DEV-6455: prepare Creator Kit 0.1.0-rc.4

.github/workflows/creator-kit-candidate.yml

@@ -34,6 +34,7 @@ jobs:
           set -euo pipefail
           node scripts/creator-kit/build-release-candidate.mjs --release-dir .creator-kit-tmp/first --source-commit "$GITHUB_SHA"
           node scripts/creator-kit/build-release-candidate.mjs --release-dir .creator-kit-tmp/second --source-commit "$GITHUB_SHA"
-          cmp .creator-kit-tmp/first/spectoda-creator-kit-0.1.0-rc.4.tar .creator-kit-tmp/second/spectoda-creator-kit-0.1.0-rc.4.tar
+          candidate_version="$(jq -r .version creator-kit/bundle.json)"
+          cmp ".creator-kit-tmp/first/spectoda-creator-kit-${candidate_version}.tar" ".creator-kit-tmp/second/spectoda-creator-kit-${candidate_version}.tar"
           cmp .creator-kit-tmp/first/provenance.json .creator-kit-tmp/second/provenance.json
           git diff --exit-code -- creator-kit

ARCHITECTURE.md

@@ -65,10 +65,10 @@ does not become an authoring backchannel for Documentation.
 
 The `0.1.0-rc.4` review candidate includes seven CC BY 4.0 documents, two
 hash-locked FW 0.12.11 config assets and the MIT sparse global Event Player.
-The published rc.3 remains immutable until a protected rc.4 release is
-explicitly approved. The candidate carries the exact
-Documentation snapshot digest, Documentation/Firmware/Examples source commits,
-license posture, compatibility contract, indexes and checksums.
+It carries the exact Documentation snapshot digest,
+Documentation/Firmware/Examples source commits, license posture, compatibility
+contract, indexes and checksums. The published `0.1.0-rc.3` release remains
+immutable; a new version always produces a new snapshot and release tag.
 `scripts/creator-kit/validate.mjs` checks public safety, links, hashes,
 provenance, size and the unpublished stable boundary. Public CI packages the
 already committed snapshot into a deterministic tar; only the protected

CHANGELOG.md

@@ -4,8 +4,16 @@ Date-based versions use `YYYYMMDD`.
 
 ## 20260810
 
+### Added
+
+- Prepared the immutable Creator Kit `0.1.0-rc.4` candidate from the exact
+  Documentation snapshot with universal `-1` disconnected-pin semantics.
+
 ### Changed
 
+- Hardened Creator Kit publication validation across every bundled Markdown/
+  MDX file and recursively decoded JSON content, including nested credential
+  keys and JSON-escaped private URLs.
 - Simplified the Event Player to one global mixed-ID stream. Tracks remain
   per-ID authoring lanes while sparse Cues contain only the Event values
   selected for that moment.
@@ -23,6 +31,10 @@ Date-based versions use `YYYYMMDD`.
 - Prepared Creator Kit `0.1.0-rc.4` with the final
   `DEBUG_UNIVERSAL_0.12.11_20260810` compatibility pin. No release or stable
   channel promotion is implied by the candidate.
+- Locked both the historical parser baseline and the merged firmware semantic
+  revision into the public Controller Config asset provenance.
+- Kept `0.1.0-rc.3` immutable and the stable-channel descriptor unpublished;
+  this preparation does not publish a GitHub release.
 
 ## 20260809
 

README.md

@@ -56,8 +56,8 @@ customer-specific data that is not meant to be public.
 
 ## Spectoda Creator Kit public prerelease
 
-`creator-kit/` is the review candidate for the public English Spectoda Creator
-Kit `0.1.0-rc.4` prerelease. It contains the complete selected
+`creator-kit/` is the immutable review candidate for the public English
+Spectoda Creator Kit `0.1.0-rc.4` prerelease. It contains the complete selected
 FW 0.12.11 Controller Config documentation and machine-readable config
 contract/schema under CC BY 4.0, plus one MIT-licensed Event Player example.
 Documentation remains the private authoring source of truth; this repository

creator-kit-templates/README.md

@@ -14,7 +14,7 @@ The bundle contains:
 
 Read `bundle.json`, `manifest.json`, `source-lock.json`, `licenses.json` and
 `checksums.sha256` before use. Documentation content is locked to
-`Spectoda/documentation@6f6051686fe556a85318c7dd529ac061ab48c38d`; the
+`Spectoda/documentation@08cb4e5f8155178c18a86edd4a515f7d6c8fb835`; the
 example is locked to
 `Spectoda/examples@{{EXAMPLES_COMMIT}}`. The firmware
 config assets identify their own exact `Spectoda/firmware` provenance.

creator-kit-templates/RELEASE_NOTES.md

@@ -1,11 +1,15 @@
 # Spectoda Creator Kit 0.1.0-rc.4 public prerelease
 
 This candidate updates the public Creator Kit with the final FW 0.12.11 sparse
-global Event Player and its final WASM compatibility pin.
+global Event Player, its final WASM compatibility pin and consistent `-1`
+disconnected-pin semantics. It supersedes `0.1.0-rc.3`; the earlier archive
+remains unchanged and available by its exact release tag.
 
 It includes the complete documented FW 0.12.11 Controller Config surface,
 machine-readable contract and JSON Schema, plus the MIT-licensed Event Player
-example. Documentation and config data are licensed under CC BY 4.0. Spectoda
+example. GPIO-valued fields now document and validate `-1` consistently as an
+intentionally disconnected pin while preserving connected-pin capability
+ranges. Documentation and config data are licensed under CC BY 4.0. Spectoda
 names, logos and trademarks are excluded from the license grant.
 
 The archive is deterministic and ships with a SHA-256 sidecar and provenance

creator-kit/README.md

@@ -14,9 +14,9 @@ The bundle contains:
 
 Read `bundle.json`, `manifest.json`, `source-lock.json`, `licenses.json` and
 `checksums.sha256` before use. Documentation content is locked to
-`Spectoda/documentation@6f6051686fe556a85318c7dd529ac061ab48c38d`; the
+`Spectoda/documentation@08cb4e5f8155178c18a86edd4a515f7d6c8fb835`; the
 example is locked to
-`Spectoda/examples@e4be6dd07814c1dc8816ffc0e4ea518532e411ec`. The firmware
+`Spectoda/examples@97fd90afbc9839830b3dc7f73df36f385f66564d`. The firmware
 config assets identify their own exact `Spectoda/firmware` provenance.
 
 ## Licensing

creator-kit/RELEASE_NOTES.md

@@ -1,11 +1,15 @@
 # Spectoda Creator Kit 0.1.0-rc.4 public prerelease
 
 This candidate updates the public Creator Kit with the final FW 0.12.11 sparse
-global Event Player and its final WASM compatibility pin.
+global Event Player, its final WASM compatibility pin and consistent `-1`
+disconnected-pin semantics. It supersedes `0.1.0-rc.3`; the earlier archive
+remains unchanged and available by its exact release tag.
 
 It includes the complete documented FW 0.12.11 Controller Config surface,
 machine-readable contract and JSON Schema, plus the MIT-licensed Event Player
-example. Documentation and config data are licensed under CC BY 4.0. Spectoda
+example. GPIO-valued fields now document and validate `-1` consistently as an
+intentionally disconnected pin while preserving connected-pin capability
+ranges. Documentation and config data are licensed under CC BY 4.0. Spectoda
 names, logos and trademarks are excluded from the license grant.
 
 The archive is deterministic and ships with a SHA-256 sidecar and provenance