Skip to content

Adopt RELAY v1.10 §20 continuous-conformance CI gates #33

Description

@SoundMatt

RELAY spec v1.10 (release) adds §20 Continuous Conformance, making the CI process normative: conformance must be continuously proven, not just declared.

§20 requires, on every change, that CI gates on:

  1. relay conform --strict against the built CLI (fail on FAIL or WARN).
  2. The full gofusa lifecycle — not a subset: check (gate on ERROR), 100% requirement traceability (traced and tested), cybersecurity analysis, dependency vulnerability scan, and the tool qualification suite.
  3. relay interop behavioural conformance (once convert exists) — EQUIVALENT for every golden vector.
  4. Evidence (§20.4): a traced+tested requirements registry, a HARA, a dFMEA, and a TARA where untrusted input is processed.
  5. Supply-chain (§20.5): SBOM + build provenance (SLSA), releases tagged from green CI.

RELAY itself is the reference exemplar — its CI now runs the full go-FuSa lifecycle and passes every gate.

What go-LIN needs

No relay conform CI gate yet (see #30) — add it (--strict). Expand to the full go-FuSa lifecycle (vuln, qualify, 100% trace). Add relay interop, TARA, dFMEA, SBOM/provenance.

This builds on the §13.7 architecture + spec-uplift issue already open. No changes are requested to RELAY. Verify with relay conform --strict + the full gofusa lifecycle locally.


Definition of done — the entire current spec (v1.10)

This issue lists the §20 deltas, but the bar is the whole current RELAY spec — v1.10 (the latest release), not only §20, and not the "1.9" mentioned in the earlier §13.7 issue (now superseded). The implementation is conformant when:

  • version --format json reports spec_version 1.10 (track spec/version.json in SoundMatt/RELAY);
  • relay conform --strict <binary> passes — the full §12 / §17 document and behaviour surface;
  • relay interop reports the implementation EQUIVALENT for every golden vector (§20.2), once convert is conformant;
  • the full x-FuSa lifecycle passes (§20.1.2);
  • all normative sections are satisfied — §13.7 architecture, §15 canonical types (including CAN XL / ESI where applicable), §5 sentinels, §6 lifecycle, etc. — not just the sections cited above.

Re-verify against spec/version.json after each RELAY MINOR release.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions