Merge pull request #70 from senyo888/senyo888-patch-1

Document v2.0.7 validation evidence

Author: senyo888

CHANGELOG.md

@@ -31,6 +31,14 @@ This project follows a practical changelog format for Home Assistant and HACS us
 - Expanded generated-card entity reference checks so stale IDs embedded inside
   generated-card JavaScript/string expressions are reported, not only YAML `entity:`
   rows.
+- Filtered generated-card release-validation extraction so JavaScript service names,
+  predicate prefixes, object properties, and entity-prefix strings no longer fail
+  generated-card entity availability checks.
+- Recorded HA Lab advisory validation for commit `55dc2b9`: lab identity, HI
+  presence/diagnostics, scenario-matrix read-only baseline, and Stage 3 six-sensor
+  runtime-readiness checks passed after lab-only deploy and manual restart, without
+  stable-instance access, service calls, helper mutation, dashboard mutation,
+  restart, reload, or output writes by Codex.
 - Added diagnostics, `self_check`, and `v205_release_check` reporting for PM2.5
   aggregate entity-ID normalization conflicts when a canonical `pm25` target entity
   already exists.

README.md

@@ -58,7 +58,7 @@ It gives you:
 
 Current release: **v2.0.7**.
 
-v2.0.7 is the stable release line prepared from `senyo888-patch-1`; v2.0.6 remains the previous stable release on `main` until promotion, tagging, and GitHub release publication are completed.
+v2.0.7 metadata is present on `main`; `senyo888-patch-1` remains the final staging lane for release-validation fixes until those fixes are promoted. HA Lab advisory validation for commit `55dc2b9` passed on 2026-06-23 after the lab-only package deploy and manual restart. Tagging and GitHub release publication remain gated until final validation, promotion, and maintainer approval are complete.
 
 ---
 
@@ -348,6 +348,8 @@ must be reviewable from tracked repository files.
 - PM2.5 aggregate runtime truth now exposes canonical `pm25` aggregate entity IDs when PM2.5 telemetry is configured, including setup-time normalization for existing `pm2_5` aggregate IDs
 - generated-card validation now checks entity references embedded in exported YAML, so stale Manual-card entity IDs are caught by `self_check` / `v205_release_check`
 - generated-card validation now includes entity references embedded inside generated-card JavaScript/string expressions, not just YAML `entity:` rows
+- generated-card release validation now filters JavaScript service names, predicate prefixes, object properties, and entity-prefix strings so false-positive card fragments do not fail release checks
+- HA Lab advisory validation passed for commit `55dc2b9` with identity, HI presence, scenario-matrix read-only baseline, and Stage 3 six-sensor runtime-readiness checks; this remains lab evidence, not release authority
 - PM2.5 aggregate entity-ID normalization now reports blocked canonical-target conflicts through diagnostics, `self_check`, and `v205_release_check`
 - generated V2 Current Air Control cards keep selected command lanes in the chip row while moving unmapped alert/no-automation context into reason text
 - generated V2 Current Air Control cards now render backend `telemetry_unavailable` as explicit degraded state and avoid falling back to `normal` / `READY` when the mode sensor is missing or unavailable
@@ -821,6 +823,8 @@ CO emergency pressure. Details are in
 - fixed PM2.5 aggregate runtime truth so configured PM2.5 telemetry exposes canonical backend-owned PM25 aggregate entities instead of relying on Home Assistant's dotted `pm2_5` name slug
 - hardened generated-card AQ output details so unresolved optional AQ aggregate rows are pruned instead of rendering stale `Entity not found` rows, with generated-card entity reference checks in `self_check` and `v205_release_check`
 - expanded generated-card entity reference checks so stale IDs embedded inside generated-card JavaScript/string expressions are reported, and PM2.5 aggregate entity-ID normalization conflicts are surfaced through diagnostics, `self_check`, and `v205_release_check`
+- filtered generated-card release-validation extraction so JavaScript service names, predicate prefixes, object properties, and entity-prefix strings no longer fail generated-card entity availability checks
+- recorded HA Lab advisory validation for commit `55dc2b9`: lab identity, HI presence/diagnostics, scenario-matrix read-only baseline, and Stage 3 six-sensor runtime-readiness checks passed after lab-only deploy and manual restart; no stable-instance access, HA service calls, helper mutation, dashboard mutation, restart, reload, or output writes were performed by Codex
 - changed generated V2 Current Air Control cards so red control-row styling follows selected alert/CO runtime truth, while degraded or unmapped alert candidates remain in reason text instead of primary chip-row space
 - fixed generated V2 Current Air Control cards so missing or unavailable Air Control Mode telemetry no longer renders as normal/ready, and backend `telemetry_unavailable` is shown as degraded UI truth ahead of stale helper-derived alert or AQ state
 - moved optional Level 1 / Level 2 display-label editing into setup Zones and post-configuration Zone Options before Zone 1 / Zone 2 editing, with diagnostics and generated cards using the same sanitized fallback-aware label source

assets/release_banner/v2.0.7_release.png

@@ -9,8 +9,8 @@ title: V2.0.7 Degraded Alert UI Truth Separation
 created: 2026-06-08
 category: ui
 target_version: v2.0.7
-authority_status: review-only
-state: REVIEW
+authority_status: implemented
+state: IMPLEMENTED
 owner: Aetherwing
 risk_level: medium
 runtime_impact: ui-only
@@ -20,16 +20,30 @@ affected_surfaces:
   - public-docs
 rollback_defined: true
 expiry_or_review_date: 2026-06-22
-bella_approved: false
-aetherwing_validated: false
-ha_lab_validated: false
-release_candidate_validated: false
+bella_approved: true
+aetherwing_validated: true
+ha_lab_validated: advisory_read_only
+release_candidate_validated: warning_only
 entity_contract_changed: false
 service_contract_changed: false
 lane_order_risk: false
 stable_runtime_risk: false
+implemented_in: v2.0.7
+release_candidate_validation_note: stable-instance availability warnings remain non-blocking advisories
+ha_lab_validation_note: 2026-06-23 HA Lab identity, HI presence, scenario-matrix read-only baseline, and Stage 3 runtime readiness passed for commit 55dc2b9; rendered UI was not validated
+closed: 2026-06-23
 ```
 
+## Closure Status
+
+This proposal is now a historical governance record. The v2.0.7 implementation moved
+red control-row styling to selected alert/CO runtime truth, kept degraded or unmapped
+alert candidates in reason text, and preserved backend lane ordering and entity
+semantics. HA Lab validation remains separate advisory evidence and is not claimed by
+this proposal record as rendered-UI approval. The 2026-06-23 HA Lab run confirmed the
+lab target identity, HI install/diagnostics presence, read-only baseline, and Stage 3
+runtime readiness for commit `55dc2b9`.
+
 ## Scope
 
 Draft a review-gated v2.0.7 proposal for correcting a stable dashboard truth issue
@@ -363,14 +377,15 @@ All lanes converge on a card-template-first proposal. Backend helper work remain
 deferred until there is evidence that card-only logic cannot stay maintainable or
 truthful.
 
-## Senyo Approval Gate
+## Senyo Approval Gate (Historical)
 
-FINAL VERDICT: PROCEED WITH REVIEW OF THIS PROPOSAL.
+FINAL VERDICT: IMPLEMENTED IN V2.0.7.
 
-IMPLEMENTATION ALLOWED: NO.
+IMPLEMENTATION ALLOWED: CLOSED; no further implementation is authorized by this proposal.
 
-SENYO REVIEW REQUIRED: YES.
+SENYO RELEASE REVIEW REQUIRED: YES.
 
-This proposal may be staged for Senyo review. No implementation, dashboard template
-edit, backend helper, docs promotion, release note, commit, push, or branch switch is
-authorized by this artifact.
+This proposal remains in the repository as the public governance record for the
+implemented UI truth correction. Future changes require a new proposal, issue, or
+release patch with its own validation evidence. This proposal closure does not
+approve tagging, publishing, or GitHub release creation.

docs/proposals/2026-06-08-v207-degraded-alert-ui-truth-separation.md

@@ -12,10 +12,14 @@ testing and validation branches.
 The integration version in `manifest.json` is the release-state source of truth for
 Home Assistant and HACS metadata checks.
 
-v2.0.7 is the current stable release line being prepared from `senyo888-patch-1`.
-v2.0.6 remains the previous stable release milestone on `main` until promotion,
-tagging, and GitHub release publication are completed. The rules below remain the
-active promotion model for future versions and for any maintenance patch.
+v2.0.7 is the current stable release line. Stable `2.0.7` metadata is present on
+`main`, while `senyo888-patch-1` may still carry final release-validation fixes
+ahead of `main` until those fixes are promoted. Tagging and GitHub release
+publication remain gated until final validation, promotion, and maintainer
+approval are complete. HA Lab advisory validation for commit `55dc2b9` passed on
+2026-06-23 after lab-only deploy and manual restart; it remains evidence input,
+not release authority. The rules below remain the active promotion model for future
+versions and for any maintenance patch.
 
 ## Branch Responsibilities
 
@@ -27,6 +31,9 @@ active promotion model for future versions and for any maintenance patch.
 - `vMAJOR.MINOR.PATCH`: release-verification branch for the exact matching stable
   manifest version only. For example, `v2.0.7` may carry `2.0.7`, but not
   `2.0.7-rc.1` or `2.0.8`.
+- `dependabot/*`: automated dependency-maintenance branches may inherit the
+  current stable manifest version from their base branch. They are not release
+  lanes and do not approve, tag, or publish a release.
 - Short-lived development branches, including `Bella/*`, `codex/*`, `feature/*`,
   `fix/*`, `patch/*`, and `test/*`, must not carry stable manifest versions.
 
@@ -84,7 +91,8 @@ in CI. It rejects:
 - stable versions on short-lived testing branches
 - prerelease or mismatched stable versions on `vMAJOR.MINOR.PATCH` branches
 - stable versions on unapproved branches outside `senyo888-patch-1`, `develop`, and
-  `main`, plus exact matching `vMAJOR.MINOR.PATCH` release-verification branches
+  `main`, exact matching `vMAJOR.MINOR.PATCH` release-verification branches, and
+  automated `dependabot/*` dependency-maintenance branches
 
 This is a release-boundary guard only. It does not alter runtime logic, entity
 semantics, generated dashboards, or Home Assistant services.

docs/release-governance.md

@@ -31,6 +31,8 @@
     "test/",
 )
 
+DEPENDENCY_MAINTENANCE_BRANCH_PREFIXES = ("dependabot/",)
+
 STABLE_ALLOWED_BRANCHES = {"senyo888-patch-1", "develop", "main"}
 
 
@@ -67,6 +69,10 @@ def _is_testing_branch(branch: str) -> bool:
     return branch.startswith(TESTING_BRANCH_PREFIXES)
 
 
+def _is_dependency_maintenance_branch(branch: str) -> bool:
+    return branch.startswith(DEPENDENCY_MAINTENANCE_BRANCH_PREFIXES)
+
+
 def _release_branch_version(branch: str) -> str | None:
     match = RELEASE_BRANCH_PATTERN.fullmatch(branch)
     if not match:
@@ -114,7 +120,12 @@ def main() -> int:
         )
         return 1
 
-    if not label and branch not in STABLE_ALLOWED_BRANCHES and not release_branch_version:
+    if (
+        not label
+        and branch not in STABLE_ALLOWED_BRANCHES
+        and not release_branch_version
+        and not _is_dependency_maintenance_branch(branch)
+    ):
         print(
             f"Branch '{branch}' must not carry stable version '{version}'.",
             file=sys.stderr,

scripts/check_version_governance.py

@@ -1302,15 +1302,57 @@ def _generated_card_entity_availability(hass: HomeAssistant, cards: dict) -> dic
 def _extract_generated_card_entity_ids(card: str) -> List[str]:
     entity_ids: List[str] = []
     seen: set[str] = set()
-    for match in _GENERATED_CARD_ENTITY_RE.finditer(card or ""):
+    text = card or ""
+    for match in _GENERATED_CARD_ENTITY_RE.finditer(text):
         entity_id = match.group(0)
+        if not _is_generated_card_entity_reference(text, match):
+            continue
         if entity_id in seen:
             continue
         seen.add(entity_id)
         entity_ids.append(entity_id)
     return entity_ids
 
 
+def _is_generated_card_entity_reference(card: str, match: re.Match[str]) -> bool:
+    """Return true when a generated-card match is an HA entity reference.
+
+    Card JavaScript also contains object properties such as ``zone.enabled``,
+    service names such as ``switch.toggle``, and string prefixes such as
+    ``sensor.hi_``. Those are not Home Assistant entity references and should
+    not fail release validation.
+    """
+    entity_id = match.group(0)
+    start, end = match.span()
+    if entity_id.endswith("_"):
+        return False
+
+    before = card[max(0, start - 80) : start]
+    after = card[end : min(len(card), end + 8)]
+    before_stripped = before.rstrip()
+
+    if re.search(r"(?:^|[\s{,])entity(?:_id)?:\s*$", before):
+        return True
+
+    if before_stripped.endswith(("states['", 'states["')):
+        return True
+
+    quote = card[start - 1] if start > 0 else ""
+    if quote in {"'", '"'} and after.startswith(quote):
+        if re.search(r"(?:^|[\s;])(?:const|let|var)?\s*service\s*=\s*['\"]$", before_stripped):
+            return False
+        predicate_prefixes = (
+            ".startsWith(" + quote,
+            ".endsWith(" + quote,
+            ".includes(" + quote,
+        )
+        if before_stripped.endswith(predicate_prefixes):
+            return False
+        return True
+
+    return False
+
+
 def _layouts_from_written_paths(paths: List[str]) -> set[str]:
     layouts = set()
     for path in paths:

services.py

@@ -106,7 +106,7 @@ <h1 id="hero-title">Humidity Intelligence</h1>
         <div class="section-inner two-column">
           <div>
             <p class="section-kicker">Why it exists</p>
-            <h2 id="intro-title">A balanced home routine is easier when the signals are joined up.</h2>
+            <h2 id="intro-title">Clearer home decisions start with connected environmental signals.</h2>
           </div>
           <p>
             A bathroom can go damp after a shower while the rest of the house feels
@@ -158,7 +158,7 @@ <h3>Dashboards you can trust</h3>
           <div class="gallery-heading">
             <div>
               <p class="section-kicker">Home routine examples</p>
-              <h2 id="gallery-title">Check what is happening before you act.</h2>
+              <h2 id="gallery-title">Quick Peek.</h2>
             </div>
             <a class="text-link" href="https://github.com/senyo888/Humidity-Intelligence/wiki/UI-Gallery">Browse the UI Gallery</a>
           </div>

site/index.html

@@ -3910,6 +3910,9 @@ def test_generated_card_entity_extraction_includes_embedded_js_references():
                 "    [[[",
                 "      const pause = states['timer.air_control_pause']?.state;",
                 "      const output = fanTxt('fan.kitchen_air');",
+                "      const service = 'switch.toggle';",
+                "      const prefix = id.startsWith('sensor.hi_');",
+                "      const rooms = zone && zone.enabled !== false && Array.isArray(zone?.rooms);",
                 "      const docs = 'https://github.com/senyo888/Humidity-Intelligence';",
                 "    ]]]",
             ]

tests 2/test_runtime_card_sanity.py

@@ -61,6 +61,15 @@ def test_testing_branch_still_rejects_stable_version(self) -> None:
         self.assertEqual(result, 1)
         self.assertIn("must not carry stable version", stderr)
 
+    def test_dependabot_branch_may_carry_current_stable_version(self) -> None:
+        result, stdout, stderr = self._run_check(
+            branch="dependabot/github_actions/actions/checkout-7.0.0",
+            version="2.0.7",
+        )
+
+        self.assertEqual(result, 0, stderr)
+        self.assertIn("Version governance OK", stdout)
+
     def test_active_branch_prefers_github_head_ref_over_base_ref(self) -> None:
         env = {
             "GITHUB_BASE_REF": "develop",