Prepare Language 1.0 graph-ready release candidate

.cz.toml

@@ -2,5 +2,5 @@
 name = "cz_conventional_commits"
 tag_format = "v$version"
 version_scheme = "semver"
-version = "3.1.0-rc.19"
+version = "3.1.0-rc.18"
 update_changelog_on_bump = true

.github/workflows/build.yml

@@ -57,10 +57,15 @@ jobs:
         if: always() # run even if build failed
         with:
           name: test-results
-          path: build/reports
+          path: |
+            build/reports
+            blue-*/build/reports
+            examples/build/reports
+            build-logic/build/reports
+            smoke-tests/published/build/reports
 
       - name: Archive libs
         uses: actions/upload-artifact@v4
         with:
           name: libs
-          path: build/libs
+          path: blue-*/build/libs

.github/workflows/release-rc.yml

@@ -11,8 +11,13 @@ on:
       - 'CHANGELOG.md'
       - 'LICENSE*'
       - 'README*'
+      - 'api/**'
+      - 'blue-*/**'
       - 'build.gradle'
+      - 'build-logic/**'
+      - 'examples/**'
       - 'settings.gradle*'
+      - 'smoke-tests/**'
       - 'docs/**'
       - 'gradle.properties'
       - 'gradle/wrapper/**'
@@ -84,11 +89,19 @@ jobs:
           RELEASE_VERSION: ${{ steps.version.outputs.version }}
         run: node .github/scripts/verify-release-readiness.js
 
+      - name: Commit RC version
+        run: |
+          git add .cz.toml
+          git commit -m "chore: release ${{ steps.version.outputs.version }}"
+
       - name: Configure reproducible build timestamp
         run: echo "SOURCE_DATE_EPOCH=$(git show -s --format=%ct HEAD)" >> "$GITHUB_ENV"
 
-      - name: Execute Gradle build
-        run: ./gradlew clean build rcVerify jmhClasses
+      - name: Execute clean Gradle build
+        run: ./gradlew clean build
+
+      - name: Execute RC verification
+        run: ./gradlew rcVerify
 
       - name: Verify reproducible source release
         run: |
@@ -99,70 +112,11 @@ jobs:
           second_sha="$(sha256sum "${source_archives[0]}" | awk '{print $1}')"
           test "$first_sha" = "$second_sha"
 
-      - name: Verify binary API compatibility
-        run: |
-          baseline_root="$(mktemp -d)"
-          master_dir="${baseline_root}/master"
-          previous_rc_dir="${baseline_root}/previous-rc"
-          current_version='${{ steps.version.outputs.version }}'
-          rc_series="${current_version%-rc.*}"
-          previous_rc_tag=''
-          while IFS= read -r candidate_tag; do
-            if [[ "$candidate_tag" != "v${current_version}" ]]; then
-              previous_rc_tag="$candidate_tag"
-              break
-            fi
-          done < <(git tag --list "v${rc_series}-rc.*" --sort=-version:refname)
-
-          git worktree add --detach "$master_dir" origin/master
-          if [[ -n "$previous_rc_tag" ]]; then
-            git worktree add --detach "$previous_rc_dir" "$previous_rc_tag"
-          fi
-          cleanup() {
-            git worktree remove --force "$master_dir" || true
-            if [[ -n "$previous_rc_tag" ]]; then
-              git worktree remove --force "$previous_rc_dir" || true
-            fi
-          }
-          trap cleanup EXIT
-
-          BLUE_RELEASE_CHANNEL=stable "$master_dir/gradlew" -p "$master_dir" jar --no-daemon
-          if [[ -n "$previous_rc_tag" ]]; then
-            BLUE_RELEASE_CHANNEL=rc "$previous_rc_dir/gradlew" -p "$previous_rc_dir" jar --no-daemon
-          fi
-          mapfile -t master_jars < <(find "$master_dir/build/libs" -maxdepth 1 -type f \
-            -name 'blue-language-java-*.jar' \
-            ! -name '*-sources.jar' ! -name '*-javadoc.jar' ! -name '*-jmh.jar')
-          mapfile -t candidate_jars < <(find build/libs -maxdepth 1 -type f \
-            -name 'blue-language-java-*.jar' \
-            ! -name '*-sources.jar' ! -name '*-javadoc.jar' ! -name '*-jmh.jar')
-          test "${#master_jars[@]}" -eq 1
-          test "${#candidate_jars[@]}" -eq 1
-          tools/check-binary-api.sh \
-            "${master_jars[0]}" \
-            "${candidate_jars[0]}" \
-            build/reports/binary-api/master-to-candidate.txt
-          if [[ -n "$previous_rc_tag" ]]; then
-            mapfile -t previous_rc_jars < <(find "$previous_rc_dir/build/libs" -maxdepth 1 -type f \
-              -name 'blue-language-java-*.jar' \
-              ! -name '*-sources.jar' ! -name '*-javadoc.jar' ! -name '*-jmh.jar')
-            test "${#previous_rc_jars[@]}" -eq 1
-            tools/check-binary-api.sh \
-              "${previous_rc_jars[0]}" \
-              "${candidate_jars[0]}" \
-              build/reports/binary-api/previous-rc-to-candidate.txt
-            printf 'Previous RC baseline: %s\n' "$previous_rc_tag" \
-              > build/reports/binary-api/previous-rc-baseline.txt
-          else
-            printf 'Previous RC baseline: none; master is the only baseline\n' \
-              > build/reports/binary-api/previous-rc-baseline.txt
-          fi
-
-      - name: Commit and tag RC version
-        run: |
-          git add .cz.toml
-          git commit -m "chore: release ${{ steps.version.outputs.version }}"
-          git tag -a "v${{ steps.version.outputs.version }}" -m "Release ${{ steps.version.outputs.version }}"
+      - name: Verify final Language 1.0 and Contracts kernel 1.0 API baseline
+        run: ./gradlew verifyFinalApiBaseline
+
+      - name: Tag verified RC version
+        run: git tag -a "v${{ steps.version.outputs.version }}" -m "Release ${{ steps.version.outputs.version }}"
 
       # Publish the unique version reservation before any remote artifact upload.
       # A failed release can then advance to a new RC instead of reusing a
@@ -202,8 +156,9 @@ jobs:
         with:
           name: rc-artifacts
           path: |
-            build/libs
-            build/publications
+            blue-*/build/libs
+            blue-*/build/publications
+            build/staging-deploy
             build/release
-            build/reports/binary-api
+            build/reports
             build/jreleaser

.github/workflows/release.yml

@@ -44,12 +44,27 @@ jobs:
 
       - name: Setup Gradle
         uses: gradle/gradle-build-action@v2
-
-      - name: Execute Gradle build
-        run: >-
-          ./gradlew clean build identityDifferentialTest
-          patchSequenceDifferentialTest memoryIntegrationTest cacheLifecycleTest
-          jmhClasses sourceReleaseArchive
+
+      - name: Configure reproducible build timestamp
+        run: echo "SOURCE_DATE_EPOCH=$(git show -s --format=%ct HEAD)" >> "$GITHUB_ENV"
+
+      - name: Execute clean Gradle build
+        run: ./gradlew clean build
+
+      - name: Execute RC verification
+        run: ./gradlew rcVerify
+
+      - name: Verify reproducible source release
+        run: |
+          mapfile -t source_archives < <(find build/release -maxdepth 1 -type f -name '*-source-release.zip')
+          test "${#source_archives[@]}" -eq 1
+          first_sha="$(sha256sum "${source_archives[0]}" | awk '{print $1}')"
+          ./gradlew sourceReleaseArchive --rerun-tasks
+          second_sha="$(sha256sum "${source_archives[0]}" | awk '{print $1}')"
+          test "$first_sha" = "$second_sha"
+
+      - name: Verify final Language 1.0 and Contracts kernel 1.0 API baseline
+        run: ./gradlew verifyFinalApiBaseline
 
       - name: Execute Gradle publish
         run: ./gradlew publish
@@ -70,7 +85,9 @@ jobs:
         with:
           name: artifacts
           path: |
-            build/libs
-            build/publications
+            blue-*/build/libs
+            blue-*/build/publications
+            build/staging-deploy
             build/release
+            build/reports
             build/jreleaser

.gitignore

@@ -41,6 +41,12 @@ bin/
 
 ### Mac OS ###
 .DS_Store
+.jqwik-database
+__pycache__/
+*.py[cod]
+
+# Local repository snapshots and downloaded release bundles.
+/*.zip
 
 .cicd
-.fake
+.fake

ARCHITECTURE.md

@@ -0,0 +1,29 @@
+# Blue Language Java architecture
+
+This repository is a layered Java 8 distribution for two specifications:
+
+- Blue Language 1.0 defines the graph, Source pipeline, BlueId, provider
+  evidence, immutable snapshots, matching, and patching semantics.
+- Blue Contracts and Processor 1.0 defines deterministic processing of one
+  Root and one event, including runtime extension, gas, lifecycle,
+  checkpoints, diagnostics, and Root-only output.
+
+The dependency rule is simple: Contracts may use Language public APIs;
+Language never imports Contracts. Conformance and examples sit above both.
+Optional mapping and IPFS integrations do not leak into the minimal model or
+core artifacts.
+
+Start with the [architecture overview](docs/architecture/overview.md). The
+following focused documents cover the implementation:
+
+- [modules and dependencies](docs/architecture/modules-and-dependencies.md);
+- [Language pipeline](docs/architecture/language-pipeline.md);
+- [Contracts pipeline](docs/architecture/contracts-pipeline.md);
+- [immutability and runtime state](docs/architecture/immutability-and-runtime-state.md);
+- [provider and fragment model](docs/architecture/provider-and-fragment-model.md);
+- [conformance and release](docs/architecture/conformance-and-release.md).
+
+Normative decisions are recorded in [docs/adr](docs/adr). Architecture tests
+enforce package cycles, module edges, split packages, build shape, visibility,
+and source ownership. Generated inventories and the final quality report are
+evidence; the specifications and bound fixture packages remain authoritative.

CHANGELOG.md

@@ -2,10 +2,27 @@
 
 ### Feat
 
+- bind the corrected 128-fixture Language 1.0 and 140-fixture Contracts 1.0
+  conformance packages and add a strict machine-readable release gate
+- add the generic cyclic-set member mutation guard before provider demand
+- split canonical identity construction from author-facing minimization
 - add immutable `FrozenJsonPatch` APIs for direct frozen patch-value handoff
 - add configurable per-runtime cache policy, cache statistics, and idempotent runtime close
 - add explicit low-memory, high-throughput, and disabled cache policy profiles
 - add production-path processing metrics snapshots and conservative patch-impact classification
+- add immutable same-scope External Channel member context, including a shallow
+  effective-type-family view whose exact dependencies participate in
+  subscription invalidation, checkpoint domains, and sparse evidence verification
+- add event-scoped External Channel pattern matching with inline/reference
+  parity through a pass-local verified snapshot-manager boundary
+- admit exact pure-reference Root and Event inputs through verified
+  demand-driven fragments without recursively expanding the full graph
+- add immutable same-scope handler routing and logical-delivery coalescing
+  while raw accepted sources retain atomic checkpoint ownership
+- add an event-scoped exact-reference materializer and representation-blind
+  default projection for referenced subscription-key fragments
+- preserve exact inline checkpoint subjects and expose both the frozen current
+  subject and exact prior subject to channel newness policies
 
 ### Performance
 
@@ -20,14 +37,27 @@
 
 ### Compatibility
 
-- retain all existing mutable patch APIs and Java 8 bytecode targeting
+- remove deprecated pre-1.0 aliases, routed-delivery carriers, trusted provider
+  behavior, ambiguous reverse APIs, and fatal-termination compatibility paths
+- retain the released `NodeProviderWrapper.unverified(...)` and
+  `isExplicitlyHostTrusted(...)` descriptors for downstream binary linkage
+  while enforcing verification and always denying host trust
+- keep raw accepted sources as checkpoint owners while allowing immutable
+  same-scope handler selection and logical-delivery coalescing
+- document the named live counter stream used by downstream BEX 2.0 runtime
+  integrations to supply conforming child-ledger traces
+- retain Java 8 bytecode targeting
 - preserve full-resolution fallbacks for schema, fixed-value type, reference, collection,
   contracts-changing, custom-merger, and unknown-capability cases
 - add reproducible source-release archives and JVM descriptor compatibility reporting
+- pin the Gradle wrapper distribution checksum
 - honor `SOURCE_DATE_EPOCH` for reproducible build metadata timestamps
 
 ### Fix
 
+- pass all corrected Contracts fixtures without an expected-failure whitelist
+- preserve whole-invocation rollback and zero provider demand when rejecting
+  traversal below a cyclic-set member reference
 - keep nested transient planning scopes from closing parent reference state
 - serialize shared processor-registry and type-resolution updates against processing and reject
   lock upgrades instead of deadlocking
@@ -37,6 +67,8 @@
   cache-sensitive work
 - isolate retained conformance views from refreshed cache generations
 - bound transient trusted reference retention and report its real eviction/rejection counters
+- merge an admitted named runtime child ledger before rollbackable handler
+  effects so its gas and ordered trace survive a later runtime-fatal rollback
 
 ## v2.0.0 (2026-05-13)
 
@@ -58,7 +90,7 @@
 
 ### Feat
 
-- use core type blue ids from blue-repository (#11)
+- adopt canonical core type BlueIds (#11)
 
 ### Fix
 

CONTRIBUTING.md

@@ -0,0 +1,22 @@
+# Contributing
+
+Thank you for improving Blue Language Java. Begin with the complete
+[developer process](docs/developer-process.md); it contains prerequisites,
+module ownership, coding/test conventions, fixture and registry procedures,
+API baseline rules, benchmark commands, and the RC checklist.
+
+The short version:
+
+1. Put the change in the owning module and keep the dependency graph acyclic.
+2. Preserve exact identity, provider outcomes, deterministic gas, immutable
+   runtime state, and atomic Contracts behavior.
+3. Add useful comments and named constants for stable protocol values.
+4. Write deterministic `should...` tests with Given–When–Then sections.
+5. Run focused tests, the owning module gates, examples/documentation, exact
+   conformance, and the final release verification appropriate to the change.
+6. Never update a fixture identity, API baseline, semantic baseline, or release
+   binding merely to silence a failure.
+
+Use the [repository ownership table](docs/developer-process.md#which-repository-owns-this)
+before adding ecosystem-specific behavior. BEX and Coordination features do
+not belong in this repository.

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 ITC
+Copyright (c) 2025 Blue Language Labs Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal