# Launch-readiness checklist — v0.5.0 "April 2026"

Per the April 2026 roadmap (#6), do NOT post to HN/Reddit/X until every
checkbox below is either ticked or explicitly waived in the PR that
references this page.

## Code / release

- [x] All Phase 1 PRs merged to `main` (1.1 SDK rename, 1.2 MCP
      2025-11-25, 1.3 CVE suite, 1.4 presets, 1.5 Managed backend stub,
      1.6 A2A middleware, 1.7 Model Armor, 1.8 deep-analysis bug triage)
- [x] `pyproject.toml` version bumped to `0.5.0`
      (see [#17](https://github.com/sattyamjjain/agent-airlock/pull/17))
- [x] `src/agent_airlock/__init__.py` `__version__` matches
- [x] `CHANGELOG.md` `[0.5.0]` heading with a one-paragraph summary
- [x] `CI` green on main for the commit being tagged
- [x] `git tag v0.5.0 -a -m "..."` + `git push origin v0.5.0`
      (annotated, not yet PGP-signed — see security-hygiene section)
- [x] Release notes posted to GitHub Releases (matches CHANGELOG body)
      <https://github.com/sattyamjjain/agent-airlock/releases/tag/v0.5.0>
- [x] `twine upload dist/*` succeeded (auto-ran via `publish.yml` on
      Release; see GitHub Actions "Publish to PyPI" run)
- [x] `pip install agent-airlock==0.5.0` works from a clean env
      (verified 2026-04-18: version prints `0.5.0`, core imports resolve)

## Docs

- [ ] README hero/quickstart up to date
- [x] `docs/cves/index.md` auto-generated and in-sync with `tests/cves/`
      (CI gate still PENDING — `scripts/gen_cve_catalog.py --check` job
      must be added to `.github/workflows/ci.yml` by a maintainer with
      `workflow` scope; see PR #18 body)
- [x] `docs/observability/semconv.md` present with stable-attribute
      contract
- [x] `CODE_OF_CONDUCT.md`, `SECURITY.md`, `CONTRIBUTING.md`, issue
      templates present
- [x] `.claude-plugin/{plugin,marketplace}.json` point at 0.5.0
- [x] `docs/launch/faq.md` drafted (this folder)
- [x] `docs/launch/rollback.md` drafted (this folder)

## Artifacts

- [ ] Demo GIF at `docs/media/blocked-cve.gif` (60 s screencast)
- [ ] Hero image at `docs/media/hero.png`
- [ ] Coverage badge + test count badge updated

## Security hygiene

- [x] Latest `bandit -r src/agent_airlock/` → 0 issues
      (see `docs/launch/security-artifacts/bandit.txt`)
- [x] Dep-CVE scan clean on runtime deps
      (see `docs/launch/security-artifacts/pip-audit-core.json` — `safety`
      unusable on the launch laptop due to a numpy/scipy runtime
      conflict; `pip-audit` is the tool of record)
- [ ] SBOM generated and uploaded as a CI artifact
      (pending: needs a job in `publish.yml` by a maintainer with
      `workflow` scope)
- [ ] PGP key fingerprint in `SECURITY.md` matches the key used to sign
      the release tag

## Go / no-go

### Context shift (2026-04-19)

Between the original checklist draft and today, three things moved:

1. **Ox Security disclosed the MCP STDIO RCE class on 2026-04-15**
   ([advisory](https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem),
   [The Register](https://www.theregister.com/2026/04/16/anthropic_mcp_design_flaw/)).
   Anthropic's response is *"expected behavior"* — doc update only.
2. **OpenAI shipped sandbox-by-default the same day** ([blog](https://openai.com/index/the-next-evolution-of-the-agents-sdk/)).
   "Separates the harness from the compute" is now their public
   framing.
3. **Cloudflare Sandboxes went GA 2026-04-17** ([blog](https://blog.cloudflare.com/sandbox-ga/))
   as part of Agents Week.

The post-Ox narrative is the launch thesis now. We block 3 of 4 Ox
attack classes at the runtime seam (regression test:
[`tests/cves/test_cve_2026_30616_mcp_stdio_rce.py`](https://github.com/sattyamjjain/agent-airlock/blob/main/tests/cves/test_cve_2026_30616_mcp_stdio_rce.py)).
FAQ §Positioning and `docs/launch/announcement.md` both lead with it.

### Gates

- [ ] **Launch day is a Tuesday**, not a Friday. Next Tuesday after
      today (2026-04-19, Sun) is **2026-04-21**. The Ox thread is
      still on the security-Twitter front page at that point —
      ideal.
- [ ] Launch-readiness PR approved by the maintainer
- [ ] Rollback plan reviewed (see `rollback.md`)
- [ ] Maintainer available to watch HN comments for 4 hours after post
- [ ] `announcement.md` reviewed and the "chose not to ship" line
      either kept or softened (maintainer call — the current draft
      leans into the Anthropic quote)
- [ ] Post scheduled for 09:00 ET on Tuesday (HN front-page peak for
      security posts)

## External submissions (not blocking launch, but schedule)

- [ ] PR opened against `anthropics/claude-plugins-official`
- [ ] Submission form filed at `claudemarketplaces.com/submit`
- [ ] `aitmpl.com` outreach via Discord
- [ ] `buildwithclaude.com` submission form filed
- [ ] 10 DMs drafted (simonw, swyx, karpathy, Theo, 6 security devs) —
      NOT sent until after HN post lands on the front page
- [ ] 8-tweet X thread drafted
- [ ] `/r/ClaudeAI`, `/r/LocalLLaMA`, `/r/netsec` post drafts reviewed
