fix: preserve machine-readable installer output for alpha.17 #54

Merged

ochenstarik-ui merged 1 commit from codex/release-alpha17-machine-output into main

2026-08-17 17:16:59 +00:00

ochenstarik-ui commented

2026-08-17 17:02:23 +00:00

(Migrated from github.com)

Summary

keep the verified bootstrap checksum check fail-closed while suppressing its success line on stdout
add a dynamic regression proving node-code returns only the machine-readable enrollment code
burn immutable alpha.16 in release history and prepare alpha.17 as the correction

Root cause

The alpha.16 automatic Release Verification installed the Hub successfully, but smm-setup.sh emitted sha256sum -c success output before the pass-through SMMNODE2 value. Command substitution captured both lines, so install-node rejected the contaminated enrollment code as an unsupported version.

Verification

RELEASE_CONTRACT=PASS
COSIGN_PROVISIONING=PASS
shell syntax checks passed
git diff --check passed

Physical multi-server verification remains outside CI scope; the release acceptance workflow exercises Hub and Node installation on a GitHub-hosted Ubuntu runner.

## Summary - keep the verified bootstrap checksum check fail-closed while suppressing its success line on stdout - add a dynamic regression proving `node-code` returns only the machine-readable enrollment code - burn immutable alpha.16 in release history and prepare alpha.17 as the correction ## Root cause The alpha.16 automatic Release Verification installed the Hub successfully, but `smm-setup.sh` emitted `sha256sum -c` success output before the pass-through `SMMNODE2` value. Command substitution captured both lines, so `install-node` rejected the contaminated enrollment code as an unsupported version. ## Verification - `RELEASE_CONTRACT=PASS` - `COSIGN_PROVISIONING=PASS` - shell syntax checks passed - `git diff --check` passed Physical multi-server verification remains outside CI scope; the release acceptance workflow exercises Hub and Node installation on a GitHub-hosted Ubuntu runner.