[1.8.0] Release TODOs and cross-repository integration checklist #3242

• Server / PD / Store · details below
  • 🔗 #3258 · Oct 11 09:08:35 UTC; d3db8e73 → 4ffd71b1; [Bug] HStore Server image (hugegraph/server) keeps crash diagnostics only inside the container, so a restart on Kubernetes loses them #3256 closed
  • 🔗 #3291 · Oct 11 09:24:57 UTC; fcdeed82 → 000d538a; [Bug] Store IpUtil.getNearestAddress logs ERROR for hostname addresses and can return 127.0.0.1 #3255 closed
  • 🔗 #3301 · merged 2026-10-10 17:34:02 UTC
  • 🔗 #3298 · merged 2026-10-10 10:40:15 UTC
  • 🔗 #3269, 🔗 #3207, 🔗 #3204, 🔗 #3193, 🔗 #3184, 🔗 #3164, 🔗 #3157, 🔗 #3234, 🔗 #3232, 🔗 #3233
• Toolchain / clients · details below
  • 🔗 #799 · Oct 10 08:48:33 UTC; 88841439 → a3ae0ab5; 🔗 Toolchain approved #799
  • 🔗 #800 · Oct 10 08:47:34 UTC; 8ba764d9 → a6684675; 🔗 Toolchain approved #800
  • 🔗 #801 · Oct 10 09:54:44 UTC; d410c4c2 → 25b52064; 🔗 Toolchain approved #801
  • 🔗 #802 · Oct 10 09:55:10 UTC; f6bd598d → 039153cd; 🔗 Toolchain approved #802
  • 🔗 #803 · Oct 10 08:44:28 UTC; b37c8da4 → 0ea7db34; 🔗 Toolchain approved #803
  • 🔗 #804 · Oct 10 08:49:43 UTC; f9893267 → b1baa82f; 🔗 Toolchain approved #804
• AI / docs / integrations · details below
  • 🔗 #374, 🔗 #375, 🔗 #377, 🔗 #501, 🔗 #502, 🔗 #505, 🔗 #506, 🔗 #507
  • SeaTunnel 3.0.0 · released 2026-09-29; integration/docs complete

• P1 · Old PD/Store data, backup/restore/rollback, replica propagation, fatal-state handling and truthful recovery/tasks
• P1 · Hubble retained-PVC reconnect, bounded offline startup, password rotation and native-memory limits
• P1 · Rebuilt UTF-8 consumers + legacy/RC matrix; disposition of reported Loader/Hubble import-safety findings
• P1 · AI/GraphMCP controlled writes/replay/credentials; Python SDK first; SeaTunnel 3.0.0 + matching plugins
• P1 · Freeze scope/owners/SHAs; security/LICENSE/NOTICE, platforms and bilingual upgrade/RC tests; stage/sign/vote/publish
• P2 · Exact-head TinkerPop/downstream RC tests and null-graph regression disposition after merged runtime work

• HStore upgrade (P0, [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id (raft log replay at the upgrade restart, or the first batch write); no migration path for #3153 #3224): Reproduction/workaround unrerun; author seeks maintainer direction, no repair. Qualify old/new rows, snapshots, startup Raft replay, first allocation/write and rollback on every replica. Jar rollback cannot repair mapping; per-replica remapping may hide intervening new-ID rows. Proven unreachable data, not permanent loss. Fix or verify migration/recovery before in-place 1.7 → 1.8 upgrade.
• Query/index: 🔗 #3243 7f5a9173 🔗 throws when filtering removes the sole hidden/deleting indexed candidate #3243, without fresh runtime reproduction. 🔗 #3243/🔗 #2994: nested/negative/count predicates; local/optional/coalesce/union/choose/map/flatMap/math; composite-index/deletion races; ordered partitions/scans, limits/offsets/pages/cursors, duplicates/missing rows. Upgrade all Stores before ordered-scan protocol; reject mixed versions. Retain Track HStore core-test exclusions and property codec mismatch #3090 codec/lifecycle exclusions/historical scans; 🔗 #503/🔗 #498 must match EN/CN PRIMARY_KEY/parent-index/schema visibility.
• Schema replacement: 🔗 #3237 closed; five workstreams remain ASF PR pending (Oct 11 08:34 UTC). PD: leader-ABA ID-counter rollback/failed snapshots. Schema revision: no new increment blocker; five auth/graphspace tests pass, live HStore truncate untested. Crash/drop redesign 4dbdc721 → 7f473df5: atomic CREATE/COMMIT_CREATE/DROP/ADOPT and request-ID replay replace owner tokens/reservation checks; author tests only. Third-party 3.5/10 at 7f473df5: reported CREATING graph-space list/profile 404s; unconditional schema saves/post-DROP clear–recreate data-loss race remain; kv.proto docs need repair. Historical 4dbdc721: replay/reservation/publication repaired; takeover/lost-owner findings superseded. Watch/ACK daa8cf4b and cache e868e403 rebased for CREATING/ADOPT; Revalidate old findings: stale GET/scan refill behind ACK, predecessor sync, old-incarnation disabling, narrowed partial reads, cache mutation before failed commit and missing crash/drop replay correction. Freeze mixed-version DDL and qualify PD-first rollout, cache/refill/incarnation, rollback, API/task/Cypher and stream recovery.
• Startup/auth: 🔗 #3192 needs mounted YAML/auth/image/config tests. 🔗 #3253 e272e27c conflict/CI/score below. 🔗 Review #3253: PD/Store properties after -jar, regex PID, unchecked crontab. Retain 🔗 path splitting #3253, 🔗 legacy cron removal #3253, 🔗 canonicalization/bin/CI/graph-path/monitor findings #3253 (nocreate 13 pass/1 fail; cron 106 assertions), path/PID/plugin/restart/monitor/cluster/RC qualification. Server 5039e5b6 rejects explicit G1 before JVM; omission uses G1. Project/launcher 🔗 #3305 981d1b10 delivered; packaged/authenticated HStore acceptance below.
• Basic credentials ([Bug] Basic auth decodes the credential as ASCII and splits on every colon: a non-ASCII password answers 401, a password with ':' answers 400 #3284 / 🔗 #3290): Historical 577f4c3b 🔗 review #3290: REST 200/Cypher 500 for standard Base64 +//; source confirms URL-safe decoder. 7e048d1b repairs the decoder; current CI/qualification below. Create/update validation, client-default charset and published-image Helm guards remain. Compatibility-first policy: reject controls in both fields/username colons; allow password colons and ordinary spaces/commas. Align create/update/login; reject unsupported values before saving. Broader ASCII-only policy undecided, no new gate. Separate from UTF-8 🔗 #3281; [Feature] Let the Server take the initial admin password without a properties-file round trip #3285/[Feature] Server image: map server.urls_to_pd and server.deploy_in_k8s from the environment, and stop editing conf files in place #3286 exclude 1.8.
• Cypher: 🔗 #3241→🔗 #3259 retains error/parser contracts; Hubble/RC open. 🔗 #3289 8d06ad3b→5039e5b6 delivered, approved/paired CI green. 🔗 Author tests #3289: 17 Map fields via $props.field persist; 17 top-level parameters exceed default cap 16; CREATE (n:label $props) assigns no PK. 🔗 #499 a49a8c31: author EN/CN REST examples at 5039e5b6, PRIMARY_KEY rejection/AUTOMATIC success, no independent consumer/RC acceptance. 🔗 Doc Review #499: credential/parser, PK example, IndexLabel/SeaTunnel links, rounding/CN caveats; 🔗 Doc new review #499: null-binding no-row claim only for equality predicates. Retain ID-strategy-before-schema, release/write-schema, SeaTunnel migration E2E; advanced Cypher/HStore/Bolt/cross-request transactions/performance unqualified.
• Store hostname (🔗 #3291): Merged; fcdeed82 retains hostnames/bound addresses, ASCII-digit IPv4 parsing. Five workflows pass; 24 checks pass/8 skip; Codecov/project 39.77% (−0.69 pp) fails, patch passes. Five unresolved threads include repaired/duplicate findings. 🔗 Exact-head approval #3291; network tests may skip. PD–Raft/network/RC acceptance open.
• HTTPS identity: 🔗 #3307 merged 11:16:53 UTC, 09f067a8 → 87a06a9b, 🔗 exact-head approved #3307, five workflows/31 checks pass, 3 skip. Restores default hostname verification; adds HTTPS identity/trust tests. Author regression/control unrerun; Packaged/downstream/RC open.
• Recovery: [Bug] HStore accepts writes with the default serializer=text and then fails every read with BufferUnderflowException; the backend should require serializer=binary #3225 serializer=binary before writes; text-serializer refusal offered, undelivered; old PD/Store data, init_store.enabled, credentials/prefixes, data/schema retention, metrics, backup/restore/rollback, empty-volume replacement/old-ID retirement and PD/DNS recovery. Merged 🔗 #3265 synthetic SST/WAL/single-node tests do not qualify upgrades/failover.
• Java/TP: Java 17 services/build; Commons/RPC Java 11 bytecode. 🔗 #3263 final 2ca1f254: TP 3.8.1/Groovy 4.0.25, Gremlin Groovy default, GraphBinary Schema/Blob, HTTP V1 Tree, caller-owned GValue, String-ID/count/DATE repairs. Final Memory/RocksDB/HStore skipped TP. Qualify API/Structure/Process on three backends/simple/multi-cluster, downstream Client/Toolchain/Computer/library, mounted Gremlin/YAML, serialization/old-data RC. PD ~12-GiB/full-swap shutdown at 0d495f88 proves neither OOM kill nor cause. 🔗 Controller-discovery finding withdrawn #3261; GraphId scaling does not close [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id (raft log replay at the upgrade restart, or the first batch write); no migration path for #3153 #3224. 🔗 #508/old 🔗 #3117 remain separate.
• Lifecycle split: 🔗 #3302/🔗 #3303/🔗 #3304 delivered. 🔗 #3304 final a40f64d9 → ed3a2dfd, merged 10:33:01 UTC, 🔗 exact-head approved #3304, five workflows/32 checks pass, 3 skip. 152-test Store evidence binds earlier 55043114. Qualify native ownership, failed cleanup, authenticated scan/TTL, timeout/PID, restart/multi-replica/matching RC; coordinate 🔗 Doc queue docs #513. No transferred score/waiver/benchmark claim.
• Topling: 🔗 #3275 96f99de7 → 134300ab delivered; 6.8/10 stays at bf666f85. 🔗 #3298 ec4d68d7 merged 10:40:15: serializes close/reset, skips closed sessions. 🔗 #3299 34cc360c: owning-DB handles/discard of clearing thread’s batch; 🔗 fixture integration #3299 resolved. Author: 28 standard-JNI tests rebased onto 87a06a9b, not Topling qualification/independent rerun; unsafe-JNI/exit-134 probes inadequate. Retain cold-Gremlin/live-base identity disposition/🔗 #3293 restore history. Marker-parent sync retains retry state; nested data/WAL rejection withdrawn. Retain quiesced retry, hard-link/old pending-state restrictions, standard-provider behavior and copied-data/WAL power-loss durability distinct. Qualify JNI/image/legal, shutdown/restart/migration/rollback, persistent/empty WAL, cross-UID, HA/old-format RC; [Bug] HStore: data written by 1.7.0 under the missing graph id 0xFFFE becomes unreachable once master allocates a real graph id (raft log replay at the upgrade restart, or the first batch write); no migration path for #3153 #3224 unfixed. 🔗 #510 needs per-graph data/WAL roots; inclusion undecided.
• Foundation/diagnostics: 🔗 #3270 retains source-only null-graph edge-deserialization and namespace/rebuild/long-text/OLAP qualification. 🔗 #3258 d3db8e73 repairs quote/% fallback precedence in JAVA_TOOL_OPTIONS, adds real-JVM option/opt-out tests and documents same-launch PID-reuse limits (🔗 reply #3258). CI/review below; 🔗 #3253/🔗 #509 coordination and actual OOM/volume/RC retention open. Old RISC-V/macOS failures prove no cause/waiver.
• Foundation implementation guide: 🔗 #3307 delivers shared/query-serializer import, process-wide namespace/clean-output corrections and HTTPS identity. 🔗 Doc apache/hugegraph-doc#511/downstream migration/RC acceptance remain separate; preliminary comments add no approval/score.

• Deployment: [Bug] A Server that starts while PD is briefly unreachable serves REST but loses its Gremlin binding for the life of the process #3228 highest priority. Verify data/index retention across joint PD/Server rollouts/repeated rotations on every Server and actual Service. Test Hubble login/list/query/logout separately from Server hooks; late retries must not hide binding failures. Bound offline allocator fallback, retaining NetworkPolicy; observed stall did not prove timeout expiry.
• Readiness/recovery: 🔗 #3221 3932be60 five workflows green; 🔗 blocking review #3221: source-confirmed ignored metadata-graph failures never enter failedGraphs. 🔗 Minor findings #3221: stale local-failure entries/Javadocs; 🔗 remote failures may be labeled embedded #3221. Round-8 HBase scope/docs fixes do not close these; k3s/default-budget acceptance unrerun. HStore ping is not Raft/data proof. Distinguish fatal PD/transient quorum loss; never delete LOCK. Retain manual restore, data-before-Up/truthful tasks, replica password caches, native/JVM limits, retained-PVC reconnect.
• Helm docs 494: 🔗 Doc voters #494/🔗 Doc shrink #494 remain blocking source/render findings, not live-tested: one Leader/only Followers; minStoreCount=replicas can prevent Up-Store retirement indefinitely. Retain EN/CN growth/PDB/PD-roll/balance, additive NetworkPolicy, Secret/password/auth-cache rollout and 30-minute Tombstone corrections. Non-root official images stay low priority.
• Compatibility matrix: tools ↔ Server 1.7; Hubble ↔ standalone 1.5; measure other tools ↔ 1.5 and original Client 1.5/1.7 ↔ candidate, with JVM/route limits. REST/Gremlin/PD, non-default GraphSpace, unauthorized rejection, timeout units, concurrent imports, FILE/HDFS/JDBC/Kafka and old plain/ZIP local/HDFS restore remain. Retain Client truststore/reflection fixtures. Earlier reviews add no deliveries.
• Hubble/SDK/images: 🔗 #781 preserves backup-first/read-only H2 schema refusal; migration outside adaptation. 🔗 #784/🔗 #787 deliver network-dependent immutable SDK/JAR/native checks and UTF-8/consumer pins. Browser/package/public-coordinate/RC, metadata/restart, EN/CN permissions, anonymous/login, graph/schema/query/import and separate Server/PD auth remain; 🔗 #785 repaired 🔗 #784 trigger thread.
• Toolchain SDK/artifacts: 🔗 #794 final d52843b9 merged as 38fcddc6; SDK 1.8, pinned Server 68855199, distinct org.apache.hugegraph:hugegraph-toolchain-dist:1.8.0 aggregate and uncached Go CI delivered. 🔗 #787 archive fallback and Go/Python selection P2 disposition remains. Remote staging, published POMs, isolated consumers and matching RC remain paired with 🔗 #512.
• Distributed audit: Server 4c162f53/Toolchain 5622850b HStore clearGraph/PD schema, OLAP ALL-read, Project decoding and SDK HTTPS findings need current-RC disposition. HBase outside bounded 🔗 #783/🔗 #785; readback if retained. 🔗 #710 null guards do not establish fetch/reset/close cause; resolve conflicts, limit unrelated fixtures.
• Optional engines: 🔗 #785 rejects non-UTF-8 FILE/HDFS CSV/JSON/TEXT before Spark; charset/trigger/legacy-CDC threads resolved. Retain CSV/IDs, zero-write dry-run, nonzero CLI errors, extra JARs, serialization/routing and header checks; unsupported resume/standalone-cluster modes rejected, basename collisions rely on Spark. 🔗 #786 rejects identity-changing UPDATE before buffers/writes; same-ID UPDATE and READ/CREATE/DELETE work, DELETE+CREATE stays non-atomic. #793 retains atomic migration/UNIQUE/incident-edge/compensation. Optional inclusion undecided. Driver/executor/JM/TM, YARN, CDC/recovery, duplicates/missing rows, TLS/license and RC acceptance remain, with Spark-HBase/Flink-edge/HStore limits. Ordinary Loader stays independent.
• Core live/import acceptance: Author report: 317/771 executed (237 success/80 failed), Server/SDK 5039e5b6 + Toolchain fc89ada9 historical: six-environment 10k/20k imports/restarts passed, but Client/HStore, cross-entry reads, Project/private spaces, graph-mode ownership, date/exit/progress/GRAPH and launcher findings need disposition. Same-host/SIGTERM tests do not prove host-failure/exactly-once safety; Merged 🔗 #799–🔗 #804 leave authenticated Go, launcher/date/failure replay, corrupt restore, native GRAPH CLI and RC qualification open. Checkpoint/false-success/Hubble cleanup remain; Loader deferral unchanged. 🔗 #805 newly reports excluded pre-existing LONG/numeric-ID conversion and network-retry defects with source support at 039153cd + SDK 68855199; BLOB conversion returns null, which Client rejects rather than proving stored-null data loss. Author update (Oct 11 08:23): kind+Helm 1+1+1/3+3+3, actual PD/Raft replicas, in-cluster Loader 1,000 vertices/2,000 edges, exact per-ID readback after Pod/full-stack restarts; separate from 317/771. Reports chart Secret >1 MiB from unignored image, per-Server stale reads beyond 5s (cache/storage cause unresolved), unbounded 133s jemalloc download, fixed Loader checkpoint/failure paths. SHAs/raw receipts absent; no established data loss/new gate.
• Bounded SDK/Server findings: Author report, Server/SDK 5039e5b6 + Toolchain fc89ada9: Project ArrayList→Set cast/missing IndexLabel exceptions; dependent cleanup adds no defect. HStore OLAP clear returns 50/expected 0. Anonymous HStore3 cross-entry stale reads and RocksDB/HStore1-auth Hubble observer authorization failures ; HStore3-auth bounded reads pass. Authenticated deletion lacks independent per-ID verification; no cache/storage root cause established. Strict JDK rejects a no-SAN certificate accepted by HugeClient; functional HTTPS is not identity acceptance. POST500 withdrawn: POST201, unencoded GET500, encoded GET/DELETE pass. 🔗 #3305 981d1b10 and 🔗 #3306 8ad513f9 are now delivered (ledger). The former adds Project JSON, G1/option precedence and matching help/docs; the latter includes rollback-entry clearing, real-executor regressions and bounded bad-key diagnostics. Quiesce affected OLAP writes through cleanup; there is no concurrent-writer guarantee. CI in ledger; packaged/authenticated HStore/RC acceptance remains. Reported FILE suites: RocksDB two pass/HStore four fail (588 tests, 36 failures/192 errors); Client Func102 has one auth-interface error. 🔗 #3307 delivers the TLS identity repair, packaged/downstream acceptance open.
• Toolchain repairs (10:06 UTC): 🔗 #799–🔗 #804 merged, exact-head MrJs133 approvals; Delivered 🔗 #801 d410c4c2 and 🔗 #802 f6bd598d each have six successful PR workflows, both Codecov green, and both Loader/Hubble baselines passing. #801 candidate Loader passes 96 unit/99 FILE/104 HDFS/4 JDBC/6 Kafka; #802 passes 79/98/103/5/6, all zero failures/errors/skips. READ_LIMIT success/error precedence and configured-zone DATE/local TIMESTAMP repairs are delivered; INT96 retains JVM-default semantics. 🔗 #804 provides protobuf 3.25.9/ordinary Parquet dependencies; prior 3.22.3/ECR failures are historical. Its author PD/GraphSource API import still does not establish native GRAPH CLI or RC qualification. 🔗 #798 closed unmerged.
• CI/image follow-up: Toolchain #792 is advisory and separate from 🔗 #787: measure same-run SDK/provenance-cache savings; validate the final Loader image and example Compose with a tiny import/readback. It adds no release gate.

Snapshot: 2026-10-11 08:30–08:35 UTC; Unchanged entries keep prior timestamps. SHA-bound CI/reviews never imply live/signed-RC acceptance. Running CI provisional; historical findings ≠ current defects/waivers.

• Other open Server PRs (Oct 11 08:34 UTC): 🔗 #3243 7f5a9173, 🔗 #3192 0be7fde7, 🔗 #3241 ed8344d1, draft 🔗 #3259 a2ac2be8: six green workflows each, only 🔗 #3243 non-conflicting. 🔗 #3192: new nonblocking YAML-parser simplification review, no new approval. Conflicting 🔗 #3253 e272e27c: four workflows pass; Main foreground tests fail (canonicalize_dir: command not found, SIGINT expected 130/got 1), Codecov/project fails; no fixture repair inferred. 🔗 #2994 8feec7e1 (Oct 11 09:49 UTC): empty retry; five workflows/Codecov green, 32 checks pass/3 skip. Intel/HBase: each Core 968/API 180, zero failures/errors (42/14 and 54/13 skips). Historical 5b14533c: four workflows/Codecov pass; JaCoCo HTTP 504 after two 968-test Core passes. Its 🔗 nonblocking review #2994 retains wrappers/🔗 analyzer reuse #2994; no current-head review/score. 🔗 #3221 3932be60: five workflows/31 checks pass, 3 skip; readiness blockers above. Draft 🔗 #3117 e33f7545 conflicts, no PR runs. 🔗 #3134 closure below. CI authorized: 🔗 #3253/🔗 #3290/🔗 #3291; findings/RC open.

• Delivered Server heads: 🔗 #3295 83e1284a → 68855199, merged 06:52:10 UTC, 🔗 approved #3295, five PR workflows/36 checks pass. Merge/master Main: HStore TTL expiry, 922 tests/1 error/53 skips; API/Raft/TP skipped, other four push workflows pass. No proven cause/flake waiver.

• Version/publication: retain Hubble tag fallback, long-TP/consumer/migration/rollback/immutable-RC acceptance and open [CI] Restore comparable dependency-review baseline snapshots #3283.

• Module tests 🔗 #3309 (Oct 11 08:34 UTC): a46e8226 open/mergeable/blocked. 🔗 Review #3309 adds a 🔗 unbounded mock-loop #3309; neither resolves the two source P2s below. Four workflows pass: Main and Memory; Compatibility fails. Checks: 29 pass/2 fail/3 skip; both Codecov pass. Intel fails MultiNodeShortestPathApiTest.testPost (HTTP 400/InterruptedException, expected 200); HBase passes API 180/0/0/13, then JaCoCo download returns HTTP 504. Causes/PR link unproved. Independent 7.5/10: two P2s: ordinary-suite gigabyte allocations/no release; CF-lock failure-path teardown deadlock. 🔗 Published P2 review #3309: no local reproducer. Codecov 41.93% (+0.36 pp), changed denominators, no controlled gain.

• Separate production triage from 🔗 #3309: base/head production blobs match. Source-only: ID escape-boundary ambiguity, typed-config checker bypass, and scan-constructor iterator cleanup merit separate P2 triage; leading-0x80 varint guard is P3 without demonstrated higher impact. Pre-existing, unexecuted independently; excluded from test-PR score, no new gate.

• Diagnostics 🔗 #3258 (Oct 11): d3db8e73 merged; five workflows/33 checks pass, 2 skip. RISC-V: first start/create/dump, second start, persistence/native smoke pass. Real-JVM fallback/opt-out supersedes old-head readiness limits. 9e9ef772 restart failure, Intel NPE and ARM ConcurrentModification have no proved cause/waiver. 🔗 Exact-head approval #3258 reports 25 unique launch directories, real-JVM dump/override probes, 30 resolved threads; no new defect/score. Odd-path OOM/volume retention/RC open.

• Server repair evidence (20:30 UTC): 🔗 #3298 ec4d68d7 delivered with 🔗 8.6/10 approval #3298; five workflows/28 checks pass, 4 skip. 🔗 #3299 34cc360c: five workflows pass, 27 checks success/4 skip/2 Codecov failures; actual Topling remains unqualified. 🔗 #3301 f3ddc77c merged 17:34:02 as 36bc1c64 after 🔗 exact-head 9.0/10 approval #3301; five workflows/32 checks pass, 3 skip. Constructor/first-Gremlin 2/2, bootstrap 2/2 and InitStore 1/1 passed. Master 36bc1c64: five green push workflows; packaged/downstream/RC acceptance remains.

• Historical basic-auth 🔗 #3290 577f4c3b (20:30 UTC): four workflows pass; Main/HStore API fails testBasicAuthWithColonPassword in createAuth: expected 201/got 403 (not GraphSpace member); 176 tests/1 failure/0 errors/51 skips. Setup failure did not exercise the 🔗 standard-Base64/Cypher blocker #3290. Codecov/project fails, patch passes. 🔗 Supplemental 7.0/10 #3290 binds this head; live probes are reviewer evidence. No approval; this score/findings do not transfer to the new head.

• Basic-auth current 🔗 #3290 (Oct 11 08:34 UTC): 7e048d1b uses standard Base64, adds +///wrong-password cases and skips standalone auth setup on HStore (🔗 Author #3290). Delta review: no new defect/score; historical 7.0 at 577f4c3b. Main/Memory/CodeQL/License attempt 2 pass; Compatibility fails Intel API: MultiNodeShortestPathApiTest.testPost, expected 200/got 400 BackendException/InterruptedException; 182 tests/1 failure/0 errors/14 skips. Cause/PR link unproved. Checks 29 pass/1 fail/3 skip, both Codecov pass. HStore auth regression is skipped, a coverage gap. No ASF approval; create/update/login/packaged RC open.

• Graph deletion 🔗 #3308 (Oct 11 08:34 UTC): 9918ff25 open/mergeable/blocked; six workflows pass, Main/Compatibility attempt 2 included; 29 checks pass/4 skip, both Codecov statuses pass. Failed-delete/NEW-task reservation repaired; Memory merge f07a2ee: 1048 unit/927 Core/180 API pass (8/98/14 skips). Earlier 0a77e419 fixture/78390802 stranded-task findings superseded; attempt-1 SIGTERM/Intel failures historical/unexplained. 🔗 Blocking review #3308: COMMENTED, blocking: local drop bypasses task.wait_timeout (reviewer probe: 1720 ms on base, immediate refusal on head), ordinary distributed close durably cancels locally reserved queued tasks; failed reload leaves detached graphs unavailable. All three source-verified; probe unrerun. Hold: historical 8.5 is superseded as readiness, no replacement score. Uncertain cancellation publication needs explicit cancel/close/drop retry, not automatic recovery. Remaining gate unverified (protection 403/rulesets empty). No approval/RC acceptance.

• Schema implementation evidence (Oct 11 08:34 UTC; ASF PRs pending): PD reads/elections 6c778824: five PR workflows pass; historical HStore Core/API merge ad0b26f7 910/162 passes, 48/50 skips, Raft/TP skipped. Schema revision 3be392a6: four workflows fail exact-parent planning, License passes. New crash/drop 7f473df5, Watch/ACK daa8cf4b, cache e868e403: queued dynamic review jobs only, no product-test workflow/approval. Third-party crash/drop review reports focused tests/two-Server list/profile probes; stack/race/smoke tests author-reported. Bot suggestions unverified; no new gate. Old scores/findings do not transfer; ASF PR pending.

• Toolchain (2026-10-11 08:30 UTC): master remains 039153cd; six exact-head push workflows pass. Module 38043085944 passes Loader/Hubble baselines; Client skipped. Candidate Loader: 100 unit/99 FILE/104 HDFS/5 JDBC/6 Kafka tests; candidate Hubble: 614 backend and 1,032 frontend tests. 🔗 Test coverage #805 1b962641 open/non-draft/conflict-free, no review; six PR workflows plus labeler both Codecov pass. Module 38082546289 passes both 1.7/candidate Client, Loader, Hubble, Tools, Go and Spark Connector jobs. Candidate Client: 118 unit/382 API (3 skipped)/104 functional; Loader: 134/99/104/5/6; Hubble: 623 backend/1,079 frontend, 0 failures/errors. CI uses SDK/Server 68855199, distinct from staged SDK 6df8dd90; source CI ≠ signed RC. Static test review: minor SET assertion normalizes away duplicates; comment unpublished, no score/gate. Authenticated core/artifact acceptance remains; optional engines/CI advisory separate. Scheduled compatibility, Oct 11 03:51 UTC, SDK/Server 36bc1c64: Client unit 77 pass, API 376/3 skips pass; Func102 has six HTTPS hostname-verification errors (127.0.0.1, no SAN), so Loader/Hubble units and Tools compatibility were skipped. SDK install/core compile/Server startup pass. Repair TLS fixture; retain strict identity and rerun exact-source compatibility. No dependency-download/RC conclusion.

  • 🔗 #794 delivered: final d52843b9 → 38fcddc6, 13:54:30 UTC; 🔗 Exact-head approval #794, seven successful workflows including Module 19/19 jobs, README thread resolved. Unsigned local-SDK prevalidation stays bound to 48b82044, not final/merged head. Remote staging/signing/RC remains open.
  • 🔗 #796 delivered: final f66537b0 → c2e6ad37, 16:40:30 UTC; 🔗 imbajin approval #796 at 16:40:20 at final head. Seven workflows and both Codecov pass; constructor/reset tests cover [Bug] HugeClientBuilder.configTimeout(0) applies SECOND conversion twice and sets default timeout to 20000 seconds hugegraph-toolchain#795's 20,000-ms default-timeout repair.
  • 🔗 #797 delivered: final 7af42d2c → e6699221, 2026-10-09 19:48:40 UTC; 🔗 Toolchain approval #797. Offline parsing creates no Server clients and writes no progress on close. Both Loader CI baselines pass 71 unit/98 FILE/103 HDFS/4 JDBC/6 Kafka cases. Aggregate rejects stale inputs after merge; merge-head push passes. Author Computer CSV tests do not establish published-Maven/Computer-wide/RC acceptance.
  • 🔗 #786 delivered: final 5255fd86, merge 2c943c68, 06:50:11 UTC; seven exact-head workflows pass and 🔗 ASF approval #786 at final head. The preliminary Flink review closed with missing CDC password pre-submit validation, 1/8 unresolved threads. Delivery does not close distributed/recovery/RC qualification.
  • 🔗 #710 c6a2b0d2 still conflicts; lifecycle/regression and fresh review remain. chore(ci): reduce SDK duplication and extend image checks hugegraph-toolchain#792 stays advisory. Scope/waivers unchanged.

• Documentation (2026-10-11 02:33 UTC): 🔗 #509 9977486e: PID/crash-log/quote/% repairs: child-JVM opt-out and no default for both-quote paths; site/visual green, publish skipped. New 🔗 01:12 COMMENTED/nonblocking #509 adds a 🔗 Preflight-directory correction #509: only launches passing preflight create a heapdump directory; update EN/CN quickstarts and both Docker-guide statements. Seven of eleven threads remain unresolved, including the superseded path finding and Docker volume/liveness/direct-logs/PID caveats; no approval inferred. 🔗 #512 82592175 repairs 🔗 Doc archive coverage #512, 🔗 Doc GPG-loop exit #512 and 🔗 Doc origin keys #512; 3/3 resolved. Four core archives; present AI/Computer sources checked for integrity/content/license, Computer builds; no runtime proof. Legacy/matching URL-qualified origins accepted, wrong origins rejected; GPG subshell. Site/visual green; 05776cfd approval dismissed, no head review. 🔗 #511 13ecb596: 🔗 Nonblocking head review #511 confirms mappings/namespace/EN/CN; 🔗 Cleanup correction #511: wildcard tars are removed in Server/PD/Store directories; root cleanup targets current revision. Five threads resolved, site green; no source deletion. 🔗 #513 12141c85: non-draft, site green, no review; 🔗 #3303/RC coordination remains. Site green: 🔗 #494 a61747e4, draft 🔗 #498 05437da0, draft 🔗 #508 f8450f03, 🔗 #499 a49a8c31, 🔗 #510 5363a1d8; Retain acceptance and 🔗 #510's recorded 1/10 remain. 🔗 #503 c87d2497 awaits CI approval.

• Merge policy: earlier branch snapshot required Server check-license + Server memory tests, Toolchain check-license-header for non-admins; Toolchain rulesets empty. Admin/review/bypass protections incompletely verified (403). 🔗 #791 enabled isolated-Maven flatten regression. Preserve module/integration/RC evidence, current-run freshness, no cross-run success reuse or PR-artifact auto-retry, guarded push retry. 🔗 #787 🔗 Toolchain nonblocking job-wide OIDC concern #787 establishes neither abuse nor a waiver.

• AI (2026-10-11 02:33 UTC): #373 gaps persist at main 8a7c186c: property mismatch drops whole vertices; unresolved endpoints pass unchanged. No fix/regression delivered. Retain GraphRAG/Text2Gremlin/extraction/chunking/ID/schema, duplicate execution/credential isolation and GraphMCP/Skills installation, write-expiry/replay/restart/disabled-operation/single-SQLite-writer acceptance. 🔗 #378 closed unmerged; [Bug] In rag_web_demo. Unable to get the latest Settings of the configuration file after ui refresh hugegraph-ai#91 open. Source/TestPyPI/Ask AI/Faiss results are not publication or live Server/provider/browser/CAPTCHA acceptance. Six-hour refresh: Support code coverage statistics #373/我想问一下,features 里面介绍的 与Hadoop、Spark GraphX等大数据系统集成，支持Bulk Load操作 怎么实现的 #91 open, no repair.

  • AI delivery: 🔗 #379 47373ecd→7729a1e0 merged 04:50 UTC; 🔗 #381 bee97681→8a7c186c merged 08:22, both exact-head approved/six PR workflows green. Unchanged main 8a7c186c has five green push workflows; main archive/client CI verifies archive installation on Python 3.10/3.11 and service tests against 1.7.0/latest, not immutable RCs. PR archive CI builds/syncs all workspace packages and checks dependencies; import probes were replaced. ML stays excluded at 1.7.0; MCP/Vermeer independently versioned. [Bug] load_into_graph drops the whole vertex when one property value mismatches its declared type, then edges fail with a cryptic "Invalid vertex id" hugegraph-ai#373 and staging/PD-HStore auth/RC acceptance remain. Ontogeny 🔗 #380 remains a conflicting separate proposal at 50103fae, with its own CI green but no current-head approval; it adds no urgent 1.8 scope or release gate.

• Computer (2026-10-11 02:33 UTC): 🔗 #363 Java 17/1.8/runtime repairs delivered. 🔗 Archive legal fix #364 merged 09:38:20 UTC, f7fda23d→master 35e29491, exact-head approval/three green PR workflows. Native archive LICENSE/NOTICE/license-directory guard and both 1.7.0/latest integration/unit jobs pass; master Computer CI and license checks also pass. Client 1.8 staging resolution works. Archive exclusion is fixed; immutable source/binary/SDK provenance, signatures and RC acceptance remain. Six-hour issue/comment/head/CI refresh found no change or new matching-RC receipt.

• Release (2026-10-11 02:33 UTC): Publisher 6d1cff04 → df23abf3/POM-origin repair/four green public builds delivered. Toolchain e6699221/staging 1160 and 1161 close-only are historical. No newer publisher run in the six-hour refresh; 9c2f4487 signed Maven deploy/close receipts remain: Server 6df8dd90 → 1162, closed Oct 10 11:00:40 UTC; Toolchain 039153cd, five SDK JAR/POM pairs from 1162 → 1163, closed Oct 10 11:12:44 UTC. Signing/uploads ran; product tests/SVN/release-script uploads skipped. Staging does not prove independent signatures, promotion or matching signed-SVN RC acceptance; later Server merges are excluded. 🔗 #512 repairs/new unsigned run await head review and signed RCs. Freeze/rebuild/restage Server/PD → Client → Hubble/Loader and Python SDK → MCP/AI. Qualify matching RCs, manual security/LICENSE/NOTICE, standalone/minimal-HStore/HA, amd64/arm64/native, bilingual migration/recovery/API/browser/downstream, then signatures/SHA512/vote/publication. SeaTunnel 3.0.0/plugins pinned; RISC-V RocksDB-only/head-specific; reproduce performance; bot upgrades out of scope.

• Word/license disposition: merged 🔗 #3295 makes Word 1.3 provided/external optional and unbundles Word plus six transitives; absent selection raises ConfigException with cause. 🔗 Stale release LICENSE/licenses declarations #3295 for the six removed transitives remain a nonblocking finding. Package/manual license review and published POM verification remain; removal is implemented, not an outstanding scope choice.

• Pinned Linux prevalidation (2026-10-11 02:33 UTC): Latest remains 38070154017 completed Oct 10 17:34:22 UTC: validator 82592175, Server 6df8dd90, Toolchain 039153cd. Java 17 job: 33 tests/four unsigned SHA512s/source/header/version checks and source-built/binary Server/Gremlin, Client, ordinary Loader, Tools, Hubble/cleanup pass. Manual declarations: 366 Server/1,028 Toolchain; five notes cover large files/images/aggregate licenses. Four core packages only; same-source SDK mode does NOT verify RC signatures/download/staging origin. 🔗 Doc Author-reported #512 five-coordinate 1162 origin checks, AI/Computer content and ten-module Computer 35e29491 build/Client 1163 checksums are separate, not this run's six-package/signed-RC proof. 37903047266 at 05776cfd/Server 68855199/Toolchain 48b82044 is historical. No signed-SVN RC receipt; Maven deploy/close ≠ signature/license/final-artifact acceptance.

Scores /10 are SHA-bound, not priority/approval; ≥8.5 waives no CI/RC/regression. Re-review new heads; merged/closed scores historical.

Oct 10 independent scores (not ASF approvals): 🔗 #3299 8.4 at 34cc360c; 🔗 #2994 historical 8.2 at 5b14533c; 🔗 #3192 8.0 at 0be7fde7; 🔗 #3221 7.2 at 3932be60; 🔗 #3243 6.5 at 7f5a9173; 🔗 #3308 historical 8.5 at 9918ff25, now hold for three lifecycle regressions (historical 7.5 at 78390802). New test-only 🔗 #3309: 7.5 at a46e8226, two source P2s; no ASF approval.

Schema scores above are historical author-account reports, not ASF approvals; no successors. Oct 7 16:21 reviews add no score/closure; PD author 10/10 excluded. Original 🔗 #3243/🔗 #2994 bindings retained; Toolchain repairs unscored.

Merged / completed

UTC/2026; final → merge SHA. Acceptance above; preliminary/closed ≠ delivery.

• Historical scores: 🔗 #3258 9.0 at 9cf40498, 9.2 at d3db8e73; 🔗 #3291 8.6 at fcdeed82. Doc 🔗 #509/RC acceptance open.
• Server foundations: 🔗 #3218 🔗 accepted Helm operational limits #3218; 🔗 #3261 39a3a8da; 🔗 #3262 8fd9841e; 🔗 #3263 d9abcd43 → final 2ca1f254. Required-check runtime 🔗 #3264; CI 🔗 #3271 8beb78b8, 🔗 #3277 708e0ab7; comments-only 🔗 #3260 662a97d8. Other runtime/data/recovery deliveries appear in the delivery index, including 🔗 #3244/🔗 #3246/🔗 #3257 scheduler/election/redirect/TokenGenerator cleanup.
• Oct 10 lifecycle/integration: 🔗 #3302 08:23:53, 821b16b3 → 0f86e2a0, 🔗 approved #3302, five workflows pass; Codecov/project 41.37% (−0.06 pp) fails. Same-head Intel rerun passed Core 926/API 180 (42/14 skips), superseding that workflow failure without proving timeout cause. 🔗 #3303 09:49:53, dd0b5603 → 72085aa9, five workflows/all coverage green. 🔗 #3306 09:32:16, 8ad513f9 → 5c6543db, 🔗 approved #3306, five workflows green, Codecov/patch 1.96% fails. 🔗 #3305 09:58:14, 981d1b10 → fd64f745, 🔗 approved #3305, five workflows/both coverage green. 🔗 #3304/🔗 #3307 evidence above; earlier master 87a06a9b had five green push workflows.
• Oct 9: 🔗 #3293 17:25:28, 2d335c98 → d00efced, exact-head approval/five green PR workflows; Codecov project/patch fail. Word 🔗 #3295 06:52:10, SDK 🔗 #794 13:54:30 and Flink 🔗 #786 06:50:11: final/merge SHAs and approval/CI evidence above.
• Oct 8: 🔗 #3289 15:49:53; 🔗 #3275 15:34:44: final/merge SHAs above, each exact-head approved/five green workflows. 🔗 #3282 08:20:35, 8184f01f → af3c6867, approval/five green workflows; Maven/RC/signature/vote/publication open.
• Oct 7 Foundation/UTF-8: 🔗 #3270 10:15, 704b9807 → 73980751; 🔗 #3281 14:38, 84b9f517 → e62c961e, 🔗 approved #3281, five green workflows (359 Commons + 25 RPC, HStore/Compatibility). Selected Helm/Docker/inventory/TP/Raft skipped; rebuilt consumers unqualified.
• Toolchain chronology: Oct 5 🔗 #775/🔗 #776/🔗 #777/🔗 #778/🔗 #782; Oct 6 🔗 #781 4879ae1f, 🔗 #779 595f7ed0, 🔗 #783 f8db70ea; Oct 7 🔗 #791 551e08a1 → bb5763d2. Oct 8 🔗 #787 08:25, f917937d → cfed323f; 🔗 #784 11:52:29, 8ec4b2f4 → 32afdef7; 🔗 #785 15:46:02, b8678974 → d49fc5f8.
• AI/docs/integrations: Completed lists all deliveries; AI preparation/archive installation and Computer Java 17/archive legal files delivered Oct 10. SeaTunnel integration/docs complete; 3.0.0 released 2026-09-29 (downloads).

Closed unmerged

• Toolchain mirrors: ASF 🔗 #798 073b5cf4 closed unmerged on 2026-10-10; image-mirror changes are absent from current repair heads. Product jobs passed; the aggregate rejected changed PR inputs after closure. Launcher preliminary 8ba764d9 closed before 🔗 #800 merged, counted once.

• CI target freshness: 🔗 #3297 🔗 withdrawn unmerged #3297 2026-10-10 08:24 UTC, ca90d74d; no delivery/waiver. CI is tested-commit-bound; [Bug] CI accepts obsolete PR targets after retargeting or force-push #3296 establishes no bypass.

• Combined lifecycle: ASF 🔗 #3294 closed unmerged 2026-10-09 at a73b864f, replaced by 🔗 #3302/🔗 #3303/🔗 #3304; historical 8.2 at b7035f8e does not score the split.

• Restore: preliminary review closed unmerged at 2d335c98 after 🔗 #3293 delivery; 8.3 stays at 8b2e1329, not merged head.

• Schema: 🔗 #3237 final/scored 8d6e1868, 6.8/10, 🔗 closed for redesign #3237; replacement stack open.

• AI reload: 🔗 #378 closed 2026-10-06 12:11 UTC, final 76a8ea04; 7.0/10 at b629fbb3. Twenty final-head checks + author Linux 486 pass/3 skip/18 deselected did not deliver reload or live-provider/browser acceptance. Historical Windows exit 0xC0000005; [Bug] In rag_web_demo. Unable to get the latest Settings of the configuration file after ui refresh hugegraph-ai#91 open, no successor found.

• DECIMAL: after 🔗 maintainer reply #3209, author 🔗 withdrew #3209 stack 2026-10-06 15:35 UTC. Server 🔗 #3209 final/scored 985b6c77, 7.0/10; 🔗 #771 final 514c5b46, 7.0/10 at 991a97f7; 🔗 #504 final da2ed534, 8.1/10 at 4e4d3f16. Precision/SET, Loader ID/DATE/scale and wire-contract findings historical; minimal SINGLE only proposed.

• Pre-ASF: Foundation preliminary review closed after 🔗 #3270 delivery; 9.0/10 at 361f4c23. Preliminary closures add no deliveries. Oct 8 ledger final SHAs: Topling/version/TP-Groovy/bound Cypher and Toolchain SDK-build/Spark/images; withdrawn runtime final 6b946e30. Historical findings/RC open. Groovy opt-in security proposal eb5f3b63 closed unmerged, neither delivered nor included.

Older scored heads / retained scope

• Superseded evidence: Diagnostics e9dec9c5 added quote/% fallback and TEST_HOST fixtures; 9e9ef772/tested merge 817d4790 failed second RISC-V startup (fatal library error, lookup self), cause unproved. Graph deletion 0a77e419/merge fe018bb6: Memory 1,020 tests/3 failures/2 errors/8 skips, partial mock null taskManager; no production defect proved. Doc 40638771 had green site CI before 9977486e; Foundation-doc 21049420 site failure/SchemaManager omission are historical, source-deletion claim refuted.

• Flink pre-ASF: 7.4/10 at 262c190d; preliminary review closed. Delivered 🔗 #786 counted once; optional CDC/distributed/recovery/RC qualification open.

• Spark pre-ASF: 6.8/10 at af3fe40f; 🔗 #785 delivered; optional distributed/RC qualification open. Neither score transfers to final/merge SHAs in the ledger.

Historical ratings (/10, scored SHA), never transferred:

• Split lifecycle: Server transaction 8.4 1183d254, 7.0 e387ce63; Store RPC 8.0 15b445a9, 7.0 c1acb24e; Store shutdown 7.0 c221fe1e, 8.5 663b8bcf. Preliminary reviews unmerged; ASF 🔗 #3302/🔗 #3303/🔗 #3304 delivered separately.
• Other: combined lifecycle 8.1 254381b2, 7.0 de24938c; Topling 6.8 bf666f85 (two P1s; not approval of final 96f99de7), 8.0 8a8ead7f, 7.3 ddbe2c30, 7.2 18dd8b12, 6.9 6ac54152; restore 7.3 a021511e, 7.8 82b75b07; 🔗 #779 4.0 c5a2524e; withdrawn runtime 0.0 36058b0c.
• 🔗 Closed-unmerged #3134: 6.7 at 30a949bc, final 90d57753, closed 2026-10-10 10:41:11 UTC. Open ASF 🔗 #3117 and withdrawn runtime are historical context, not delivery units.