaceExists(f)) throw new Error('missing '+f); }console.log('dogfood release docs present (from release commit)'); (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-notes:update-0001/logs/release-docs.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node -e const cp=require('child_process');const fs=require('fs');function readHead(f){ const r=cp.spawnSync('git',['show','HEAD:'+f],{encoding:'utf8',maxBuffer:1024*1024*32}); if(r.status===0) return r.stdout; return null;}function readSurface(f){ const h=readHead(f); if(h!==null) return h; return fs.existsSync(f)?fs.readFileSync(f,'utf8'):null;}function surfaceExists(f){ const r=cp.spawnSync('git',['cat-file','-e','HEAD:'+f],{encoding:'utf8'}); if(r.status===0) return true; return fs.existsSync(f);}const files=['plugins/cool-workflow/docs/index.md','README.md'];for (const f of files) { const t=readSurface(f); if (t===null) throw new Error(f+' missing from release commit'); if (!t.toLowerCase().includes('dogfood')) throw new Error(f+' missing dogfood reference'); }console.log('docs index references dogfood (from release commit)'); (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-notes:update-0001/logs/docs-index.log:1)


{
  "summary": "notes:update completed with real dogfood evidence.",
  "findings": [],
  "evidence": [
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-notes:update-0001/logs/release-docs.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-notes:update-0001/logs/docs-index.log:1"
  ]
}

package:artifacts

Result: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/results/package:artifacts.md

Dogfood package:artifacts

Worker: worker-package:artifacts-0001

Sandbox: workspace-write

Mode: full

Dry run: true

Commands

PASS npm run build (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-package:artifacts-0001/logs/build.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node -e const {spawnSync}=require('child_process');const r=spawnSync('npm',['pack','--dry-run','--json'],{encoding:'utf8',maxBuffer:1024*1024*20});process.stdout.write(r.stdout||'');process.stderr.write(r.stderr||'');if(r.status!==0) process.exit(r.status);const pack=JSON.parse(r.stdout)[0];const files=(pack.files||[]).map(f=>f.path);const leaked=files.filter(f=>f.startsWith('.cw/')||f.includes('/.cw/'));if(leaked.length){console.error('npm pack includes .cw files: '+leaked.slice(0,5).join(', '));process.exit(1);}console.log(JSON.stringify({checked:'npm-pack-dry-run',entryCount:files.length,cwCount:0,filename:pack.filename})); (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-package:artifacts-0001/logs/npm-pack-dry-run.log:1)


{
  "summary": "package:artifacts completed with real dogfood evidence.",
  "findings": [],
  "evidence": [
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-package:artifacts-0001/logs/build.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-package:artifacts-0001/logs/npm-pack-dry-run.log:1"
  ]
}

verify:package

Result: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/results/verify:package.md

Dogfood verify:package

Worker: worker-verify:package-0001

Sandbox: readonly

Mode: full

Dry run: true

Commands

PASS npm run check (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/check.log:1)
PASS npm test (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/test.log:1)
PASS npm run fixture-compat (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/fixture-compat.log:1)
PASS npm run canonical-apps (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/canonical-apps.log:1)
PASS npm run golden-path (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/golden-path.log:1)
PASS npm run release:check (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/release-check.log:1)


{
  "summary": "verify:package completed with real dogfood evidence.",
  "findings": [],
  "evidence": [
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/check.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/test.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/fixture-compat.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/canonical-apps.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/golden-path.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/release-check.log:1"
  ]
}

verdict:release

Result: /home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/results/verdict:release.md

Dogfood verdict:release

Worker: worker-verdict:release-0001

Sandbox: readonly

Mode: full

Dry run: true

Commands

PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node /home/runner/work/cool-workflow/cool-workflow/plugins/cool-workflow/scripts/cw.js status release-cut-20260907T123403Z-48839c --json (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-status.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node /home/runner/work/cool-workflow/cool-workflow/plugins/cool-workflow/scripts/cw.js graph release-cut-20260907T123403Z-48839c --json (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-graph.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node /home/runner/work/cool-workflow/cool-workflow/plugins/cool-workflow/scripts/cw.js worker summary release-cut-20260907T123403Z-48839c --json (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-worker-summary.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node /home/runner/work/cool-workflow/cool-workflow/plugins/cool-workflow/scripts/cw.js audit summary release-cut-20260907T123403Z-48839c (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-audit-summary.log:1)
PASS /opt/hostedtoolcache/node/22.23.2/x64/bin/node /home/runner/work/cool-workflow/cool-workflow/plugins/cool-workflow/scripts/cw.js audit provenance release-cut-20260907T123403Z-48839c (/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-audit-provenance.log:1)


{
  "summary": "verdict:release completed with real dogfood evidence.",
  "findings": [],
  "evidence": [
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/git-status.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/git-head.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/node-version.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-preflight:repo-state-0001/logs/npm-version.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-audit:versions-0001/logs/version-sync.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-audit:versions-0001/logs/version-surfaces.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-notes:update-0001/logs/release-docs.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-notes:update-0001/logs/docs-index.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-package:artifacts-0001/logs/build.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-package:artifacts-0001/logs/npm-pack-dry-run.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/check.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/test.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/fixture-compat.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/canonical-apps.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/golden-path.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verify:package-0001/logs/release-check.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-status.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-graph.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-worker-summary.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-audit-summary.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/workers/worker-verdict:release-0001/logs/cw-audit-provenance.log:1",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/state.json",
    "/home/runner/work/cool-workflow/cool-workflow/.cw/runs/release-cut-20260907T123403Z-48839c/report.md"
  ]
}