wave6: retire dead ctor entries (ALLOWLIST_DISCIPLINE §495, shared-diff fold)

.doc_surface_floor

@@ -1 +1 @@
-51.8
+100.0

.github/workflows/nightly.yml

@@ -123,6 +123,20 @@ jobs:
           pip install -e porting-sdk/test_harness/mock_relay
           pip install -e porting-sdk/test_harness/mock_signalwire
 
+      # ruff is the Python half of the FMT and LINT gates (scripts/ enumerators +
+      # generators). scripts/_env.sh fails LOUD without it. Config: ./ruff.toml.
+      - name: Install ruff (Python half of FMT + LINT)
+        run: |
+          # PINNED EXACT: an unbounded `pip install ruff` resolves the newest release
+          # at CI time, so a ruff release that adds a rule or changes a format
+          # heuristic reds FMT/LINT on a commit that was green locally. Keep in
+          # lockstep with SW_RUFF_VERSION in scripts/_env.sh.
+          pip install "ruff==0.15.21"
+          # Assert the pin took — pip can satisfy a spec from an unexpected
+          # index or cache, so verify rather than assume.
+          ruff --version
+          ruff --version | grep -qw '0\.15\.21' || { echo "FATAL: ruff is not the pinned 0.15.21" >&2; exit 1; }
+
       # The EMISSION gate needs `import signalwire` (the oracle). Install it from
       # the adjacent checkout only if it isn't already importable — so a runner
       # that already has it (or a future shared setup) isn't reinstalled.

.github/workflows/publish.yml

@@ -50,6 +50,20 @@ jobs:
           pip install -e porting-sdk/test_harness/mock_relay
           pip install -e porting-sdk/test_harness/mock_signalwire
 
+      # ruff is the Python half of the FMT and LINT gates (scripts/ enumerators +
+      # generators). scripts/_env.sh fails LOUD without it. Config: ./ruff.toml.
+      - name: Install ruff (Python half of FMT + LINT)
+        run: |
+          # PINNED EXACT: an unbounded `pip install ruff` resolves the newest release
+          # at CI time, so a ruff release that adds a rule or changes a format
+          # heuristic reds FMT/LINT on a commit that was green locally. Keep in
+          # lockstep with SW_RUFF_VERSION in scripts/_env.sh.
+          pip install "ruff==0.15.21"
+          # Assert the pin took — pip can satisfy a spec from an unexpected
+          # index or cache, so verify rather than assume.
+          ruff --version
+          ruff --version | grep -qw '0\.15\.21' || { echo "FATAL: ruff is not the pinned 0.15.21" >&2; exit 1; }
+
       - name: Run CI gate script (full gate set)
         working-directory: signalwire-java
         env:

.github/workflows/test.yml

@@ -71,6 +71,23 @@ jobs:
           pip install -e porting-sdk/test_harness/mock_relay
           pip install -e porting-sdk/test_harness/mock_signalwire
 
+      # ruff is the Python half of the FMT and LINT gates. scripts/ holds the
+      # hand-written enumerators + generators that feed SIGNATURES/SURFACE/DRIFT
+      # and emit the committed generated trees; they are linted + formatted at the
+      # same bar as the Java. scripts/_env.sh fails LOUD when ruff is missing, so
+      # this install is required, not an optional speedup. Config: ./ruff.toml.
+      - name: Install ruff (Python half of FMT + LINT)
+        run: |
+          # PINNED EXACT: an unbounded `pip install ruff` resolves the newest release
+          # at CI time, so a ruff release that adds a rule or changes a format
+          # heuristic reds FMT/LINT on a commit that was green locally. Keep in
+          # lockstep with SW_RUFF_VERSION in scripts/_env.sh.
+          pip install "ruff==0.15.21"
+          # Assert the pin took — pip can satisfy a spec from an unexpected
+          # index or cache, so verify rather than assume.
+          ruff --version
+          ruff --version | grep -qw '0\.15\.21' || { echo "FATAL: ruff is not the pinned 0.15.21" >&2; exit 1; }
+
       # The EMISSION gate needs `import signalwire` (the oracle). Install it from
       # the adjacent checkout only if it isn't already importable — so a runner
       # that already has it (or a future shared setup) isn't reinstalled.

.version-frozen

@@ -0,0 +1,38 @@
+# VERSION FREEZE — TEMPORARY. DELETE THIS FILE BEFORE RELEASING.
+#
+# Ruled by the owner 2026-07-28. This port declares version 3.0.0, and its SemVer
+# release floor (port_signatures.baseline.json -> baseline_version) is pinned at
+# 3.0.0 with the recorded surface payload overwritten to match today's surface.
+#
+# THIS FILE IS DOCUMENTATION ONLY (owner ruling, 2026-07-28). No gate reads it and
+# nothing fails if it is present. It exists so that neither a person nor a future
+# session has to re-derive why the versions look the way they do — and so nobody
+# casually bumps one.
+#
+# WHY THE FREEZE: versions had drifted to 3.0.2 / 3.2.0 / 3.2.1 / 3.3.0 / 4.0.0
+# across the fleet with NOTHING EVER PUBLISHED above v2.x. `git ls-remote --tags
+# origin` tops out at v1.1.2 for rust/dotnet and v2.0.x for most others; php's
+# v3.2.0 tag is local-only, zero remote matches. That scatter was never a release
+# history, so collapsing it rewrote nothing real.
+#
+# WHILE THIS FILE EXISTS:
+#   - do NOT bump this port's version
+#   - do NOT re-anchor its release floor
+#   - DO land surface changes freely. The floor is a snapshot of the 3.0.0 wave,
+#     not of a published release, so SEMVER-DIFF will not flag anything already in
+#     today's surface. Anything added AFTER the freeze is still caught normally.
+#
+# BEFORE CUTTING A RELEASE:
+#   1. DELETE this file in every port.
+#   2. Re-anchor each port_signatures.baseline.json to the actual released
+#      commit/tag and regenerate its surface payload from that point.
+#   3. Re-enable enforcement: ports invoke SEMVER-DIFF with --report-only today
+#      (the D5 "re-anchor at cut" setting). Dropping that flag turns semver
+#      enforcement back on.
+#
+# NOTE: perl is deliberately NOT floor-pinned. It is the only port anchored to a
+# genuinely published tag (v2.0.2, sha 83376ff) and already passes at 3.0.0;
+# overwriting it would destroy the fleet's only real release anchor.
+#
+# Owner rulings: porting-sdk tasks #143 (version) and #146 (floor).
+# Full context: porting-sdk/SESSION_HANDOFF_2026-07-28.md

CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## [4.0.0] - 2026-07-15
+## [3.0.0]
 
 - REST (BREAKING): `RestError` now carries the full request `url` (including the
   query string) alongside the existing `path`, so a caller can see the exact
@@ -32,7 +32,6 @@
   `maxActiveCalls(int)` builder option — inbound calls past the cap are logged and
   dropped, matching the reference `Client(max_active_calls=...)`.
 
-## [3.2.0] - 2026-07-14
 
 - REST: added the `Messages` resource (`client.messages()`) — send and redact
   messages over `/api/messaging/messages` (`create` → POST, `update` → PATCH
@@ -41,15 +40,13 @@
   the shared mock. Distinct from the message logs namespace (`client.logs()`
   `.messages()`).
 
-## [3.1.0] - 2026-07-14
 
 - REST: added the `Projects` resource (`client.projects()`) — full CRUD over
   `/api/projects` (list/get/create/update/delete) plus `rotateSigningKey`, with
   generated typed request/response shapes and wire tests covering each route
   (success and error) against the shared mock. Distinct from the singular
   `project` token namespace (`client.project()`).
 
-## [3.0.2] - 2026-07-13
 
 - REST: the client's resource surface is now fully generated from the shared
   SignalWire OpenAPI specs, replacing the hand-written resource classes — every

DOC_AUDIT_IGNORE.md

@@ -38,6 +38,7 @@ java.lang#java: a package/literal reference in test scaffolding (not a method ca
 ### java.util / java.util.function
 
 DateTimeFormatter#ofPattern: DateTimeFormatter.ofPattern (java.time) — example formatters
+ZoneId#systemDefault: ZoneId.systemDefault (java.time) — the explicit zone the example clock tools pass to LocalTime/LocalDateTime.now()
 Arrays#asList: Arrays.asList (JDK) — list construction in examples
 Map#getOrDefault: Map#getOrDefault (JDK) — safe-get pattern in examples
 Collections#emptyMap: Collections.emptyMap (JDK) — empty-map literal in examples