[1.8.0] Release TODOs and cross-repository integration checklist #3242

• Server / PD / Store
  • 🔗 #3311 · Oct12 02:38 UTC; container exit status; historical independent8.8 at 56b8f6e7, real-container/RC open
  • 🔗 #3310 · Oct 12 02:10 UTC; optional jemalloc timeout bounded
  • 🔗 #3312 · Oct 12 02:24 UTC; Helm package size repaired; multi-node/RC separate
  • 🔗 #2994 · Oct 11 18:09:27 UTC; 8feec7e1 → 7644566e; consumer/RC qualification remains
  • 🔗 #3258 · Oct 11 09:08:35 UTC; d3db8e73 → 4ffd71b1; [Bug] HStore Server image (hugegraph/server) keeps crash diagnostics only inside the container, so a restart on Kubernetes loses them #3256 closed
  • 🔗 #3291 · Oct 11 09:24:57 UTC; fcdeed82 → 000d538a; [Bug] Store IpUtil.getNearestAddress logs ERROR for hostname addresses and can return 127.0.0.1 #3255 closed
  • 🔗 #3301 · merged 2026-10-10 17:34:02 UTC
  • 🔗 #3298 · merged 2026-10-10 10:40:15 UTC
  • 🔗 #3269, 🔗 #3207, 🔗 #3204, 🔗 #3193, 🔗 #3184, 🔗 #3164, 🔗 #3157, 🔗 #3234, 🔗 #3232, 🔗 #3233
• Toolchain / clients
  • 🔗 Toolchain #806 · Oct12 02:06 UTC; HTTPS fixture
  • 🔗 Toolchain #807 · Oct12 02:07 UTC; propertyless edge labels
  • 🔗 Toolchain #808 · Oct12 02:16 UTC; Loader response-file arguments
  • 🔗 #799 · Oct 10 08:48:33 UTC; 88841439 → a3ae0ab5; 🔗 Toolchain approved #799
  • 🔗 #800 · Oct 10 08:47:34 UTC; 8ba764d9 → a6684675; 🔗 Toolchain approved #800
  • 🔗 #801 · Oct 10 09:54:44 UTC; d410c4c2 → 25b52064; 🔗 Toolchain approved #801
  • 🔗 #802 · Oct 10 09:55:10 UTC; f6bd598d → 039153cd; 🔗 Toolchain approved #802
  • 🔗 #803 · Oct 10 08:44:28 UTC; b37c8da4 → 0ea7db34; 🔗 Toolchain approved #803
  • 🔗 #804 · Oct 10 08:49:43 UTC; f9893267 → b1baa82f; 🔗 Toolchain approved #804
• AI / docs / integrations
  • 🔗 Doc #515 · Oct 11 22:05 UTC; post-merge build/deploy/publish/visual passed
  • 🔗 Computer #357 · Oct 11 15:02 UTC; sender lifecycle delivered, RC separate
  • 🔗 Doc #514 · Oct 11 19:51 UTC; site recovery delivered by 🔗 Doc #515
  • 🔗 #374, 🔗 #375, 🔗 #377, 🔗 #501, 🔗 #502, 🔗 #505, 🔗 #506, 🔗 #507
  • SeaTunnel 3.0.0 · released 2026-09-29; integration/docs complete

• P1 · Old PD/Store data, backup/restore/rollback, replicas, fatal states, truthful recovery/tasks
• P1 · Hubble retained-PVC reconnect, bounded offline startup, password rotation and native-memory limits
• P1 · Rebuilt UTF-8 consumers + legacy/RC matrix; disposition of reported Loader/Hubble import-safety findings
• P1 · AI/GraphMCP controlled writes/replay/credentials; Python SDK first; SeaTunnel 3.0.0 + matching plugins
• P1 · Freeze scope/owners/SHAs; security/LICENSE/NOTICE, platforms and bilingual upgrade/RC tests; stage/sign/vote/publish
• P2 · Exact-head TinkerPop/downstream RC tests and null-graph regression disposition after merged runtime work

• HStore upgrade (P0, [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id (raft log replay at the upgrade restart, or the first batch write); no migration path for #3153 #3224): Reproduction/workaround unrerun; author seeks maintainer direction, no repair. Qualify old/new rows, snapshots, startup Raft replay, first allocation/write and rollback on every replica. Jar rollback cannot repair mapping; per-replica remapping may hide intervening new-ID rows. Proven unreachable data, not permanent loss. Fix or verify migration/recovery before in-place 1.7 → 1.8 upgrade.
• Query/index: 🔗 #3243 7f5a9173 🔗 throws when filtering removes the sole hidden/deleting indexed candidate #3243, without fresh runtime reproduction. 🔗 #3243/🔗 #2994: nested/negative/count predicates; local/optional/coalesce/union/choose/map/flatMap/math; composite-index/deletion races; ordered partitions/scans, limits/offsets/pages/cursors, duplicates/missing rows. Upgrade all Stores before ordered-scan protocol; reject mixed versions. Retain Track HStore core-test exclusions and property codec mismatch #3090 codec/lifecycle exclusions/historical scans; 🔗 #503/🔗 #498 must match EN/CN PRIMARY_KEY/parent-index/schema visibility.
• Schema replacement: 🔗 #3237 closed; ASF submission pending. Current PD e0e5d99b third-party 9.5/10 COMMENTED: leader-term-bound ID writes and rejected-snapshot load fixed; not multi-PD acceptance. Schema-ID/auth 28b3ca99 author reports live truncate/negative controls, old 3be392a6 score historical. Atomic eddc20124 third-party blocking 5.5/10: partial system-schema initialization/concurrent starts fail; dropping CREATING may let the original creator clear a recreated graph. Reviewer runtime/probe evidence, not independently rerun. Cache f47f49ae third-party blocking 6/10: name miss clears/advances generation, invalidating concurrent refill and repeatedly scanning PD; source chain independently confirmed, load numbers reviewer-only. Fix these before merge qualification. Watch 93a65838 author reports shutdown/double-close/plain-write fixes; prior 9/10 at 4e0f2409 and 8.5 at 636e4088c historical. No product CI/full independent acceptance on new stack. PD-first/mixed-version DDL freeze, rollback/API/task recovery and multi-PD tests remain; no new release-scope decision implied.
• Startup/auth: 🔗 #3192 needs mounted YAML/auth/image/config tests. 🔗 #3253 e272e27c conflict/CI/score below. 🔗 Review #3253: PD/Store properties after -jar, regex PID, unchecked crontab. Retain 🔗 path splitting #3253, 🔗 legacy cron removal #3253, 🔗 canonicalization/bin/CI/graph-path/monitor findings #3253 (nocreate 13 pass/1 fail; cron 106 assertions), path/PID/plugin/restart/monitor/cluster/RC qualification. Server 5039e5b6 rejects explicit G1 before JVM; omission uses G1. Project/launcher 🔗 #3305 981d1b10 delivered; packaged/authenticated HStore acceptance below.
• Basic credentials ([Bug] Basic auth decodes the credential as ASCII and splits on every colon: a non-ASCII password answers 401, a password with ':' answers 400 #3284 / 🔗 #3290): Historical 577f4c3b 🔗 review #3290: REST 200/Cypher 500 for standard Base64 +//; source confirms URL-safe decoder. 7e048d1b repairs the decoder; current CI/qualification below. Create/update validation, client-default charset and published-image Helm guards remain. Compatibility-first policy: reject controls in both fields/username colons; allow password colons and ordinary spaces/commas. Align create/update/login; reject unsupported values before saving. Broader ASCII-only policy undecided, no new gate. Separate from UTF-8 🔗 #3281; [Feature] Let the Server take the initial admin password without a properties-file round trip #3285/[Feature] Server image: map server.urls_to_pd and server.deploy_in_k8s from the environment, and stop editing conf files in place #3286 exclude 1.8.
• Cypher: 🔗 #3241→🔗 #3259 retains error/parser contracts; Hubble/RC open. 🔗 #3289 8d06ad3b→5039e5b6 delivered, approved/paired CI green. 🔗 Author tests #3289: 17 Map fields via $props.field persist; 17 top-level parameters exceed default cap 16; CREATE (n:label $props) assigns no PK. 🔗 #499 a49a8c31: author EN/CN REST examples at 5039e5b6, PRIMARY_KEY rejection/AUTOMATIC success, no independent consumer/RC acceptance. 🔗 Doc Review #499: credential/parser, PK example, IndexLabel/SeaTunnel links, rounding/CN caveats; 🔗 Doc new review #499: null-binding no-row claim only for equality predicates. Retain ID-strategy-before-schema, release/write-schema, SeaTunnel migration E2E; advanced Cypher/HStore/Bolt/cross-request transactions/performance unqualified.
• Store hostname (🔗 #3291): Merged; fcdeed82 retains hostnames/bound addresses, ASCII-digit IPv4 parsing. Five workflows pass; 24 checks pass/8 skip; Codecov/project 39.77% (−0.69 pp) fails, patch passes. Five open threads include repaired/duplicates. 🔗 Exact-head approval #3291; network tests may skip. PD–Raft/network/RC acceptance open.
• HTTPS identity: 🔗 #3307 merged 11:16:53 UTC, 09f067a8 → 87a06a9b, 🔗 exact-head approved #3307, five workflows/31 checks pass, 3 skip. Restores default hostname verification; adds HTTPS identity/trust tests. Author regression/control unrerun; Packaged/downstream/RC open.
• Recovery: [Bug] HStore accepts writes with the default serializer=text and then fails every read with BufferUnderflowException; the backend should require serializer=binary #3225 serializer=binary before writes; text-serializer refusal offered, undelivered; old PD/Store data, init_store.enabled, credentials/prefixes, data/schema retention, metrics, backup/restore/rollback, empty-volume replacement/old-ID retirement and PD/DNS recovery. 🔗 #3265 synthetic SST/WAL/single-node tests do not qualify upgrades/failover.
• Java/TP: Java 17 services/build; Commons/RPC Java 11 bytecode. 🔗 #3263 final 2ca1f254: TP 3.8.1/Groovy 4.0.25, Gremlin Groovy default, GraphBinary Schema/Blob, HTTP V1 Tree, caller-owned GValue, String-ID/count/DATE repairs. Final Memory/RocksDB/HStore skipped TP. Qualify API/Structure/Process on three backends/simple/multi-cluster, downstream Client/Toolchain/Computer/library, mounted Gremlin/YAML, serialization/old-data RC. PD ~12-GiB/full-swap shutdown at 0d495f88 proves neither OOM kill nor cause. 🔗 Controller-discovery finding withdrawn #3261; GraphId scaling does not close [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id (raft log replay at the upgrade restart, or the first batch write); no migration path for #3153 #3224. 🔗 #508/old 🔗 #3117 remain separate.
• Lifecycle split: 🔗 #3302/🔗 #3303/🔗 #3304 delivered. 🔗 #3304 final a40f64d9 → ed3a2dfd, merged 10:33:01 UTC, 🔗 exact-head approved #3304, five workflows/32 checks pass, 3 skip. 152-test Store evidence binds earlier 55043114. Qualify native ownership, failed cleanup, authenticated scan/TTL, timeout/PID, restart/multi-replica/matching RC; coordinate 🔗 Doc queue docs #513. No score/waiver/benchmark transfer.
• Topling: 🔗 #3275 96f99de7 → 134300ab delivered; 6.8/10 stays at bf666f85. 🔗 #3298 ec4d68d7 merged 10:40:15: serializes close/reset, skips closed sessions. 🔗 #3299 34cc360c: owning-DB handles/discard of clearing thread’s batch; 🔗 fixture integration #3299 resolved. Author: 28 standard-JNI tests rebased onto 87a06a9b, not Topling qualification/independent rerun; unsafe-JNI/exit-134 probes inadequate. Retain cold-Gremlin/live-base identity/🔗 #3293 restore history. Marker-parent sync retains retry state; nested data/WAL rejection withdrawn. Retain quiesced retry, hard-link/old pending-state restrictions, standard-provider behavior and copied-data/WAL power-loss durability distinct. Qualify JNI/image/legal, shutdown/restart/migration/rollback, persistent/empty WAL, cross-UID, HA/old-format RC; [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id (raft log replay at the upgrade restart, or the first batch write); no migration path for #3153 #3224 unfixed. 🔗 #510 needs per-graph data/WAL roots; inclusion undecided.
• Foundation/diagnostics: 🔗 #3270 retains source-only null-graph edge-deserialization and namespace/rebuild/long-text/OLAP qualification. 🔗 #3258 d3db8e73 repairs quote/% fallback precedence in JAVA_TOOL_OPTIONS, adds real-JVM option/opt-out tests and documents same-launch PID-reuse limits (🔗 reply #3258). CI/review below; 🔗 #3253/🔗 #509 coordination and actual OOM/volume/RC retention open. Old RISC-V/macOS failures prove no cause/waiver.
• Foundation guide: 🔗 #3307 delivers shared/query-serializer import, process-wide namespace/clean-output and HTTPS identity. 🔗 Doc #511/downstream migration/RC separate; preliminary comments add no score/approval.

• Deployment: [Bug] A Server that starts while PD is briefly unreachable serves REST but loses its Gremlin binding for the life of the process #3228 highest priority. Verify data/index retention through repeated joint PD/Server rollout/password rotation on every Server/Service; Hubble login/list/query/logout separate from hooks. Late retries must not hide binding failure. Bound offline allocator fallback with NetworkPolicy; observed stall proves no timeout expiry.
• Readiness/recovery: 🔗 #3221 3932be60 five workflows green; 🔗 blocking review #3221: source-confirmed ignored metadata-graph failures never enter failedGraphs. 🔗 Minor findings #3221: stale local-failure entries/Javadocs; 🔗 remote failures may be labeled embedded #3221. Round-8 HBase scope/docs fixes do not close these; k3s/default-budget acceptance unrerun. HStore ping is not Raft/data proof. Distinguish fatal PD/transient quorum loss; never delete LOCK. Retain manual restore, data-before-Up/truthful tasks, replica password caches, native/JVM limits, retained-PVC reconnect.
• Helm docs 494: 🔗 Doc voters #494/🔗 Doc shrink #494 remain blocking source/render findings, not live-tested: one Leader/only Followers; minStoreCount=replicas can prevent Up-Store retirement indefinitely. Retain EN/CN growth/PDB/PD-roll/balance, additive NetworkPolicy, Secret/password/auth-cache rollout and 30-minute Tombstone corrections. Non-root official images stay low priority.
• Compatibility: tools ↔ Server 1.7; Hubble ↔ 1.5; measure other tools ↔ 1.5 and original Client 1.5/1.7 ↔ candidate, JVM/route limits. Retain REST/Gremlin/PD, nondefault GraphSpace, unauthorized rejection, timeout units, concurrent FILE/HDFS/JDBC/Kafka imports, old plain/ZIP local/HDFS restore and Client truststore/reflection tests. Reviews add no deliveries.
• Hubble/SDK/images: 🔗 #781 preserves backup-first/read-only H2 schema refusal; migration outside adaptation. 🔗 #784/🔗 #787 deliver network-dependent immutable SDK/JAR/native checks and UTF-8/consumer pins. Browser/package/public-coordinate/RC, metadata/restart, EN/CN permissions, anonymous/login, graph/schema/query/import and separate Server/PD auth remain; 🔗 #785 repaired 🔗 #784 trigger thread.
• Toolchain SDK/artifacts: 🔗 #794 final d52843b9 merged as 38fcddc6; SDK 1.8, pinned Server 68855199, distinct org.apache.hugegraph:hugegraph-toolchain-dist:1.8.0 aggregate and uncached Go CI delivered. 🔗 #787 archive fallback and Go/Python selection P2 disposition remains. Remote staging, published POMs, isolated consumers and matching RC remain paired with 🔗 #512.
• Distributed audit: Server 4c162f53/Toolchain 5622850b HStore clearGraph/PD schema, OLAP ALL-read, Project decoding and SDK HTTPS findings need current-RC disposition. HBase outside bounded 🔗 #783/🔗 #785; readback if retained. 🔗 #710 null guards do not establish fetch/reset/close cause; resolve conflicts, limit unrelated fixtures.
• Optional engines: 🔗 #785 rejects non-UTF-8 FILE/HDFS CSV/JSON/TEXT before Spark; charset/trigger/legacy-CDC threads resolved. Retain CSV/IDs, zero-write dry-run, nonzero CLI errors, extra JARs, serialization/routing and header checks; unsupported resume/standalone-cluster modes rejected, basename collisions rely on Spark. 🔗 #786 rejects identity-changing UPDATE before buffers/writes; same-ID UPDATE and READ/CREATE/DELETE work, DELETE+CREATE stays non-atomic. #793 retains atomic migration/UNIQUE/incident-edge/compensation. Optional inclusion undecided. Driver/executor/JM/TM, YARN, CDC/recovery, duplicates/missing rows, TLS/license and RC acceptance remain, with Spark-HBase/Flink-edge/HStore limits. Ordinary Loader stays independent.
• Core live/import acceptance: Public author snapshot0020, Oct12 01:41 UTC: new frozen-source P0–P2 matrix703 =35pass/5fail/9partial/653unrun/1blocked;40 completed. Historical820=270pass/90fail/77partial/302unrun/81blocked (360completed); older317/771 (237pass/80fail) at Server/SDK 5039e5b6+Toolchain fc89ada9 stays historical. No new frozen full SHA/raw receipts or independent rerun here. Same-source five images built/loaded; bounded native CSV1000v/2000e, Client core/ID/query, RocksDB AuthProxy/Vertex roles, FILE TEXT/JSON and anonymous Hubble canvas reported passing; fullClient C04, S04 permissions/login/CSV upload/topologies/RC remain open. JUnit791/frontend1032 do not add to703. Five failures include duplicate anonymousAPI C02/R10; auth/config mismatches and CI500/package2500 differences do not prove null-record defects. K12 imports3000 then fails writing progress beside read-only mapping; readback K13 does not clear FAIL. 🔗 #808 fixes separate argv gating, no repaired-Job retest. K14 Store-only replacement leaves old-address connections/timeouts despite Ready/PD Up; 🔗 #3313 repair has bounded recovery evidence, originalFAIL/multi-node/PD-only/mainline retest open. SV10 dynamic deletion retains native handles/same-path LOCK, cause open. Original chart Secret>1MiB FAIL is historical after merged 🔗 #3312; author repaired1+1+1 evidence,3+3+3/mainline pending. 🔗 #3310 bounds jemalloc; 🔗 #3311 exit repair merged; real-container acceptance open. Earlier update561/581s/delete602/622s convergence was attributed to600sL2 by the author; no lost-write proof; OLAP cleanup mechanism, HStore dates and full replay/exactly-once/RC unqualified. 🔗 #805 LONG/numeric-ID/retry reports at 039153cd+SDK 68855199 remain; BLOB-null rejection proves no stored-null loss. Loader checkpoint/false-success/cleanup deferral retained; timeout2500 write sampled200IDs only; no new gate.
• Bounded SDK/Server findings: Author report, Server/SDK 5039e5b6 + Toolchain fc89ada9: Project ArrayList→Set cast/missing IndexLabel exceptions; dependent cleanup adds no defect. HStore OLAP clear returns 50/expected 0. Anonymous HStore3 cross-entry stale reads and RocksDB/HStore1-auth Hubble observer authorization failures ; HStore3-auth bounded reads pass. Authenticated deletion lacks independent per-ID verification; no cache/storage root cause established. Strict JDK rejects a no-SAN certificate accepted by HugeClient; functional HTTPS is not identity acceptance. POST500 withdrawn: POST201, unencoded GET500, encoded GET/DELETE pass. 🔗 #3305 981d1b10 and 🔗 #3306 8ad513f9 are now delivered (ledger). The former adds Project JSON, G1/option precedence and matching help/docs; the latter includes rollback-entry clearing, real-executor regressions and bounded bad-key diagnostics. Quiesce affected OLAP writes through cleanup; there is no concurrent-writer guarantee. CI in ledger; packaged/authenticated HStore/RC open. FILE suites: RocksDB two pass/HStore four fail (588 tests, 36 failures/192 errors); Client Func102 has one auth-interface error. 🔗 #3307 delivers the TLS identity repair, packaged/downstream acceptance open.
• Toolchain repairs (10:06 UTC): 🔗 #799–🔗 #804 merged, exact-head MrJs133 approvals; Delivered 🔗 #801 d410c4c2 and 🔗 #802 f6bd598d each have six successful PR workflows, both Codecov green, and both Loader/Hubble baselines passing. #801 candidate Loader passes 96 unit/99 FILE/104 HDFS/4 JDBC/6 Kafka; #802 passes 79/98/103/5/6, all zero failures/errors/skips. READ_LIMIT success/error precedence and configured-zone DATE/local TIMESTAMP repairs are delivered; INT96 retains JVM-default semantics. 🔗 #804 provides protobuf 3.25.9/ordinary Parquet dependencies; prior 3.22.3/ECR failures are historical. Its author PD/GraphSource API import still does not establish native GRAPH CLI or RC qualification. 🔗 #798 closed unmerged.
• CI/image: #792 advisory, separate from 🔗 #787: measure same-run SDK/provenance-cache savings; final Loader image/Compose tiny import/readback. No gate.

Evidence retains observation times. CI/reviews are SHA-bound, not live/signed-RC acceptance; running CI provisional, historical findings not current defects/waivers.

• Other open Server PRs (Oct 11 08:34 UTC): 🔗 #3243 7f5a9173, 🔗 #3192 0be7fde7, 🔗 #3241 ed8344d1, draft 🔗 #3259 a2ac2be8: six green workflows each, only 🔗 #3243 non-conflicting. 🔗 #3192: new nonblocking YAML-parser simplification review, no new approval. Conflicting 🔗 #3253 e272e27c: four workflows pass; Main foreground tests fail (canonicalize_dir: command not found, SIGINT expected 130/got 1), Codecov/project fails; no fixture repair inferred. 🔗 #2994 8feec7e1 merged Oct 11 18:09:27 UTC (7644566e); prior empty retry: five workflows/Codecov green, 32 checks pass/3 skip. Intel/HBase: each Core 968/API 180, zero failures/errors (42/14 and 54/13 skips). Historical 5b14533c: four workflows/Codecov pass; JaCoCo HTTP 504 after two 968-test Core passes. Its 🔗 nonblocking review #2994 retains wrappers/🔗 analyzer reuse #2994; merged delivery, no transferred score/RC acceptance. 🔗 #3221 3932be60: five workflows/31 checks pass, 3 skip; readiness blockers above. Draft 🔗 #3117 e33f7545 conflicts, no PR runs. 🔗 #3134 closure below. CI authorized: 🔗 #3253/🔗 #3290/🔗 #3291; findings/RC open.

• Delivered Server heads: 🔗 #3295 83e1284a → 68855199, merged 06:52:10 UTC, 🔗 approved #3295, five PR workflows/36 checks pass. Merge/master Main: HStore TTL expiry, 922 tests/1 error/53 skips; API/Raft/TP skipped, other four push workflows pass. No proven cause/flake waiver.

• Version: Hubble tag fallback, long-TP/consumer/migration/rollback/immutable-RC and [CI] Restore comparable dependency-review baseline snapshots #3283 remain.

• Module tests 🔗 #3309 (Oct 11 20:30): 03ffdf0b: 1-GiB suite registration removed/Raft mock bounded (true,false), source-verified; 🔗 description corrected #3309. 🔗 CF-lock teardown deadlock #3309 unchanged/source-confirmed, unexecuted. Hold; no new score/approval. Compatibility/Memory/CodeQL/License pass; Main completed/failure; HStore passed including TP; aggregate failure derives from Store. Store: ServerSuite 152/1/0/0; ScanLifecycleTest.testReceivePreservesExternalInterrupt expected onError, got onNext(over=true)/onCompleted; RocksDbSuite 19/0/0/0. Cause/PR attribution unproved. Codecov/project 37.99% (−3.58 pp) fails; patch passes, no controlled gain. Historical a46e8226: 7.5/10, 🔗 two P2s #3309, unexecuted; four workflows/29 checks pass, 2 fail/3 skip; Codecov 41.93% (+0.36 pp)/patch pass. Intel timeout/400/HBase post-test JaCoCo 504 causes unproved.

• Separate production triage from 🔗 #3309: a46e8226 base/head production blobs match. ID escape-boundary ambiguity, typed-config checker bypass, and scan-constructor iterator cleanup merit separate P2 triage; leading-0x80 varint guard is P3 without demonstrated higher impact. Pre-existing/source-only; excluded from test score/gate.

• Diagnostics 🔗 #3258: merged d3db8e73; five workflows/33 checks pass,2skip. RISC-V restart/persistence/native/dump passes. 🔗 Approval #3258:25 launch directories,real-JVM probes,30 threads resolved. Prior 9e9ef772 restart/Intel/ARM failures historical, cause unproved. Odd-path OOM/volume/RC acceptance open.

• Delivered repair evidence: 🔗 #3298 ec4d68d7 approved8.6; five workflows/28checks pass,4skip. 🔗 #3299 34cc360c:five workflows pass,27checks/4skip/2Codecovfail; native Topling unqualified. 🔗 #3301 f3ddc77c→36bc1c64 merged17:34:02, approved9.0; five workflows/32checks pass,3skip; constructor/Gremlin2/2,bootstrap2/2,InitStore1/1. Prior master36bc1c64 push green, not packaged/downstream/RC acceptance.

• Historical basic-auth 🔗 #3290 577f4c3b: HStore API fixture expected201/got403 GraphSpace membership,176tests/1failure/51skip; four other workflows pass, Codecov/project fail. Fixture never exercised standard-Base64 issue. 🔗 Historical7.0 #3290; no score/approval transfer.

• Basic-auth 🔗 #3290 (Oct 12): cd10ba87 README-only follow-up to parser repair. Four workflows pass; Main Linux API setup fails after GitHub:443 curl timeout and missing conf/java-security.properties, before API results; causal chain untraced. Unit/Core968 pass (42skip). HStore auth remains skipped. Prior 7e048d1b nonblocking review and Intel testPost timeout are historical, not this failure. 🔗 Charset/realm #3290 remains undecided; recommend focused browser/client follow-up, no new gate. Current unscored;7.0 at 577f4c3b historical; create/update/login/RC open.

• Graph deletion 🔗 #3308 (Oct 12): dc994abb six returned workflows and all check-runs pass. 🔗 Author durable NEW redispatch #3308 and 🔗 RocksDB reload regression #3308 reports are not independent acceptance or approval; current unscored. Configured drop wait, data/config/registrations and reservation/callback repairs submitted. Historical 9918ff25 🔗 three-regression review #3308, five workflows/Codecov green, Memory merge f07a2ee1048unit/927Core/180API (8/98/14skip) do not transfer. Earlier 0a77e419/78390802 and attempt-1 SIGTERM/Intel findings historical. Uncertain cancellation requires explicit retry; fresh review/RC open.

• Schema implementation evidence (Oct 11 20:30 UTC; ASF pending): current heads e0e5d99b/28b3ca99/eddc20124/93a65838/f47f49ae; no workflow runs. Reviewer PD37 tests + one-PD ID/snapshot/restart probe pass; author schema-ID unit998/HStore928 pass, atomic unit1049/HStore928 + two-Server25 checks pass. These do not negate newer partial-init/live-create findings. Cache description still cites older 4f6ae2b6 on 4e0f2409: 841 unit/850 HStore/41 smoke checks; do not transfer. Prior e588bace1 CAS/drop-marker/listing fixes superseded 7f473df5 3.5; prior 4dbdc721 reservation design replaced; daa8cf4b/e868e403 rebases historical. Historical PD 6c778824 five workflows/HStore merge ad0b26f7 Core910/API162 pass,48/50skip; revision 3be392a6 four planning failures/License pass. Current independent scope is source/discussion review, no new runtime score or multi-PD acceptance.

• Toolchain (Oct12 02:30 UTC): master 039153cd→2692b6bf; push module and all six push workflows pass; scheduled upstream/RC open. 🔗 #806 1201b70a→ddad1877 merged02:06; sevenPR workflows/35checks pass, fresh matched SAN/TLS fixtures, production verification retained. 🔗 #807 406cd627→f49b7991 merged02:07; threeworkflows pass,9checks pass/10skip; Go propertyless edge labels/status guidance. 🔗 #808 4ea17570→2692b6bf merged02:16; sixworkflows pass,21checks pass/6skip/1neutral; removes raw argv<3 gate, retains mapping validation, author native2v/1e probe does not qualify originalK12/large loads. All three exact-head Pengzna approvals, unscored. 🔗 #805 unchanged 1b962641, open/mergeable but blocked/no reviews; historical sixworkflows/labeler/Codecov pass. Module38082546289:1.7/candidate Client/Loader/Hubble/Tools/Go/Spark pass; candidate Client118unit/382API(3skip)/104func, Loader134/99/104/5/6, Hubble623/1079, nofail/error. SDK/Server 68855199 differs from staged 6df8dd90; SET assertion normalizes duplicates, no score/gate. Historical master 039153cd Module38043085944:Loader100/99/104/5/6,Hubble614/1032 pass,Client skipped. Historical compatibility38109073929 at 36bc1c64:Client77unit/376API(3skip),Func102 six no-SAN HTTPS errors; Loader/Hubble units/Tools skipped. Delete schema in async should set schema(QUEUED) status DELETING #806 delivers fixture repair; matching packaged/RC acceptance remains.

  • 🔗 #794 delivered: final d52843b9 → 38fcddc6, 13:54:30 UTC; 🔗 Exact-head approval #794, seven successful workflows including Module 19/19 jobs, README thread resolved. Unsigned local-SDK prevalidation stays bound to 48b82044, not final/merged head. Remote staging/signing/RC remains open.
  • 🔗 #796 delivered: final f66537b0 → c2e6ad37, 16:40:30 UTC; 🔗 imbajin approval #796 at 16:40:20 at final head. Seven workflows and both Codecov pass; constructor/reset tests cover [Bug] HugeClientBuilder.configTimeout(0) applies SECOND conversion twice and sets default timeout to 20000 seconds hugegraph-toolchain#795's 20,000-ms default-timeout repair.
  • 🔗 #797 delivered: final 7af42d2c → e6699221, 2026-10-09 19:48:40 UTC; 🔗 Toolchain approval #797. Offline parsing creates no Server clients and writes no progress on close. Both Loader CI baselines pass 71 unit/98 FILE/103 HDFS/4 JDBC/6 Kafka cases. Aggregate rejects stale inputs after merge; merge-head push passes. Author Computer CSV tests do not establish published-Maven/Computer-wide/RC acceptance.
  • 🔗 #786 delivered: final 5255fd86, merge 2c943c68, 06:50:11 UTC; seven exact-head workflows pass and 🔗 ASF approval #786 at final head. Preliminary review closed: CDC password pre-submit validation missing, 1/8 threads unresolved. Distributed/recovery/RC open.
  • 🔗 #710 c6a2b0d2 still conflicts; lifecycle/regression and fresh review remain. chore(ci): reduce SDK duplication and extend image checks hugegraph-toolchain#792 stays advisory. Scope/waivers unchanged.

• Doc deployment recovery: 🔗 #514 dbb653fd→6181c870 merged Oct11 19:51; its push failed OINK cold-graph parsing/publish skipped. 🔗 #515 6beea13c→master ec9ae7b5 merged22:05 after approval/PR CI; quiet strict graph plus empty-cache regression. Master publish and all build/deploy jobs succeed: deployment recovered, no RC closure. Open 🔗 #516 b5f27d16 / 🔗 #517 3e4fa7c6 / 🔗 #518 65e9719f: siteCI passes (4checks pass/1publish skip each), no ASF review/score; pair with Go schema, Server startup and Loader argument repairs respectively. Merge/operational acceptance remains open.

• Documentation (Oct 11; per-head evidence): 🔗 #509 e930212c: EN/CN quickstart/Docker fixes: Java-reaching launches, orphan-volume removal, dump liveness slack, quote/%, direct-logs/PID caveats. 🔗 Author replies #509 resolve all 11 threads; site/visual green, publish skipped. 🔗 Nonblocking review #509 requests targeted orphan-volume removal or an explicit warning that docker volume prune affects all unused anonymous local volumes; no approval. 🔗 #3258 delivered; Server README 27b27cef is after merged-final d3db8e73, absent from ASF master: orphan-volume/preflight prose undelivered. Head review/operational RC open. 🔗 #512 82592175 repairs 🔗 Doc archive coverage #512, 🔗 Doc GPG-loop exit #512 and 🔗 Doc origin keys #512; 3/3 resolved. Four core archives; present AI/Computer sources checked for integrity/content/license, Computer builds; no runtime proof. Legacy/matching URL-qualified origins accepted, wrong origins rejected; GPG subshell. Site/visual green; 05776cfd approval dismissed, no head review. 🔗 #511 13ecb596: 🔗 Nonblocking head review #511 confirms mappings/namespace/EN/CN; 🔗 Cleanup correction #511: wildcard tars are removed in Server/PD/Store directories; root cleanup targets current revision. Five threads resolved, site green; no source deletion. 🔗 #513 12141c85: non-draft, site green, no review; 🔗 #3303/RC coordination remains. Site green: 🔗 #494 a61747e4, draft 🔗 #498 05437da0, draft 🔗 #508 f8450f03, 🔗 #499 a49a8c31, 🔗 #510 5363a1d8; Retain acceptance and 🔗 #510's recorded 1/10 remain. 🔗 #503 bf47acff (previous c87d2497) repairs EN/CN complete-PRIMARY_KEY range rejection and parent-index visibility wording; all six threads resolved, no current-head review, CI still awaits approval; paired 🔗 #3243/publication acceptance remains.

• Merge policy: earlier branch snapshot required Server check-license + Server memory tests, Toolchain check-license-header for non-admins; Toolchain rulesets empty. Admin/review/bypass protections incompletely verified (403). 🔗 #791 enabled isolated-Maven flatten regression. Preserve module/integration/RC evidence, current-run freshness, no cross-run success reuse or PR-artifact auto-retry, guarded push retry. 🔗 #787 🔗 Toolchain nonblocking job-wide OIDC concern #787 establishes neither abuse nor a waiver.

• AI (Oct 11 02:33 UTC): #373 gaps at main 8a7c186c: property mismatch drops vertices; unresolved endpoints pass unchanged, no fix/regression. Retain GraphRAG/Text2Gremlin/extraction/chunking/ID/schema, duplicate execution/credentials, GraphMCP/Skills installation, write-expiry/replay/restart/disabled-operation/single-SQLite-writer acceptance. 🔗 #378 closed unmerged; AI 我想问一下,features 里面介绍的 与Hadoop、Spark GraphX等大数据系统集成，支持Bulk Load操作 怎么实现的 #91 open. Source/TestPyPI/Ask AI/Faiss prove no publication/live Server/provider/browser/CAPTCHA acceptance.

  • AI delivery: 🔗 #379 47373ecd→7729a1e0 merged 04:50 UTC; 🔗 #381 bee97681→8a7c186c merged 08:22, both approved/six workflows green. Main 8a7c186c: five green push workflows; main archive/client CI verifies archive installation on Python 3.10/3.11 and service tests against 1.7.0/latest, not immutable RCs. PR archive CI builds/syncs all workspace packages and checks dependencies; import probes were replaced. ML stays excluded at 1.7.0; MCP/Vermeer independently versioned. [Bug] load_into_graph drops the whole vertex when one property value mismatches its declared type, then edges fail with a cryptic "Invalid vertex id" hugegraph-ai#373 and staging/PD-HStore auth/RC acceptance remain. Ontogeny 🔗 #380 remains a conflicting separate proposal at 50103fae, with its own CI green but no current-head approval; it adds no urgent 1.8 scope or release gate.

• Computer (Oct 11; delivery + new proposal): 🔗 #363 Java 17/1.8/runtime repairs delivered. 🔗 Archive legal fix #364 merged 09:38:20 UTC, f7fda23d→master 35e29491, exact-head approval/three green PR workflows. Native archive LICENSE/NOTICE/license-directory guard and both 1.7.0/latest integration/unit jobs pass; master Computer CI and license checks also pass. Client 1.8 staging resolution works. Archive exclusion is fixed; immutable source/binary/SDK provenance, signatures and RC acceptance remain. 🔗 Sender/lifecycle #357 merged Oct 11 15:02 UTC: afabe1d5 → 413f95fa, 🔗 head approval #357, 32 resolved threads. Historical 8.6/10 at 8492fd43. Computer CI passes 4 integration/602 unit per 1.7.0/latest leg (18 sender), license/CodeQL/coverage green. Delivery confirmed; same-RC acceptance remains open.

• Release (2026-10-11 02:33 UTC): Publisher 6d1cff04 → df23abf3: POM-origin repair/four green builds delivered. Historical Toolchain e6699221/staging 1160/1161 close-only. 9c2f4487 signed Maven receipts: Server 6df8dd90 → 1162, closed Oct 10 11:00:40 UTC; Toolchain 039153cd, five SDK JAR/POM pairs from 1162 → 1163, closed Oct 10 11:12:44 UTC. Signing/uploads ran, product tests/SVN/release-script uploads skipped; no independent signature/promotion/signed-SVN RC proof, later Server merges excluded. 🔗 #512 awaits head review/signed RCs. Freeze/rebuild/restage Server/PD → Client → Hubble/Loader and Python SDK → MCP/AI. Qualify matching RCs: manual security/LICENSE/NOTICE, standalone/minimal-HStore/HA, amd64/arm64/native, bilingual migration/recovery/API/browser/downstream; signatures/SHA512/vote/publish. SeaTunnel 3.0.0/plugins pinned; RISC-V RocksDB/head-specific; reproduce performance, bot upgrades excluded.

• Word/license disposition: merged 🔗 #3295 makes Word 1.3 provided/external optional and unbundles Word plus six transitives; absent selection raises ConfigException with cause. 🔗 Stale release LICENSE/licenses declarations #3295 for the six removed transitives remain a nonblocking finding. Package/manual license review and published POM verification remain; removal is implemented, not an outstanding scope choice.

• Linux prevalidation: 38070154017, Oct10: validator 82592175, Server 6df8dd90, Toolchain 039153cd;33tests/four unsigned packages pass source/header/version/SHA512 and Server/Gremlin/Client/Loader/Tools/Hubble/cleanup checks. Manual366Server/1028Toolchain declarations and five license/large-file notes remain. Author five-coordinate1162/Computer 35e29491/Client1163 checks separate. Historical 37903047266: 05776cfd/Server 68855199/Toolchain 48b82044. No six-package signed-SVN/download/staging-origin/manual-license RC proof.

• Container launcher 🔗 #3311: 56b8f6e7 merged Oct12 02:38; historical independent 8.8/10: two review perspectives,17 cloud process cases/config suite pass; base/old-launcher/old-partition negative controls fail correctly. No new blocker found; pre-merge five workflows pass; Codecov project fails52.26%vs52.29%,patch passes. Nonblocking: timeout TERM assertion; successful-partition final-curl cancellation test. Real JVM/Docker PID1/OOM/Kubernetes acceptance open; prior coverage failure is historical, not an open merge decision.
• Store scan recovery 🔗 #3313: ad0d63d0 source: UNAVAILABLE-only expected-node eviction; preserves errors/replacement nodes; regressions added. Author single-node scan recovery passes after first timeout. Five workflows pass; Codecov/project fails; no ASF review/independent runtime/score; PD-only/multi-node/other streams open.

Scores /10 bind SHAs, not priority/approval; ≥8.5 waives no CI/RC/regression. Re-review new heads; closed scores historical.

Oct 10 independent scores (not ASF approvals): 🔗 #3299 8.4 at 34cc360c; 🔗 #2994 historical 8.2 at 5b14533c; 🔗 #3192 8.0 at 0be7fde7; 🔗 #3221 7.2 at 3932be60; 🔗 #3243 6.5 at 7f5a9173; 🔗 #3308 historical 8.5 at 9918ff25, prior-head hold for three lifecycle regressions; current dc994abb source-supported repairs, unscored (historical 7.5 at 78390802). Test-only 🔗 #3309: historical 7.5 at a46e8226; current 03ffdf0b unscored, teardown P2 open; no ASF approval.

Schema ratings are third-party COMMENTED reports, not independent ratings/ASF approvals. Older bindings remain historical; current cache 6/10 is third-party, not ours. PD author 10/10 excluded; Oct 7 16:21 reviews added no score/closure. Original 🔗 #3243/🔗 #2994 bindings retained; Toolchain repairs unscored.

Merged / completed

UTC/2026; final → merge SHA. Acceptance above; preliminary/closed ≠ delivery.

• Historical query score: merged 🔗 #2994, 7.8 at 2cbd5d71, 8.2 at 5b14533c; neither transfers to final 8feec7e1.
• Historical scores: 🔗 #3258 9.0 at 9cf40498, 9.2 at d3db8e73; 🔗 #3291 8.6 at fcdeed82. Doc 🔗 #509/RC acceptance open.
• Server foundations: 🔗 #3218 🔗 accepted Helm operational limits #3218; 🔗 #3261 39a3a8da; 🔗 #3262 8fd9841e; 🔗 #3263 d9abcd43 → final 2ca1f254. Required-check runtime 🔗 #3264; CI 🔗 #3271 8beb78b8, 🔗 #3277 708e0ab7; comments-only 🔗 #3260 662a97d8. Other runtime/data/recovery deliveries appear in the delivery index, including 🔗 #3244/🔗 #3246/🔗 #3257 scheduler/election/redirect/TokenGenerator cleanup.
• Oct 10 lifecycle/integration: 🔗 #3302 08:23:53, 821b16b3 → 0f86e2a0, 🔗 approved #3302, five workflows pass; Codecov/project 41.37% (−0.06 pp) fails. Intel rerun: Core 926/API 180 pass (42/14 skips); supersedes failure, timeout cause unproved. 🔗 #3303 09:49:53, dd0b5603 → 72085aa9, five workflows/all coverage green. 🔗 #3306 09:32:16, 8ad513f9 → 5c6543db, 🔗 approved #3306, five workflows green, Codecov/patch 1.96% fails. 🔗 #3305 09:58:14, 981d1b10 → fd64f745, 🔗 approved #3305, five workflows/both coverage green. 🔗 #3304/🔗 #3307 evidence above; earlier master 87a06a9b had five green push workflows.
• Oct 9: 🔗 #3293 17:25:28, 2d335c98 → d00efced, exact-head approval/five green PR workflows; Codecov project/patch fail. Word 🔗 #3295 06:52:10, SDK 🔗 #794 13:54:30 and Flink 🔗 #786 06:50:11: final/merge SHAs and approval/CI evidence above.
• Oct 8: 🔗 #3289 15:49:53; 🔗 #3275 15:34:44: final/merge SHAs above, each exact-head approved/five green workflows. 🔗 #3282 08:20:35, 8184f01f → af3c6867, approval/five green workflows; Maven/RC/signature/vote/publication open.
• Oct 7 Foundation/UTF-8: 🔗 #3270 10:15, 704b9807 → 73980751; 🔗 #3281 14:38, 84b9f517 → e62c961e, 🔗 approved #3281, five green workflows (359 Commons + 25 RPC, HStore/Compatibility). Selected Helm/Docker/inventory/TP/Raft skipped; rebuilt consumers unqualified.
• Toolchain chronology: Oct 5 🔗 #775/🔗 #776/🔗 #777/🔗 #778/🔗 #782; Oct 6 🔗 #781 4879ae1f, 🔗 #779 595f7ed0, 🔗 #783 f8db70ea; Oct 7 🔗 #791 551e08a1 → bb5763d2. Oct 8 🔗 #787 08:25, f917937d → cfed323f; 🔗 #784 11:52:29, 8ec4b2f4 → 32afdef7; 🔗 #785 15:46:02, b8678974 → d49fc5f8.
• AI/docs/integrations: Completed lists all deliveries; AI preparation/archive installation and Computer Java 17/archive legal files delivered Oct 10. SeaTunnel integration/docs complete; 3.0.0 released 2026-09-29 (downloads).

Closed and superseded evidence

Historical scores and closed records preserve original text, SHA bindings and sources; current acceptance/decisions above.