[mikemcdougall]

Summary

Published getting-started installs in README.md and INSTALL.md already use the package index. Later fenced source-checkout commands were still release-install steps. On the retained replay (run 39226326375, docs 5a793520, admitted honua-sdk 0.1.16) the unqualified git clone then pip install ./packages/honua-sdk exited 0 and replaced that package with direct-origin 0.1.17. Later blocks failed the package guard for the same reason. honua-release#718 refuses every direct-origin install, including a version match, so pinning the clone to the admitted version would not qualify it.

Those source fences stay in the documents, with the same pip commands, so the development-source producer still captures them. They are marked doc-run: skip and are not steps in the release install. The commands the getting-started gate executes are published pip install commands. This does not run the executable-docs gate, does not admit a source build, and does not publish a package.

gRPC unary/stream and applyEdits producers are already on trunk (scripts/_conformance_operations.py, required operations independent of the harness case list, with tests/test_conformance_candidate_operations.py and tests/test_certification_fragment.py). Local run of those unit tests: 104 passed. No signed-entitlement candidate run was executed here. Trunk conformance run 39402438662 on f36e702 stopped in setup with governed requirements name another Python producer source; that is not a gRPC or edit result.

Testing

• python3 -m pytest tests/test_published_getting_started_install.py — 2 passed
• python3 scripts/check_docs_command_policy.py — passed
• ruff check on the touched files — passed
• python3 -m pytest tests/test_conformance_candidate_operations.py tests/test_certification_fragment.py tests/test_conformance_entitlement.py — 104 passed

Remaining

• 2026.1: published getting-started docs fail against the candidate (R28) #257 stays open. The candidate executable-docs replay has not been run, docs/quickstart.md is still blocked on honua-release#423 (apply_edits_result HTTP 400), and the corrected docs are not in a published SDK cohort. Historical source admission under honua-release#721 is unchanged.
• [platform-20261006] Release certification coverage: operation scope complete by definition, edits certified by a metadata probe, gRPC never run against the candidate #282 stays open. The external signed-license candidate run, and receipt-v2 context that names this producer, are still required.

Refs #257
Refs #282

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-21T18:00:14.016374Z	f11673a	PR opened
🔒 Security Review	✅ Completed 2026-10-21T17:59:19.988878Z	f11673a	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.