# Shared code release gates

Core 0.9.0, CLI 0.7.0, renderer/PPTX 0.7.0 and editor 0.6.0 are published, registry-verified and adopted on all three public sites. Complete-set registry/native gates pass on Node 20/24; core PR #56 merged the release plan and immutable CI refs as `921fce853fefacf6d17c3572d77b1714c139a9ab` after coordinator `34452913573`, core `34452913519` and Bugbot passed. Core PR #55 previously merged as `685733976a665d0190bdb9922b9a174ef94153d9`, tree-identical to reviewed `7aa98ec32241e807ec18a95a7b1440fc780dfdc6`. Complete Linux coordinator `34443625041`, core `34443625103`, Windows/macOS CLI `34443625117` and Bugbot pass. Trusted publication runs are `34444106008` (core) and `34444558025` (CLI). Never republish an existing version.

Continue root `codex/shared-code-public-adoption-20260910`. [Public adoption evidence](../evidence/shared-code-public-adoption/summary.json) records website #23, gallery #25 and pptx.dev #31 merged and deployed, 21 passing workflows against previews and again against public production, exact showcase/editor/font assets, and a new native PowerPoint test of an actual public Author download. An example-only mobile accessibility fix from editor #10 changes the gallery example ref without republishing editor 0.6.0. This checkpoint's documentation/example-ref update still requires core CI/review. Fresh [core registry evidence](../evidence/shared-code-publication/core.json) and [CLI registry evidence](../evidence/shared-code-publication/cli.json) pass on Node 20.20.2/24.20.0 with signatures/attestations, immutable test fixtures and exact source commit. All 519 core installed files match the fetched archive; 28 quote/code fixtures pass. CLI global/npx-style installation, six protected skills and 69 command checks pass with bundled core 0.9.0. The actual registry archive integrities differ from the earlier Windows local preparation archives below; each evidence record retains its own scope.

Renderer PR #11 merged as `f4a1b8e1324cbc182b98d43f16528594c8006f86`, tree-identical to reviewed `c6b8ae18a0033dcd4c1f2893d760e76ee0bc9475`. The valid one-line trace-height finding is fixed; final CI `34446148105` and review pass. Trusted publication `34446669234` succeeded. [Actual registry checks](../evidence/shared-code-publication/renderer.json) pass on both runtimes: all 16 shipped files match the merge, eight pinned suites, 126 decks / 805 reviewed rasters, 132 XML-character rejection cases, existing browser suites and twelve code/font cases. Signatures/attestations and zero-advisory audit pass. Native export and complete-set public adoption remain separate.

Converter PR #15 merged as `f421c91b7b127c7eeab788acdc0c51969402e057`, tree-identical to reviewed `54f452097a52da8e39f1a600dfbf2ccd08f22b81`. All four CI jobs (`34448046042`) and review pass; trusted publication `34448635137` succeeded. [Actual registry/native checks](../evidence/shared-code-publication/pptx.json) pass on both runtimes: 20 immutable shipped files, seven pinned suites, five browser suites, zero advisories and verified signatures/attestations. Twelve native quote and eight native code fixtures pass per runtime, including 24 exact code slide imports and tab stops within 0.007031 point. All 24 original/saved/edited archives across both runtimes contain no embedded fonts. Actual registry representative images match previously inspected candidate hashes; native baselines/glyph raster differ from SVG. No pixel-equivalence claim is made.

Editor PR #9 merged as `7b6db50f42783979841674e628193b1ba2f5c0e2`, tree-identical to reviewed `02e9abc47a987e94ccd44dec38f1112753a13631`. Final CI `34451155459`, review and trusted publication `34451545452` pass. [Actual registry checks](../evidence/shared-code-publication/editor.json) pass on both runtimes: all 32 shipped files, nine model suites, offline playground and wide/portrait code/blank/selection workflows, signatures/attestations and zero advisories. Review's invisible-selection finding was reproduced and fixed; source/filename selections retain the input font color, and corrected candidate screenshots were inspected. All standalone publication helpers have passed their new version paths. The new complete-set registry code mode and immutable native bridge are prepared, and full coordinated candidate source/tarball/browser/CLI and negative guards pass on both runtimes. [Complete registry/native matrices](../evidence/shared-code-complete/summary.json) now pass on both runtimes: all seven browser suites (230 assertions/eight trusted scenarios), additional code/blank/selection workflows, fifteen fidelity suites, CLI installation and negative runtime/integrity/link/loader guards. Native PowerPoint preserves all 24 original/saved/edited code slide imports per runtime; tab error is at most 0.007031 point, and twelve archives contain no embedded fonts. Representative PNGs match previously inspected converter images. Complete CI/review of the advanced plan and immutable refs passed in core PR #56. Previous integration branches remain intact: renderer `b5a3722725338e8d964783e8b7f1f7b80ce28cd3`, converter `b4f4645cdaa2f5eff8a883f68533875d3b63f239`, editor `52e540b83e441892fd928e9f159bffbb29da5653`.

[Local release preparation evidence](../evidence/shared-code-release-preparation-2026-09-09.json) previously passed Node 20.20.2/24.20.0: 448 core tests and preservation suites, 11 CLI tests and 69 command checks, core/CLI declarations, actual core installs checking 519 tarball entries, and standalone global/npx-style CLI installation. All six skills/17 helpers, 126 examples, spec/schema gates and zero-advisory audit pass; lint has no errors. CLI local-pack integrity was identical across both runtimes: `sha512-d72DCb5aNuM66Ori83ll+fMOeZBNk5RmaLityd/sgad84oAYrmRnbmHCe/re86jvsU1IAsZ3acG5bQmjL2HpIA==`. These remain historical local archives, separate from the subsequently verified registry releases.

The standalone core verifier runs all 28 quote/code layout and composition/pagination fixtures through actual installed public APIs in both local-tarball and registry modes. It rejects source-loader environments and replaces only test import paths. Both local and actual registry core 0.9.0 checks now pass on both runtimes. This closes the previous verifier's omission of code fixtures without changing package runtime bytes.

| Order | Target | Required behavior and dependencies |
| --- | --- | --- |
| 1 | Core 0.9.0 — published, verified | Public `layoutCode`/source-line types, accepted `codeLayout`, complete metadata/body candidate scoring and pagination; `grid-score-v3` acknowledges changed selection and explanation types. |
| 2 | CLI 0.7.0 — published, verified | Bundle core 0.9.0 and updated self-contained skills; retain safe offline six-skill installation, status and explicit updates. |
| 3 | Renderer 0.7.0 — published, verified | Require core 0.9.0; use accepted code geometry, literal tabs/source spans, metadata targets and reviewed code raster baseline. |
| 4 | PPTX 0.7.0 — published, verified | Require core 0.9.0 and coordinated renderer 0.7.0 for preview/font measurement; editable accepted code lines, guarded source recovery and explicit XML character errors. |
| 5 | Editor 0.6.0 — published, verified | Require core 0.9.0/renderer 0.7.0; use converter 0.7.0 in verified examples; preserve source line endings, metadata/body edits, literal Tab and undoable export/reimport. |

Refresh each consumer lock only after its upstream versions are published. Run its complete source, packed, browser and CI/review gates on the release branch. Use trusted publication and immutable merge/tag refs, then inspect actual registry files, versions, integrity, signatures/provenance and fresh installs on Node 20/24. Do not substitute linked sources or private preview tarballs for that evidence.

Core preparation updates versioned API/skill documentation and CLI bundled-core wording. Reconcile the CLI-local changelog's missing published 0.6.0 entry with the already recorded 0.6.0 release; do not invent a new release or alter its published date. Keep the published quote-era documentation explicitly versioned when describing the prior `grid-score-v2` behavior.

After the complete set exists, enable shared-code registry tests against immutable released fixtures. Execute actual installed renderer/editor workflows, all previous browser suites and the corpus. Repeat the code-native PowerPoint bridge on registry bytes: generate, native edit/save/reopen, compare exact source and metadata. Preserve the font/executable/runtime and output hashes, and inspect representative wide/portrait native/SVG rasters. XML-representable Unicode does not establish glyph coverage; native source recovery does not reconstruct formatting, geometry, font theme or readability policy.

Advance the published core plan/immutable CI refs only after those registry gates pass. Update openpresentation.org documentation and accurate UTC changelog, pptx.gallery and pptx.dev to the new exact packages. Check deployed bundles/fonts and actual author/import, preview/layout, editing/undo, export and reimport workflows before claiming public adoption. Keep the current verified deployments available through review.

This release does not complete deterministic layout repair, Auto arrange, metric/timeline/chart internals, multilingual shaping, broad open-font compatibility or missing macOS PowerPoint/Keynote evidence. Continue the full ecosystem objective after the code milestone.