Prepare development package identity and defer product release

Author: KSemenenko

.github/workflows/release.yml

@@ -18,6 +18,7 @@ jobs:
     timeout-minutes: 10
     outputs:
       version: ${{ steps.reserve.outputs.version }}
+      package_version: ${{ steps.reserve.outputs.package_version }}
       tag: ${{ steps.reserve.outputs.tag }}
       assembly_version: ${{ steps.reserve.outputs.assembly_version }}
       file_version: ${{ steps.reserve.outputs.file_version }}
@@ -66,6 +67,7 @@ jobs:
     timeout-minutes: 60
     env:
       RELEASE_VERSION: ${{ needs.version.outputs.version }}
+      RELEASE_PACKAGE_VERSION: ${{ needs.version.outputs.package_version }}
       RELEASE_ASSEMBLY_VERSION: ${{ needs.version.outputs.assembly_version }}
       RELEASE_FILE_VERSION: ${{ needs.version.outputs.file_version }}
     steps:
@@ -99,13 +101,13 @@ jobs:
         run: |
           node scripts/Features/RepositoryGovernance/verify.mjs
           dotnet restore KeyLoad.slnx
-          dotnet build KeyLoad.slnx --no-restore --configuration Release -p:Version="$RELEASE_VERSION" -p:AssemblyVersion="$RELEASE_ASSEMBLY_VERSION" -p:FileVersion="$RELEASE_FILE_VERSION"
+          dotnet build KeyLoad.slnx --no-restore --configuration Release -p:Version="$RELEASE_VERSION" -p:PackageVersion="$RELEASE_PACKAGE_VERSION" -p:AssemblyVersion="$RELEASE_ASSEMBLY_VERSION" -p:FileVersion="$RELEASE_FILE_VERSION"
           dotnet format KeyLoad.slnx --verify-no-changes --no-restore
       - name: Build all NuGet packages and the Linux x64 RF3 database distribution
         if: env.RELEASE_ASSETS_EXISTS == '0'
         shell: bash
         run: |
-          args=(-p:Version="$RELEASE_VERSION" -p:AssemblyVersion="$RELEASE_ASSEMBLY_VERSION" -p:FileVersion="$RELEASE_FILE_VERSION")
+          args=(-p:Version="$RELEASE_VERSION" -p:PackageVersion="$RELEASE_PACKAGE_VERSION" -p:AssemblyVersion="$RELEASE_ASSEMBLY_VERSION" -p:FileVersion="$RELEASE_FILE_VERSION")
           dotnet pack KeyLoad.slnx --no-build --no-restore --configuration Release "${args[@]}" --output artifacts/assets
           dotnet publish src/KeyLoad.Server/KeyLoad.Server.csproj --configuration Release --runtime linux-x64 --self-contained true "${args[@]}" --output artifacts/distribution/server
           dotnet publish src/KeyLoad.Cli/KeyLoad.Cli.csproj --configuration Release --runtime linux-x64 --self-contained true "${args[@]}" --output artifacts/distribution/cli
@@ -136,6 +138,7 @@ jobs:
             (cd artifacts/assets && sha256sum --check SHA256SUMS)
           fi
           python3 scripts/Features/ReleaseDelivery/release-assets.py --reservation=artifacts/reservation/release-version.json --assets=artifacts/assets --images=artifacts/images.json
+          jq -e --arg expected "$RELEASE_PACKAGE_VERSION" '.packageVersion == $expected' artifacts/assets/release-manifest.json
       - name: Retain immutable release packages, distribution and image exports
         if: env.RELEASE_ASSETS_EXISTS == '0'
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1

AGENTS.md

@@ -414,6 +414,7 @@ For changes outside existing owner authorization, obtain direction before changi
 - Repeated permission questions for already authorized work.
 - GitHub Actions MUST expose exactly three plainly named workflows: CI combines build and ordinary project tests for PR/push/manual checks; Benchmarks runs all load/comparison suites, produces complete authenticated measurements and then qualifies/publishes the website; Release builds the solution, real database images/distribution and packages, then creates a GitHub Release and immutable version tag. Do not split Tests or Website into additional workflows (explicit owner correction 2026-10-03 supersedes the earlier five-workflow layout).
 - Release tags MUST be `v<major>.<minor>.<yyMMdd>.<daily-build>`: major/minor are configured in source, the third component is the UTC date and the fourth starts at 1 each day and increases without tag reuse or overwrite. Build/package/image/manifest identities MUST agree; reruns recover their original reservation. Release automation is authorized to create the corresponding Git tag, GitHub Release and versioned database image/package assets; preserve protections and qualification gates (owner direction 2026-10-03).
+- KeyLoad product release packaging and publication are deferred until the owner explicitly requests a release or confirms product readiness. Keep Release prepared and manual; do not dispatch package/image builds, create release tags or publish releases merely to prove this workflow while the product is unfinished (owner correction 2026-10-03).
 - Repository-rule checks MUST always run inside the standard CI pipeline, never as a separate governance workflow (owner correction 2026-10-03).
 - All comparative performance tests, including TimeSeries image checks, MUST run in one separate Benchmarks pipeline; do not name it Comparisons or create feature-specific comparison workflows. Preserve isolated Linux runners, real native topology, complete workloads and authenticated artifacts (owner clarification 2026-10-03).
 - Fake production readiness, power-loss claims from process-kill tests, or unsupported performance supremacy.

docs/ADR/ADR-064-three-pipeline-release-delivery.md

@@ -3,6 +3,9 @@
 Status: Accepted. Date: 2026-10-03. Owner: KeyLoad lead/integrator.
 Requirements/acceptance: REQ/AC-PIPE-001..004 and REQ/AC-REL-001..003.
 Supersedes ADR-062's five-workflow placement under explicit owner direction.
+The later owner correction defers actual Release packaging/publication until product
+readiness or an explicit release request; retain this implementation contract for
+the prepared manual workflow. Provider qualification remains deferred.
 
 ## Decision and implementation contract
 
@@ -47,7 +50,10 @@ flowchart TD
    date/run/source/version in an immutable same-run artifact. Daily N starts at 1,
    is >= actual daily run ordinal and > existing dated tag counters. Reruns recover
    the exact reservation; malformed/foreign/colliding/exhausted identity fails.
-   Package/informational/image/tag use M.m.yyMMdd.N; CLR versions use M.m.0.0 and
+   Informational/image/tag use M.m.yyMMdd.N. NuGet retains the configured source
+   development stage as M.m.yyMMdd.N-dev, because the existing third-party Cartograph
+   dependency is alpha-only; do not suppress NU5104 or pretend it is stable. Freeze
+   this derived package version in the reservation and inspect real nuspecs. CLR versions use M.m.0.0 and
    M.m.0.N so components remain <=65534. Never edit source version to count builds.
 6. Read-only build restores/builds/formats/governs full source, packs actual projects,
    publishes Linux x64 server distribution, builds/exports existing server and

docs/Features/ReleaseDelivery.md

@@ -8,6 +8,15 @@ frozen to the authenticated release run. Example: `v0.1.261003.1` for the curren
 have smaller bounds, so use stable `M.m.0.0` / `M.m.0.N` and full informational
 version ([NuGet](https://learn.microsoft.com/en-us/nuget/concepts/package-versioning),
 [CLR metadata](https://learn.microsoft.com/en-us/dotnet/api/system.reflection.assemblyversionattribute)).
+NuGet packages retain the current source's development stage as `M.m.yyMMdd.N-dev`;
+tag, image and informational versions retain the requested four numeric components.
+This keeps the alpha-only Cartograph dependency visible and respects
+[NU5104](https://learn.microsoft.com/en-us/nuget/reference/errors-and-warnings/nu5104)
+without suppressing diagnostics or claiming stable packages.
+
+The owner subsequently deferred packaging because the product is unfinished.
+Release remains manual and prepared for a later explicit release/readiness request;
+current workflow implementation and CI checks do not authorize dispatch or publication.
 
 Requirements/acceptance are REQ/AC-PIPE-001..004 and REQ/AC-REL-001..003 in the
 [acceptance matrix](../implementation/pipeline-release-v2-acceptance.md).

docs/implementation/pipeline-release-v2-acceptance.md

@@ -13,6 +13,12 @@ Benchmarks; a manual own-main Release can reserve/build, with write privileges o
 at publication. UTC is the daily counter boundary; configured source major/minor
 remain owner controlled. All qualification executes in Linux GitHub Actions.
 
+Owner correction 2026-10-03: the product is not ready for packaging. Current scope
+is the prepared three-pipeline implementation and CI verification. Actual Release
+dispatch, package/image builds, tag creation and provider publication are deferred
+until a later explicit release/readiness instruction. Retain the future release
+requirements and report their provider qualification as deferred, never passing.
+
 - AC-PIPE-001 / REQ-PIPE-001: exactly ci.yml, benchmarks.yml and release.yml remain;
   names are CI, Benchmarks and Release. CI runs push(main), pull_request and manual;
   preserve full build/format/rules/analyzer/unit/scalar/recovery/real SDK/MCP RF3.
@@ -42,6 +48,10 @@ remain owner controlled. All qualification executes in Linux GitHub Actions.
   Check nonempty files, embedded package versions, hashes, image digest/labels and
   source/run provenance before publication. CLR version mapping remains bounded;
   package/informational/image/git identities retain the complete owner version.
+  Preserve the source's `dev` package stage: NuGet versions append `-dev` to the
+  same four numeric components; git tags and image versions retain the exact
+  requested numeric format. Inspect this derived package version in reservation,
+  nuspecs and manifest. Never suppress NU5104 or hide alpha dependencies.
 - AC-REL-003 / REQ-REL-003: final publication authenticates successful exact-source
   CI and owned build artifacts, pushes immutable versioned GHCR image(s), creates
   source-bound annotated git tag and GitHub Release with real database/package/

docs/implementation/pipeline-release-v2-execution.md

@@ -11,6 +11,8 @@ three-pipeline/public-release correction; existing required gates remain mandato
 | TASK-REL-TOOLS | REL-001/002/003 | capable script worker | scripts/Features/ReleaseDelivery helpers only | approved feature/ADR | syntax, actual source outputs through GitHub; no local tests |
 | TASK-PIPE-TESTS | PIPE-001/002/004, REL-001/002 | capable C# worker | named workflow tests and new Features/ReleaseDelivery TUnit files | approved contracts | compiled unit/source/version cases in CI; no local tests |
 | TASK-PIPE-LEAD | all | lead | workflows, central version, policies/docs, RF3 release distribution, source closure, delivery | serialized integration | inspect all diffs, static checks, scoped commit/push, GitHub evidence |
+| TASK-REL-PACK-STAGE | REL-001/002 | script worker | version/CLI/context/asset helpers only | real run37116935776 NU5104; amended package-stage contract | freeze derived -dev package version; no suppression or local tests; lead owns workflow |
+| TASK-REL-PACK-TEST | REL-001/002 | C# worker | ReleaseDelivery TUnit and role tests only | amended package-stage contract and agreed schema | real tool positive/tamper/retry assertions; GitHub CI |
 
 - [x] Read policies/architecture; record exact owner correction first.
 - [x] Read-only parallel provenance/release discovery and explicit safe write scopes.
@@ -28,6 +30,15 @@ three-pipeline/public-release correction; existing required gates remain mandato
   gated by genuine successful exact-source CI; no duplicated full qualification.
 - [ ] Verify actual tag/GitHub Release/GHCR only when all required gates pass; retain
   exact blockers otherwise and never claim packaging or configuration is release.
+- [ ] Repair stable-package NU5104 from alpha-only Cartograph by preserving the
+  source's `dev` package stage with the same numeric identity; verify reservation,
+  actual nuspecs and checksums in GitHub without altering the exact git tag format.
+
+Owner correction: actual packaging/publication is now deferred because the product
+is unfinished. Do not dispatch another Release. Version/package-stage helpers,
+workflow and TUnit checks remain prepared; future package/image/provider checks
+above remain unchecked until a later explicit release/readiness request. All prior
+Release runs are already completed; no active Release needs cancellation.
 
 Baseline: earlier milestone CI/release build passes, all four layout and183 recovery
 cases pass. Full units fail one existing SDK-status assertion; RF3 fails one SQL
@@ -40,3 +51,29 @@ Joined static review: all original eight benchmark job objects and all ordinary
 test job commands are preserved; exact three workflow YAMLs and composite shell
 syntax pass. Current shared governance validates26 projects; the scoped delivered
 source will be checked independently because unrelated diagnostics remain uncommitted.
+
+Delivered checkpoints: e050b5e3213ccc007622092587c35fd0a0bbf378 contains the three
+pipelines; e089f3ccc77460c0fc6610581025b57651eac96a fixes the new test compiler
+errors and authenticates the latest exact-source CI. GitHub reports exactly three
+active workflows (CI372183043, Benchmarks373808964, Release373808965).
+
+Exact e089 verification: [Release37116935776](https://github.com/managedcode/KeyLoad/actions/runs/37116935776)
+reserved `v0.1.261003.3` in immutable artifact11271662391
+(`sha256:5c1f33584b6784c4418b70e6ca5edcdac995a25f781e39d64ab503174ce376e7`).
+Job111185484820 passed complete solution build (zero warnings/errors), formatter
+and governance, then failed NU5104: third-party Cartograph/Catalog0.1.0-alpha cannot
+be dependencies of stable NuGet packages. Publication was skipped. No stable
+Cartograph version exists in its authenticated feed inventory; upstream publishing
+access is unavailable. The bounded repair preserves the existing source `dev` stage
+in NuGet only, freezes schema2/packageVersion and validates actual nuspecs/manifest;
+the requested numeric tag/image format is unchanged. Static syntax, all65 workflow
+bash blocks and26-project governance pass; real packaging remains to be rerun.
+
+[Benchmarks37116893060](https://github.com/managedcode/KeyLoad/actions/runs/37116893060)
+passed full build/format/rules, image round-trip1/1, current-job identity1/1 and real
+pinned Timescale image1/1. Native model job111186389331 failed4 of98 existing cases
+because the image tag is represented in the pinned image string, while tests read
+the empty separate Tag field. All remaining cells, aggregate and site publication
+were correctly skipped. The separately delivered c2415755d source contains that
+assertion repair; it has not been called qualified here. e089 CI37116893088 is still
+running at this checkpoint; no full CI/release/site success is claimed.

scripts/Features/ReleaseDelivery/release-assets.py

@@ -72,9 +72,9 @@ def read_json(path, maximum):
 
 def validate_reservation(value):
     keys = {"schemaVersion", "repository", "sourceRevision", "runId", "baseVersion", "major", "minor", "date",
-            "sequence", "version", "tag", "assemblyVersion", "fileVersion"}
+            "sequence", "version", "packageVersion", "tag", "assemblyVersion", "fileVersion"}
     if not is_plain_object(value) or set(value) != keys or type(value["schemaVersion"]) is not int \
-            or value["schemaVersion"] != 1 or value["repository"] != REPOSITORY:
+            or value["schemaVersion"] != 2 or value["repository"] != REPOSITORY:
         fail("Release reservation has an unsupported shape or repository.")
     if not isinstance(value["sourceRevision"], str) or not re.fullmatch(r"[a-f0-9]{40}", value["sourceRevision"]):
         fail("Release reservation source revision is invalid.")
@@ -97,7 +97,7 @@ def validate_reservation(value):
     if parsed.strftime("%y%m%d") != value["date"]:
         fail("Release reservation UTC date is not canonical.")
     version = f"{major}.{minor}.{value['date']}.{sequence}"
-    expected = {"major": major, "minor": minor, "version": version, "tag": f"v{version}",
+    expected = {"major": major, "minor": minor, "version": version, "packageVersion": f"{version}-dev", "tag": f"v{version}",
                 "assemblyVersion": f"{major}.{minor}.0.0", "fileVersion": f"{major}.{minor}.0.{sequence}"}
     if any(value[key] != expectedValue for key, expectedValue in expected.items()):
         fail("Release reservation derived version fields do not agree.")
@@ -331,9 +331,9 @@ def write_immutable(path, content):
 
 
 def build_manifest(reservation, packages, database, images):
-    return {"schemaVersion": 1, "repository": REPOSITORY, "sourceRevision": reservation["sourceRevision"],
+    return {"schemaVersion": 2, "repository": REPOSITORY, "sourceRevision": reservation["sourceRevision"],
             "runId": reservation["runId"], "baseVersion": reservation["baseVersion"],
-            "version": reservation["version"], "tag": reservation["tag"],
+            "version": reservation["version"], "packageVersion": reservation["packageVersion"], "tag": reservation["tag"],
             "assemblyVersion": reservation["assemblyVersion"], "fileVersion": reservation["fileVersion"],
             "packages": packages, "database": database, "images": images}
 
@@ -363,7 +363,7 @@ def main():
                 f"keyload-server-{version}-linux-amd64.docker.tar.gz",
                 f"keyload-benchmarks-{version}-linux-amd64.docker.tar.gz"}
     validate_asset_directory(asset_root, expected)
-    packages = [read_package(item, version) for item in package_paths]
+    packages = [read_package(item, reservation["packageVersion"]) for item in package_paths]
     if len({item["id"].casefold() for item in packages}) != len(packages):
         fail("NuGet package ids must be unique within the release.")
     database = verify_database_distribution(database_path, reservation)

scripts/Features/ReleaseDelivery/release-version-cli.mjs

@@ -8,9 +8,11 @@ const INPUT_KEYS = Object.freeze(['baseVersion', 'sourceRevision', 'runId', 'utc
 const ENV_VALUES = Object.freeze([
   ['RELEASE_VERSION', 'version'], ['RELEASE_TAG', 'tag'],
   ['RELEASE_ASSEMBLY_VERSION', 'assemblyVersion'], ['RELEASE_FILE_VERSION', 'fileVersion'],
+  ['RELEASE_PACKAGE_VERSION', 'packageVersion'],
 ]);
 const OUTPUT_VALUES = Object.freeze([
   ['version', 'version'], ['tag', 'tag'], ['assembly_version', 'assemblyVersion'], ['file_version', 'fileVersion'],
+  ['package_version', 'packageVersion'],
 ]);
 
 function fail(message) { throw new Error(message); }

scripts/Features/ReleaseDelivery/release-version.mjs

@@ -1,9 +1,9 @@
 const RELEASE_REPOSITORY = 'managedcode/KeyLoad';
-const SCHEMA_VERSION = 1;
+const SCHEMA_VERSION = 2;
 const MAX_VERSION_COMPONENT = 65534;
 const MAX_INVENTORY_ITEMS = 10000;
 const RESERVATION_KEYS = Object.freeze(['schemaVersion', 'repository', 'sourceRevision', 'runId', 'baseVersion',
-  'major', 'minor', 'date', 'sequence', 'version', 'tag', 'assemblyVersion', 'fileVersion']);
+  'major', 'minor', 'date', 'sequence', 'version', 'packageVersion', 'tag', 'assemblyVersion', 'fileVersion']);
 
 export const RELEASE_VERSION_ERRORS = Object.freeze({
   input: 'E_RELEASE_INPUT', date: 'E_RELEASE_DATE', dailyRuns: 'E_RELEASE_DAILY_RUNS', tags: 'E_RELEASE_TAGS',
@@ -101,7 +101,7 @@ function makeReservation({ baseVersion, sourceRevision, runId, major, minor, dat
   const version = `${major}.${minor}.${date}.${sequence}`;
   return {
     schemaVersion: SCHEMA_VERSION, repository: RELEASE_REPOSITORY, sourceRevision, runId, baseVersion,
-    major, minor, date, sequence, version, tag: `v${version}`,
+    major, minor, date, sequence, version, packageVersion: `${version}-dev`, tag: `v${version}`,
     assemblyVersion: `${major}.${minor}.0.0`, fileVersion: `${major}.${minor}.0.${sequence}`,
   };
 }

tests/KeyLoad.UnitTests/Features/ReleaseDelivery/ReleaseVersionFields.cs

@@ -17,6 +17,7 @@ internal static class ReleaseVersionFields
     internal const string Repository = "repository";
     internal const string Date = "date";
     internal const string Sequence = "sequence";
+    internal const string PackageVersion = "packageVersion";
     internal const string Foreign = "foreign";
     internal const string Id = "id";
     internal const string RunNumber = "run_number";