Completion epic: final certification and production release checklist

[dayflaree]

Goal

Track the final work required to move Source Weaver from public preview with explicit limitations to a fully completed, externally certified project state.

This is the parent checklist for the completion milestone. Close this only after all dependent certification, prerequisite, and final-release issues are closed with evidence comments.

Existing certification issues

• Certify Hammer/Hammer++ open-save compatibility #141 — certify Hammer/Hammer++ open-save compatibility.
• Certify native Windows Source compiler execution #142 — certify native Windows Source compiler execution.
• Configure and verify production release signing #143 — configure and verify production release signing.
• Complete successful real game-runtime map-load validation #145 — complete successful real game-runtime map-load validation.
• Certify rendered HLMV/HLMV++ model preview #146 — certify rendered HLMV/HLMV++ model preview.

New prerequisite and release-gate issues

• Provision external Source GUI/runtime evidence workstation #156 — provision external Source GUI/runtime evidence workstation.
• Provision native Windows Source compiler certification host #157 — provision native Windows Source compiler certification host.
• Provision production signing credentials and repository secrets #158 — provision production signing credentials and repository secrets.
• Prepare legal certification fixtures and evidence workspace #159 — prepare legal certification fixtures and evidence workspace.
• Add external certification evidence bundle validator #160 — add external certification evidence bundle validator.
• Publish final completion release after external certifications #161 — publish final completion release after external certifications.
• Harden final release workflow for production-mode signing requirements #162 — harden final release workflow for production-mode signing requirements.
• Dispose final-release cargo audit unmaintained advisory warnings #163 — dispose final-release cargo audit unmaintained advisory warnings.

Dependency graph

#156 + #159 + #160 -> #141
#157 + #159 + #160 -> #142
#158 + #160       -> #143
#156 + #157 + #159 + #160 -> #145
#156 + #159 + #160 -> #146
#141 + #142 + #143 + #145 + #146 + #160 + #162 + #163 -> #161
#141 + #142 + #143 + #145 + #146 + #156 + #157 + #158 + #159 + #160 + #161 + #162 + #163 -> #155

Completion definition

The project is complete when:

• every currently blocked external-tool claim has real evidence;
• production signing has been configured and verified;
• runtime map-load evidence shows a real successful map load;
• Hammer/Hammer++ and HLMV/HLMV++ evidence uses real tools;
• documentation, release notes, compatibility matrices, and claim guards match the verified scope;
• a final completion release is published with signed artifacts, provenance, SBOM, and final evidence links;
• no proprietary binaries, SDK tools, game content, private assets, signing credentials, private keys, or private paths are committed.

Evidence requirements

Every closing evidence comment must include:

• commit hash;
• exact commands;
• local validation results;
• CI URL/status/SHA/jobs;
• external tool versions and paths with private paths sanitized;
• artifact paths and SHA-256 hashes;
• validated claims;
• unvalidated claims;
• redistribution/legal boundary.

System investigation snapshot

On 2026-08-08 the current Ubuntu system had Half-Life 2, Source SDK Base 2013 SP/MP, and Proton installed, but did not expose Hammer/Hammer++, HLMV/HLMV++, VBSP/VVIS/VRAD, Wine, SignTool, osslsigncode, or production signing secrets on PATH. This milestone therefore needs environment and credential setup before the final certification tickets can close.

[dayflaree]

Milestone status update after continuing the dependency graph on 2026-08-08.

Closed in this pass

• Add external certification evidence bundle validator #160 closed with commit 3a5602073f16f0b38b8d4fe18d2221119af30802 and green CI run https://github.com/dayflaree/sourceweaver/actions/runs/31291001780.
• Prepare legal certification fixtures and evidence workspace #159 closed with commit bc03cec5da1b1358dd4280c4d0852849f621028c and green CI run https://github.com/dayflaree/sourceweaver/actions/runs/31291458060.

Current blockers recorded

• Provision external Source GUI/runtime evidence workstation #156 remains open: no GUI display, Wine/Proton runner, Hammer/Hammer++ executable, HLMV/HLMV++ executable, or runtime GUI evidence path is available in the current shell. Blocker evidence: Provision external Source GUI/runtime evidence workstation #156 (comment)
• Provision native Windows Source compiler certification host #157 remains open: current host is Ubuntu Linux, not native Windows, and no native vbsp.exe, vvis.exe, or vrad.exe paths were found. Blocker evidence: Provision native Windows Source compiler certification host #157 (comment)
• Provision production signing credentials and repository secrets #158 remains open: workflow secret/variable names are referenced, but the repository secret and variable name lists are empty, and no production signing material is configured. Blocker evidence: Provision production signing credentials and repository secrets #158 (comment)

Dependent issues still blocked

• Certify Hammer/Hammer++ open-save compatibility #141 waits on Provision external Source GUI/runtime evidence workstation #156 plus the now-closed Prepare legal certification fixtures and evidence workspace #159/Add external certification evidence bundle validator #160 preparation.
• Certify native Windows Source compiler execution #142 waits on Provision native Windows Source compiler certification host #157 plus the now-closed Prepare legal certification fixtures and evidence workspace #159/Add external certification evidence bundle validator #160 preparation.
• Configure and verify production release signing #143 waits on Provision production signing credentials and repository secrets #158 plus the now-closed Add external certification evidence bundle validator #160 preparation.
• Complete successful real game-runtime map-load validation #145 waits on Provision external Source GUI/runtime evidence workstation #156 and Provision native Windows Source compiler certification host #157 plus the now-closed Prepare legal certification fixtures and evidence workspace #159/Add external certification evidence bundle validator #160 preparation.
• Certify rendered HLMV/HLMV++ model preview #146 waits on Provision external Source GUI/runtime evidence workstation #156 plus the now-closed Prepare legal certification fixtures and evidence workspace #159/Add external certification evidence bundle validator #160 preparation.
• Publish final completion release after external certifications #161 waits on Certify Hammer/Hammer++ open-save compatibility #141, Certify native Windows Source compiler execution #142, Configure and verify production release signing #143, Complete successful real game-runtime map-load validation #145, and Certify rendered HLMV/HLMV++ model preview #146.

Current repository state

The repository is clean on main...origin/main after the two merged commits. No proprietary binaries, Source SDK tools, game content, private assets, generated BSPs, compiled model artifacts, private logs, signing keys, certificates, passwords, secret values, or production signing credentials were committed.

[dayflaree]

Tracker update from the 2026-08-08 full review:

Two new release-readiness issues were added to cover gaps that were not represented by the existing external certification tickets:

• Harden final release workflow for production-mode signing requirements #162 — Harden final release workflow for production-mode signing requirements.
• Dispose final-release cargo audit unmaintained advisory warnings #163 — Dispose final-release cargo audit unmaintained advisory warnings.

The parent epic should wait for #141, #142, #143, #145, #146, #161, #162, and #163 before closure.

[dayflaree]

Tracker updated after the repo-side prerequisite-probe work.

Completed in f05bb374b7a8bbf075ad43c78a0390bbf7cd6c3e:

• Added scripts/probe-completion-prerequisites.sh for repeatable Provision external Source GUI/runtime evidence workstation #156/Provision native Windows Source compiler certification host #157/Provision production signing credentials and repository secrets #158 blocker checks.
• Documented the prerequisite probe workspace in docs/completion-certification-fixtures.md.
• Updated this epic checklist to mark Prepare legal certification fixtures and evidence workspace #159, Add external certification evidence bundle validator #160, Harden final release workflow for production-mode signing requirements #162, and Dispose final-release cargo audit unmaintained advisory warnings #163 complete and keep Provision external Source GUI/runtime evidence workstation #156, Provision native Windows Source compiler certification host #157, Provision production signing credentials and repository secrets #158, Certify Hammer/Hammer++ open-save compatibility #141, Certify native Windows Source compiler execution #142, Configure and verify production release signing #143, Complete successful real game-runtime map-load validation #145, Certify rendered HLMV/HLMV++ model preview #146, and Publish final completion release after external certifications #161 open.

Validation:

• Full local gate passed.
• CI passed: https://github.com/dayflaree/sourceweaver/actions/runs/31328155007

Current prerequisite status from /tmp/sourceweaver-completion-prerequisites-final/prerequisite-summary.json:

• Provision external Source GUI/runtime evidence workstation #156 ready: false — no display/Wayland, GUI runner, Hammer/Hammer++, HLMV/HLMV++, or runtime/Steam tool on PATH from this shell.
• Provision native Windows Source compiler certification host #157 ready: false — no native Windows process context and no vbsp.exe/vvis.exe/vrad.exe on PATH.
• Provision production signing credentials and repository secrets #158 ready: false — required production signing secret and variable names are absent from this gh/environment context.

Evidence summary hash:

0818b924085571c5e5d779a7b9cec1b9cc520657180ad620931b94aa66073232  /tmp/sourceweaver-completion-prerequisites-final/prerequisite-summary.json

This keeps the remaining milestone state blocked by external workstation/host/credential provisioning rather than by missing repo-side probe tooling.