jianguotian opened a new pull request, #79: URL: https://github.com/apache/paimon-mosaic/pull/79
## Summary This is the second PR in the consolidated three-PR replacement for #72. The legal/package metadata foundation has already merged as #78. This PR deliberately combines the three previously planned verification slices because they form one dependency-closed review unit: - verify signed release tags, component versions, and reproducible source archives; - parse and validate ELF, PE, and Mach-O native binaries and required exports; - verify Java JAR and Python wheel contents, platform identity, legal payloads, and archive safety; - make Python wheel packaging fail closed while preserving the required native library and legal files. Java staging and GitHub Actions publication orchestration remain outside this PR. They form the final PR and will be opened only after this one merges. ## Consolidated sequence 1. #78 — reproducible dependency and license metadata (**merged**) 2. Source and binary artifact verification (**this PR**) 3. Fail-closed staging and publication orchestration ## Validation - complete tools test suite available at this layer: 157 passed - source/archive, native binary, JAR, and wheel verifier contracts: passed - real ARM64 wheel build and verification: passed - `cargo test --locked -p paimon-mosaic-core --lib`: 155 passed - Maven validation: passed - ASF headers, dependency reports, generated license reports, and `cargo deny`: passed - cumulative final branch preserves the exact remaining patch from the previously validated #72 split -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
