research: publish scholarly release v1 from frozen archive lock

[ErenAri]

Summary

Add a one-shot scholarly release workflow for the frozen BPFCompat pilot-v1
research archive.

The workflow is intentionally named scholarly-release-v1.yml rather than
research-*.yml, so adding it does not modify the already frozen
research-v1 archive payload selection or its committed archive lock.

Trigger

The workflow runs only when this workflow file is pushed to main. Merging
this PR is therefore the release action.

It does not use a v* tag, so it does not enter BPFCompat's product release
pipeline.

Release procedure

The job:

1. refuses an existing research-v1 tag or release;
2. downloads the three pinned canonical Actions artifacts;
3. rebuilds and verifies the full scholarly archive from those artifacts;
4. requires the generated archive lock to match the committed lock;
5. requires the frozen 668-file manifest and payload SHA-256 values;
6. stages and attests the four scholarly release files;
7. creates an annotated research-v1 tag at the exact merge commit;
8. publishes BPFCompat Research Dataset v1 as a non-latest GitHub Release;
9. verifies the tag target and exact release asset set.

Published assets:

• archive-manifest.json
• archive-lock.json
• bpfcompat-research-v1-payload.zip
• RELEASE-CHECKSUMS.txt

Evidence boundary

The release notes explicitly state that this is a reproducibility release of
pilot evidence, not a claim of peer review or institutional endorsement.

This PR does not mint a DOI. Zenodo/DOI remains the next gate after the GitHub
release is successfully published.

Summary by CodeRabbit

• New Features
  • Added automated publication of an immutable Research v1 release from the main branch.
  • Releases now include validated archive files, canonical pilot and repeat datasets, and archive lock details.
  • Published assets include build provenance attestations for improved traceability.
  • Release validation confirms archive integrity, expected contents, commit alignment, and publication status.
  • Safeguards prevent duplicate releases and clean up the tag if publication fails.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: a650c48f-1934-4b7d-9274-f8e61287d909

📥 Commits

Reviewing files that changed from the base of the PR and between f19701b and e930e82.

📒 Files selected for processing (1)

• .github/workflows/scholarly-release-v1.yml

 ______________________________________________________
< Linters are opinions; I'm the peer-reviewed journal. >
 ------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}