v9.9.0 release candidate — implementation complete, controlled WhatsApp acceptance pending

.github/workflows/stable-release.yml

@@ -33,6 +33,23 @@ jobs:
           version = Path('VERSION').read_text(encoding='utf-8').strip()
           if not re.fullmatch(r'[0-9]+\.[0-9]+\.[0-9]+', version):
               raise SystemExit(f'Invalid VERSION: {version!r}')
+          if version == '9.9.0':
+              runtime = Path('src/postmaster/whatsapp_runtime_v990.py').read_text(encoding='utf-8')
+              required_acceptance = (
+                  '"protocol_interop_verified": True',
+                  '"signal_multidevice_verified": True',
+                  '"controlled_account_interop_verified": True',
+              )
+              missing_acceptance = [
+                  item for item in required_acceptance if item not in runtime
+              ]
+              if missing_acceptance:
+                  raise SystemExit(
+                      'Refusing stable v9.9.0 release without reviewed controlled-account '
+                      f'WhatsApp acceptance flags: {missing_acceptance}'
+                  )
+              print('WhatsApp v9.9.0 controlled-account acceptance flags verified.')
+
           changelog = Path('CHANGELOG.md').read_text(encoding='utf-8')
           match = re.search(
               rf'^## {re.escape(version)} - .*?\n(?P<body>.*?)(?=^## |\Z)',

.github/workflows/whatsapp-v990-controlled-interop.yml

@@ -0,0 +1,113 @@
+name: WhatsApp v9.9 controlled account interop
+
+on:
+  workflow_dispatch:
+    inputs:
+      require_inbound_echo:
+        description: Require controlled direct peer to echo the direct probe token
+        required: true
+        default: true
+        type: boolean
+      require_group_echo:
+        description: Require controlled peer to echo the group probe token
+        required: true
+        default: true
+        type: boolean
+      require_inbound_media:
+        description: Require controlled peer media in the test group and Stored File handoff
+        required: true
+        default: true
+        type: boolean
+      require_remote_receipt:
+        description: Require a remote delivery/read receipt for the direct probe text
+        required: true
+        default: true
+        type: boolean
+      run_media:
+        description: Exercise direct/group encrypted media upload and send
+        required: true
+        default: true
+        type: boolean
+      observe_timeout_seconds:
+        description: Seconds per controlled peer observation window (10-300)
+        required: true
+        default: '120'
+        type: string
+
+permissions:
+  contents: read
+
+concurrency:
+  group: whatsapp-v990-controlled-interop
+  cancel-in-progress: false
+
+jobs:
+  controlled-account:
+    name: WhatsApp controlled-account full interoperability
+    runs-on: ubuntu-latest
+    timeout-minutes: 14
+    environment: whatsapp-v990-controlled
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install repository runtime dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+
+      - name: Validate controlled-session secrets are configured
+        env:
+          AUTH_DB: ${{ secrets.POSTMASTER_WA_AUTH_DB_B64 }}
+          AUTH_KEY: ${{ secrets.POSTMASTER_WA_AUTH_KEY_B64 }}
+          TEST_JID: ${{ secrets.POSTMASTER_WA_TEST_JID }}
+          TEST_GROUP_JID: ${{ secrets.POSTMASTER_WA_TEST_GROUP_JID }}
+        run: |
+          test -n "$AUTH_DB" || { echo "POSTMASTER_WA_AUTH_DB_B64 is not configured in the whatsapp-v990-controlled environment"; exit 2; }
+          test -n "$AUTH_KEY" || { echo "POSTMASTER_WA_AUTH_KEY_B64 is not configured in the whatsapp-v990-controlled environment"; exit 2; }
+          test -n "$TEST_JID" || { echo "POSTMASTER_WA_TEST_JID is not configured in the whatsapp-v990-controlled environment"; exit 2; }
+          test -n "$TEST_GROUP_JID" || { echo "POSTMASTER_WA_TEST_GROUP_JID is not configured in the whatsapp-v990-controlled environment"; exit 2; }
+          echo "Controlled-session secrets are configured (values not printed)."
+
+      - name: Compile controlled interop harness
+        run: |
+          python -m compileall -q             src/postmaster/whatsapp_v990             scripts/whatsapp_v990_controlled_interop.py
+
+      - name: Run controlled direct/group text/media/receipt/inbound interoperability
+        env:
+          PYTHONPATH: src
+          POSTMASTER_WA_AUTH_DB_B64: ${{ secrets.POSTMASTER_WA_AUTH_DB_B64 }}
+          POSTMASTER_WA_AUTH_KEY_B64: ${{ secrets.POSTMASTER_WA_AUTH_KEY_B64 }}
+          POSTMASTER_WA_TEST_JID: ${{ secrets.POSTMASTER_WA_TEST_JID }}
+          POSTMASTER_WA_TEST_GROUP_JID: ${{ secrets.POSTMASTER_WA_TEST_GROUP_JID }}
+          POSTMASTER_WA_REQUIRE_INBOUND_ECHO: ${{ inputs.require_inbound_echo }}
+          POSTMASTER_WA_REQUIRE_GROUP_ECHO: ${{ inputs.require_group_echo }}
+          POSTMASTER_WA_REQUIRE_INBOUND_MEDIA: ${{ inputs.require_inbound_media }}
+          POSTMASTER_WA_REQUIRE_REMOTE_RECEIPT: ${{ inputs.require_remote_receipt }}
+          POSTMASTER_WA_RUN_MEDIA: ${{ inputs.run_media }}
+          POSTMASTER_WA_OBSERVE_TIMEOUT_SECONDS: ${{ inputs.observe_timeout_seconds }}
+          POSTMASTER_WA_EVIDENCE_PATH: whatsapp-v990-controlled-evidence.json
+        run: python scripts/whatsapp_v990_controlled_interop.py
+
+      - name: Upload non-secret interoperability evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: whatsapp-v990-controlled-evidence
+          path: whatsapp-v990-controlled-evidence.json
+          if-no-files-found: ignore
+          retention-days: 1
+
+      - name: State acceptance boundary
+        if: always()
+        run: |
+          echo "This workflow never changes source acceptance flags automatically."
+          echo "A release-qualifying run must leave every full-profile input enabled and must end with"
+          echo "controlled_account_interop_observed=true in the non-secret evidence artifact."
+          echo "A successful run must be reviewed before protocol_interop_verified, signal_multidevice_verified,"
+          echo "or controlled_account_interop_verified can change in source."
+          echo "No QR refs, auth database bytes, auth key, JIDs, private keys, session secrets or media payloads"
+          echo "are written to the evidence artifact."

.github/workflows/whatsapp-v990-offline-validation.yml

@@ -0,0 +1,219 @@
+name: WhatsApp v9.9 offline validation
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'src/postmaster/whatsapp_v990/**'
+      - 'src/postmaster/whatsapp_runtime_v990.py'
+      - 'src/postmaster/webgui_whatsapp_v990.py'
+      - 'tests/test_whatsapp_*_v990.py'
+      - 'scripts/whatsapp_v990_network_smoke.py'
+      - 'scripts/whatsapp_v990_noise_server_hello_probe.py'
+      - 'scripts/whatsapp_v990_noise_registration_probe.py'
+      - 'scripts/whatsapp_v990_pair_device_probe.py'
+      - 'scripts/whatsapp_v990_controlled_interop.py'
+      - '.github/workflows/whatsapp-v990-offline-validation.yml'
+      - '.github/workflows/whatsapp-v990-controlled-interop.yml'
+      - '.github/workflows/stable-release.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: whatsapp-v990-offline-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  offline-protocol:
+    name: WhatsApp v9.9 offline protocol/runtime
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install repository runtime dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+
+      - name: Compile WhatsApp candidate
+        run: |
+          python -m compileall -q \
+            src/postmaster/whatsapp_v990 \
+            src/postmaster/whatsapp_runtime_v990.py \
+            src/postmaster/webgui_whatsapp_v990.py \
+            scripts/whatsapp_v990_controlled_interop.py \
+            tests
+
+      - name: Run WhatsApp offline regression suite
+        env:
+          PYTHONPATH: src
+        run: |
+          python -W error::ResourceWarning -m unittest discover             -s tests             -p 'test_whatsapp_*_v990.py'             -v
+
+      - name: Guard controlled-account release boundary
+        run: |
+          python - <<'PY'
+          from pathlib import Path
+
+          runtime = Path('src/postmaster/whatsapp_runtime_v990.py').read_text(encoding='utf-8')
+          harness = Path('scripts/whatsapp_v990_controlled_interop.py').read_text(encoding='utf-8')
+          workflow = Path('.github/workflows/whatsapp-v990-controlled-interop.yml').read_text(encoding='utf-8')
+          stable_release = Path('.github/workflows/stable-release.yml').read_text(encoding='utf-8')
+
+          expected_false = (
+              '"protocol_interop_verified": False',
+              '"signal_multidevice_verified": False',
+              '"controlled_account_interop_verified": False',
+          )
+          missing = [item for item in expected_false if item not in runtime]
+          assert not missing, (
+              'Live acceptance flags must stay false until controlled-account evidence exists: '
+              f'{missing}'
+          )
+
+          required_harness_checks = (
+              'POSTMASTER_WA_TEST_GROUP_JID',
+              'group_sender_key_interop_observed',
+              'media_interop_observed',
+              'receipt_policy_observed',
+              'inbound_group_media_stored_file_observed',
+              'controlled_account_interop_observed',
+          )
+          missing = [item for item in required_harness_checks if item not in harness]
+          assert not missing, f'Controlled interop harness lost release-critical checks: {missing}'
+
+          required_workflow_checks = (
+              'environment: whatsapp-v990-controlled',
+              'POSTMASTER_WA_TEST_GROUP_JID',
+              'require_group_echo',
+              'require_inbound_media',
+              'controlled_account_interop_observed=true',
+          )
+          missing = [item for item in required_workflow_checks if item not in workflow]
+          assert not missing, f'Controlled interop workflow lost release-critical gates: {missing}'
+
+          release_interlock = (
+              "version == '9.9.0'",
+              '"protocol_interop_verified": True',
+              '"signal_multidevice_verified": True',
+              '"controlled_account_interop_verified": True',
+              'Refusing stable v9.9.0 release',
+          )
+          missing = [item for item in release_interlock if item not in stable_release]
+          assert not missing, f'Stable-release WhatsApp interlock is incomplete: {missing}'
+
+          print(
+              'Offline validation passed; implementation can advance without an account, '
+              'but stable acceptance remains controlled-account gated.'
+          )
+          PY
+
+  network-transport-smoke:
+    name: WhatsApp WebSocket unauthenticated transport smoke
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Probe current WhatsApp WebSocket endpoint
+        run: python scripts/whatsapp_v990_network_smoke.py
+
+      - name: State acceptance boundary
+        if: always()
+        run: |
+          echo "This job validates only DNS/TCP/TLS/RFC6455 reachability."
+          echo "It does not validate QR pairing, Noise authentication, Signal multi-device, account interoperability, messages, media, groups, or receipts."
+
+  live-noise-server-hello:
+    name: WhatsApp live Noise ServerHello probe
+    runs-on: ubuntu-latest
+    timeout-minutes: 3
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install repository crypto runtime and CI-only WebSocket driver
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+          python -m pip install 'websockets>=15,<16'
+
+      - name: Decrypt live Noise ServerHello and verify certificate chain
+        env:
+          PYTHONPATH: src
+        run: python scripts/whatsapp_v990_noise_server_hello_probe.py
+
+      - name: State acceptance boundary
+        if: always()
+        run: |
+          echo "This job stops before ClientFinish/ClientPayload."
+          echo "No QR/account/device credentials or authenticated WhatsApp actions are exercised."
+          echo "Passing does not set protocol_interop_verified, signal_multidevice_verified, or controlled_account_interop_verified."
+
+  live-registration-pair-device:
+    name: WhatsApp live ClientFinish and pair-device probe
+    runs-on: ubuntu-latest
+    timeout-minutes: 3
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install repository runtime dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+
+      - name: Complete throw-away registration and receive encrypted pair-device
+        env:
+          PYTHONPATH: src
+        run: python scripts/whatsapp_v990_pair_device_probe.py
+
+      - name: State acceptance boundary
+        if: always()
+        run: |
+          echo "This job validates ClientFinish, current ClientPayload, encrypted transport and WABinary pair-device refs."
+          echo "QR refs are never printed or persisted and no account is paired."
+          echo "Passing still does not set signal_multidevice_verified or controlled_account_interop_verified."
+
+
+  live-noise-client-finish:
+    name: WhatsApp live Noise ClientFinish registration probe
+    runs-on: ubuntu-latest
+    timeout-minutes: 3
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install repository crypto runtime and CI-only WebSocket driver
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt
+          python -m pip install 'websockets>=15,<16'
+
+      - name: Send live ClientFinish and authenticate first transport response
+        env:
+          PYTHONPATH: src
+        run: python scripts/whatsapp_v990_noise_registration_probe.py
+
+      - name: State acceptance boundary
+        if: always()
+        run: |
+          echo "This job uses fresh one-run Noise/Signal registration material and stops before QR scan/account pairing."
+          echo "Passing validates ClientFinish/registration transport compatibility only."
+          echo "It does not set protocol_interop_verified, signal_multidevice_verified, or controlled_account_interop_verified."