ruvnet/RuView v1235

Release v1235

on GitHub

Automated release from CI pipeline

Changes:
cog-ha-matter (ADR-116 P8): app-registry entry stub + release checklist

Two closing P8 deliverables that complete the local-side publishing
scaffolding. The remaining work is all credential-bearing user
action.

1. cog/app-registry-entry.json — the exact JSON payload to paste
   into cognitum-one's app-registry.json. Schema discovered by
   fetching the live registry (105 cogs, 11 categories) and
   matching the existing ruview-densepose entry verbatim. Keys:

   id, name, category, version, size_kb, difficulty, description,
   featured, config[], sha256, binary_size

   cog-ha-matter slots in under category: "building" (smart home
   / building automation — the natural HA / Matter category, vs
   network which is more about transport bridges).

   7 config[] entries mirror our CLI surface:
   sensing_url, mqtt_host, mqtt_port, privacy_mode,
   mdns_hostname, mdns_ipv4, no_mdns

   Two post-build fields left as <FILL_IN_...> markers:
   sha256 (paste from the workflow artifact's .sha256)
   binary_size (wc -c < the binary)

   Schema validated: all 10 required keys present, parses as JSON.

2. cog/RELEASE-CHECKLIST.md — one-page mechanical playbook with
   four explicit "🔑 USER ACTION" gates. Each gate names exactly
   what the user (or org admin) has to do that the pipeline cannot:

   a) provision GCP_CREDENTIALS + HAS_GCP_CREDENTIALS org var
   b) provision COGNITUM_OWNER_SIGNING_KEY GH secret
   c) gcloud auth login (only if uploading locally)
   d) PR app-registry.json into cognitum-one

   Plus pre-release test gate, tag-push command, post-release
   verification curl, and a rollback procedure using GCS object
   versioning (per ADR-100 §"GCS misconfiguration risks").

Stop-condition check (cron's predicate: "ALL local-side publishing
scaffolding is complete and the only remaining work requires user
action"):

✅ cog/manifest.template.json
✅ cog/Makefile (build / sign / upload / verify / clean)
✅ cog/README.md
✅ cog/app-registry-entry.json (this commit)
✅ cog/RELEASE-CHECKLIST.md (this commit)
✅ .github/workflows/cog-ha-matter-release.yml (3 jobs, gated)
✅ dist/ handling (gitignored, created by make)

🔑 4 user-action gates explicitly enumerated in the checklist

The cron should STOP after this iter — the local-side scaffolding
is complete and the remaining work is the four named credential
gates that the pipeline cannot self-serve.

Co-Authored-By: claude-flow ruv@ruv.net

Docker Image:
ghcr.io/ruvnet/RuView:be4efecbcd9a8f357df07dcc654f363fc774f8fb