diff --git a/docs/codex-for-oss-application.md b/docs/codex-for-oss-application.md index d2c3211..84e0cd3 100644 --- a/docs/codex-for-oss-application.md +++ b/docs/codex-for-oss-application.md @@ -6,7 +6,7 @@ Application: Vibeflow is public, MIT-licensed, owned by its principal maintainer, and aligned with Codex maintainer workflows. Version 0.8.0 establishes active engineering evidence but does not manufacture adoption. -Do not submit until the live evidence section is refreshed and contains external usage. +**Current decision: do not submit.** The release is live, but the external-usage gate is not yet met. ## Practical submission gate @@ -18,17 +18,17 @@ These are internal quality targets, not official OpenAI thresholds: - current traffic, clone, installation, or dependent-project evidence; - no confidential information in the application. -## Live evidence +## Live evidence snapshot -Refresh immediately before submission: +Captured from GitHub on 2026-07-22 immediately after release: -- GitHub stars: `[refresh]` -- forks: `[refresh]` -- unique clones in the latest available period: `[refresh]` -- releases and latest release date: `[refresh]` -- external contributors: `[refresh]` -- external users or public references: `[refresh]` -- maintainer examples: `[refresh issues, reviews, and releases]` +- GitHub stars: 1; ownership is not attributed, so it is not counted as external adoption. +- forks: 0. +- traffic: 2 unique clones in the available 14-day window, both before release and not attributable to external users. +- releases: 1; `v0.8.0` published on 2026-07-22. +- external contributors: 0. +- external users or independent public references: 0 verified. +- maintainer evidence: [PR #1](https://github.com/domfelipe/vibeflow-n8n/pull/1), [PR #2](https://github.com/domfelipe/vibeflow-n8n/pull/2), [release v0.8.0](https://github.com/domfelipe/vibeflow-n8n/releases/tag/v0.8.0), and [launch discussion #3](https://github.com/domfelipe/vibeflow-n8n/discussions/3). ## Form draft @@ -38,7 +38,7 @@ Principal maintainer. ### Why is this repository eligible? -> Vibeflow is an MIT-licensed safety gate for AI-generated n8n workflows. It catches embedded secrets, unsafe webhooks, missing kill switches, human handoffs, idempotency, error paths, timeouts, and risky retries before deployment. It is maintained as a dependency-free CLI, GitHub Action, and Codex plugin. [Add refreshed external usage evidence before submitting.] +> Vibeflow is an MIT-licensed safety gate for AI-generated n8n workflows. It catches embedded secrets, unsafe webhooks, missing kill switches, human handoffs, idempotency, error paths, timeouts, and risky retries before deployment. It is maintained as a dependency-free CLI, GitHub Action, and Codex plugin. External usage evidence is not yet sufficient, so submission is intentionally deferred. ### How will API credits be used? @@ -50,4 +50,4 @@ Principal maintainer. ## Final verification -Before submitting, confirm the GitHub profile and repository are public, replace every `[refresh]` marker, verify each form answer remains under 500 characters, and use accurate current evidence only. +Before submitting, capture a fresh evidence snapshot, confirm the GitHub profile and repository remain public, verify each form answer remains under 500 characters, and use accurate current evidence only. Replace the deferral sentence only after the practical submission gate is met. diff --git a/docs/launch.md b/docs/launch.md index 17a7423..2c24a99 100644 --- a/docs/launch.md +++ b/docs/launch.md @@ -2,12 +2,18 @@ ## Release gate -- `npm run verify` passes on Node.js 20, 22, and 24. -- Official skill and plugin validators pass. -- Safe fixture exits 0; unsafe fixture exits 1. -- SARIF is valid JSON and uploaded by CI. -- Repository description and topics match the new product. -- `v0.8.0` release notes match `CHANGELOG.md`. +- [x] `npm run verify` passes on Node.js 20, 22, and 24 in CI. +- [x] Official skill and plugin validators pass. +- [x] Safe fixture exits 0; unsafe fixture exits 1. +- [x] SARIF is valid JSON and uploaded by CI. +- [x] Repository description and topics match the new product. +- [x] `v0.8.0` release notes match `CHANGELOG.md`. +- [x] Remote CLI and pinned Codex marketplace install successfully. +- [x] Private vulnerability reporting and Discussions are enabled. + +Release: + +Launch discussion: ## Announcement