Skip to content

deps: bump measure-mirror pin → v0.28.1 (power_check honesty fix) #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bhyi4 merged 1 commit into from
Jul 21, 2026
Merged

deps: bump measure-mirror pin → v0.28.1 (power_check honesty fix) #21

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,21 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).

---

## [0.2.9] — 2026-07-21

### Changed
- **measure-mirror pin `28290f2` → `abe0c19` (v0.28.0 → v0.28.1)**. Picks up the
**`power_check` honesty fix**: the probe hardcoded its critical values
(`z_alpha2 = 1.96`, `z_beta = 0.842`), so `mm_power_check` printed the
requested power (e.g. "at 99% power") while the required-n was *always*
computed at 80% power / α=0.05 — the printed text and number contradicted
each other. Both z-values now derive from the `alpha`/`target_power`
arguments via `statistics.NormalDist().inv_cdf` (stdlib, still zero-dep);
`target_power=0.99` → n≥1829 (was 781), `alpha=0.0001` → n≥2229. Default
(α=0.05, power=0.80) unchanged. This reaches the `mm_power_check` tool.
- Pin recorded as the **full 40-hex SHA** (the v0.28.0 bump #20 landed a 9-hex
abbreviation, which broke the cross-repo pin-lag checker; normalized since).

## [0.2.8] — 2026-07-21

### Changed
Expand Down
2 changes: 1 addition & 1 deletion mirror_stack_mcp/__init__.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
"""🪞🔎🪪 Mirror Stack unified MCP server."""
__version__ = "0.2.8"
__version__ = "0.2.9"
4 changes: 2 additions & 2 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"

[project]
name = "mirror-stack-mcp"
version = "0.2.8"
version = "0.2.9"
description = "Unified MCP server for the Mirror Stack — claims, actions, provenance + verify-all in one server"
readme = "README.md"
requires-python = ">=3.10"
Expand All @@ -16,7 +16,7 @@ dependencies = [
# tracks each mirror's default branch, so an install made before a mirror's release
# freezes on whatever was HEAD then and never refreshes — that is how a local install
# ran stale measure-mirror 0.14.3 long after 0.15.1 landed. Bump these on purpose.
"measure-mirror @ git+https://github.com/mirror-stack/measure-mirror@28290f2bad327525a0ec3b0b6287805c684c4647", # v0.28.0 — SECURITY: verify_chain no longer waives the chain link on missing prev_seal (SPEC §4 rule 3); v0.27.0 full 64-hex seals; v0.26 ㉗ prereg_lint
"measure-mirror @ git+https://github.com/mirror-stack/measure-mirror@abe0c19d3894c1278a9bf5281a45946ef0e1eea4", # v0.28.1 — power_check honors alpha/target_power (was hardcoded 1.96/0.842: text-vs-number lie); v0.28.0 SECURITY verify_chain prev_seal (SPEC §4 rule 3); v0.27.0 full 64-hex seals; v0.26 ㉗ prereg_lint
"action-mirror @ git+https://github.com/mirror-stack/action-mirror@fa1fc4998936e6bf179b5c14825fb09e78a36087", # v0.2.0 — full 64-hex SHA-256 seals (security; legacy 16-hex verify via prefix match); v0.1.0 ledgers conform to MIRROR-SPEC v1.0
"provenance-mirror @ git+https://github.com/mirror-stack/provenance-mirror@321f84abc4ffd91da43a5ebc866b5ce02cf3c276", # v0.2.0 — full 64-hex SHA-256 seals (security; legacy 16-hex verify via prefix match); v0.1.0 ledgers conform to MIRROR-SPEC v1.0
]
Expand Down
Loading