A Studio build is stamped and shared from a static host

outcome

Let a stakeholder open the Studio of a pull request from a link, and let its author know which graph and which build the stakeholder read.

rule line 25 · specs/consumers/spec-studio.sharing.sdp.md:25

A build is shared by uploading its page set to a static host, such as S3, Vercel or GitHub Pages.

rule.buildWritesNoStamp line 26 · specs/consumers/spec-studio.sharing.sdp.md:26

The Studio's build writes no stamp, so every page and data file it writes stays a function of the graph and its named inputs; the stamp is written apart, after the build.

spec:consumers.spec-studio.sharing.stamp-written-apart · enabled

rule.stampVerb line 27 · specs/consumers/spec-studio.sharing.sdp.md:27

sdp stamp [root] [--commit SHA] [--source TEMPLATE] writes stamp.json into <root>/generated/spec-studio/ and touches no other file but its staging file stamp.json.tmp beside it: it removes a leftover staging file, writes the stamp there and renames it into place, and removes it again when the stamp fails after writing it. It derives no graph, renders no page, and refuses with exit 1 when the root holds no page set or when generated/ or the page set is a symbolic link; a stamp without --commit names the commit unknown.

spec:consumers.spec-studio.sharing.stamp-written-apart · enabled

Cited at

• src/cli/stamp-command.ts:81
• test/cli-write-boundaries.test.ts:319

rule.stampLifetime line 28 · specs/consumers/spec-studio.sharing.sdp.md:28

A later build removes the page set and its stamp together, so no stamp outlives the build it names.

spec:consumers.spec-studio.sharing.stamp-written-apart · enabled

Cited at

• test/skills.test.ts:1876

rule.publishingStep line 29 · specs/consumers/spec-studio.sharing.sdp.md:29

Publishing a preview and writing its stamp are a step the adopter's CI runs, never the Studio's build; the shell reads the stamp as spec:consumers.spec-studio.shell#rule.stamp states.

no example exercises it

rule.previewWorkflow line 30 · specs/consumers/spec-studio.sharing.sdp.md:30

The package's repository ships a reusable GitHub Actions workflow that, on a pull request, installs the caller's dependencies, runs sdp studio with the caller's root, exclusions and inputs, runs sdp stamp with the checked-out merge commit and the repository's source template, and uploads the page set as a CI artifact; it opens no pull request, writes no comment and holds no credential beyond the run's own token.

no example exercises it

rule.previewDeploy line 31 · specs/consumers/spec-studio.sharing.sdp.md:31

The workflow deploys the stamped page set under /preview/<pr-number>/ only when the caller asks for it and the repository serves a host from the branch the workflow writes to; a pull request from a fork never deploys.

no example exercises it

rule.previewPublished line 32 · specs/consumers/spec-studio.sharing.sdp.md:32

A deploy that pushes a preview succeeds only once the host has built the commit it pushed; a host build that errors, or does not finish within the wait, fails the job, so a green deploy means the preview is live.

no example exercises it

rule.sourceLinks line 33 · specs/consumers/spec-studio.sharing.sdp.md:33

Every recorded file and line a page shows as text carries its file and line as data on its element, and when a loaded stamp names a source template the stamp element links each to the template with the file and line filled in; without such a stamp, or through file://, each stays text.

no example exercises it

1 unkeyed rule.

Verifying examples

Given a page set the studio command wrote at an extraction root
When the stamp command runs with the commit {commit: "0123abc"} and the source template {source: "https://example.test/blob/0123abc/{file}#L{line}"}
Then the stamp names the corpus commit {corpusCommit: "0123abc"}
Then every page file stays byte-identical: {pagesUntouched: true}
Then a later studio run keeps the stamp: {stampSurvives: false}

Example space

Given a page set the studio command wrote at an extraction root
When the stamp command runs with the commit {commit:string} and the source template {source:string}
Then the stamp names the corpus commit {corpusCommit:string}
Then every page file stays byte-identical: {pagesUntouched:boolean}
Then a later studio run keeps the stamp: {stampSurvives:boolean}

buildStamp line 36 · specs/consumers/spec-studio.sharing.sdp.md:36

{ schemaVersion: string; corpusCommit: string; engine: string; builtAt: string; source?: string } in stamp.json at the page set's root, written by sdp stamp and never by the Studio's build: the graph schema version of the stamping engine, the commit --commit names or unknown, the engine sdp --version names, the time the step ran as an ISO 8601 UTC timestamp to the second, and the source template --source names, when given.

no citation recorded

sourceTemplate line 37 · specs/consumers/spec-studio.sharing.sdp.md:37

a URL holding {file} and optionally {line}, such as https://github.com/<owner>/<repo>/blob/<commit>/{file}#L{line}, into which the shell writes a recorded root-relative file and its line; sdp stamp refuses a template without {file}.

previewWorkflow line 38 · specs/consumers/spec-studio.sharing.sdp.md:38

.github/workflows/studio-preview.yml, triggered by workflow_call and called as uses: libar-dev/software-delivery-protocol/.github/workflows/studio-preview.yml@<ref>.

no citation recorded

workflowInputs line 39 · specs/consumers/spec-studio.sharing.sdp.md:39

root (default .), exclude (root-relative prefixes, one per line), node-version (default 20), install (the install command, default npm ci), sdp (the command that runs the installed sdp, default npx sdp), runs-artifact (the name of an artifact an earlier job uploaded holding CTRF reports, each passed as --runs), diff (a boolean: write the graph of the pull request's base commit in a separate worktree, with that commit's own install and engine, and pass it as --base labelled base <short commit>), and deploy (a boolean, default false).

no citation recorded

previewArtifact line 40 · specs/consumers/spec-studio.sharing.sdp.md:40

the artifact spec-studio-pr-<pr-number>, holding the stamped page set.

workflowSource line 41 · specs/consumers/spec-studio.sharing.sdp.md:41

the workflow stamps with the checked-out merge commit and the source template <server>/<repository>/blob/<merge commit>/<root>/{file}#L{line}, the root and its slash left out when the root is ..

previewPath line 42 · specs/consumers/spec-studio.sharing.sdp.md:42

a pull request's preview is served at <host>/preview/<pr-number>/, which the workflow writes as the folder preview/<pr-number>/ of the gh-pages branch, the branch GitHub Pages serves when a repository enables Pages from it.

stampElement line 43 · specs/consumers/spec-studio.sharing.sdp.md:43

the page element sdp-stamp, once its stamp loads, also sets data-corpus-commit on itself and, when the stamp names a source template, wraps each code element carrying data-source-file and data-source-line in a link to the template with {file} and {line} filled in, the file percent-encoded by path segment; without a template it links nothing.

sourceMark line 46 · specs/consumers/spec-studio.sharing.sdp.md:46

a recorded file and line written as <file>:<line> in a code element carrying data-source-file and data-source-line, beside its copy action.

Verifier bindings

• spec:consumers.spec-studio.sharing.stamp-written-apart · The stamp is written beside the page set, and a later build removes it · declared · example enabled · specs/consumers/spec-studio.sharing.stamp-written-apart.sdp.md

  External run evidence from test/studio-s4.test.ts

  Test anchors: test:protocol.run-absolute, test:protocol.run-external, test:protocol.run-unjoined, test:protocol.studio-graph-only, test:protocol.studio-inputs-both-given, test:protocol.studio-stamp-apart. Specs verified by those bindings: spec:consumers.spec-studio.data.inputs, spec:consumers.spec-studio.data.inputs.both-given, spec:consumers.spec-studio.data.inputs.graph-only, spec:consumers.spec-studio.runs-page, spec:consumers.spec-studio.runs-page.external-evidence, spec:consumers.spec-studio.sharing, spec:consumers.spec-studio.sharing.stamp-written-apart, spec:observation.run-evidence, spec:observation.run-evidence.absolute-path-joins, spec:observation.run-evidence.unanchored-file-unjoined.

  Run 2: external run evidence from vitest 4.1.10

  Build: CI 439 · Branch: docs/articles-refresh-1 · Commit: 61576184ea9f39b7f91c51fef5ff991b0bf2d0e6 · Start: 2026-11-04T07:59:39.962Z · Stop: 2026-11-04T08:03:39.928Z

  Name	Suite	Result	Duration
  recipe 45 joins normalized paths, preserves records and graph facts, and diagnoses other inputs	not recorded	passed	69.67 ms
  renders external run evidence with result rows, metadata, diagnostics and conditional navigation	not recorded	passed	84.97 ms
  reads repeated --runs before extraction and leaves input bytes untouched	not recorded	passed	116.31 ms
  stamps apart, touches no page, refuses bad sources and removes the stamp on rebuild	not recorded	passed	87.69 ms
  executes the bound example against a fresh world	A test whose reporter wrote an absolute path joins its anchored file (spec:observation.run-evidence.absolute-path-joins)	passed	11.8 ms
  executes the bound example against a fresh world	A test in a file with no test anchor is reported as unjoined (spec:observation.run-evidence.unanchored-file-unjoined)	passed	12.06 ms
  executes the bound example against a fresh world	The runs page shows a run as external evidence from a test file (spec:consumers.spec-studio.runs-page.external-evidence)	passed	21.87 ms
  executes the bound example against a fresh world	Without inputs the page set is the graph's alone (spec:consumers.spec-studio.data.inputs.graph-only)	passed	70.61 ms
  executes the bound example against a fresh world	Both inputs add their pages, named, and the same inputs write the same bytes (spec:consumers.spec-studio.data.inputs.both-given)	passed	124.05 ms
  executes the bound example against a fresh world	The stamp is written beside the page set, and a later build removes it (spec:consumers.spec-studio.sharing.stamp-written-apart)	passed	60.95 ms
  the stamp links source locations only after an HTTP stamp loads, encoding path segments	not recorded	passed	8.05 ms
  recipe 45 picks the longest suffix and scopes through enabled examples at file grain	not recorded	passed	13.53 ms
  ships a reusable preview, disabled by default, and deploys its own pull requests with runs and diff	not recorded	passed	17.38 ms
  the tests lens counts file results once per Spec and names every run input	not recorded	passed	37.44 ms
  the Pack sentence keeps the graph's binding limit and positively names external evidence	not recorded	passed	29.77 ms
  run metadata labels build and branch, and absent fields read not recorded	not recorded	passed	0.71 ms
  unjoined records escape outside names and explain both reason codes in words	not recorded	passed	18.61 ms
  run files show the file alone, bindings and Suite, with one header per run	not recorded	passed	17.78 ms
  recipe 45 does not join a suffix inside a path segment	not recorded	passed	4.29 ms
  stamp defaults to unknown and a stamped page set passes check-clean	not recorded	passed	67.56 ms
  every reusable preview job's permissions fit the CI caller's grant	not recorded	passed	19.42 ms
  PR checks and preview stamps name the same default merge checkout	not recorded	passed	16.05 ms
  preview download is optional and cancelled or skipped checks do not call it	not recorded	passed	16.59 ms
  deploy checks the enabled Pages source before writing: gh-pages	not recorded	passed	21.31 ms
  deploy checks the enabled Pages source before writing: main	not recorded	passed	25.62 ms
  deploy checks the enabled Pages source before writing: disabled	not recorded	passed	12.32 ms
  deploy succeeds only once Pages publishes the pushed commit: an unrelated errored build is newest	not recorded	passed	111.37 ms
  deploy succeeds only once Pages publishes the pushed commit: a retried build follows an errored one	not recorded	passed	37.58 ms
  deploy succeeds only once Pages publishes the pushed commit: the build errors	not recorded	passed	41.82 ms
  deploy succeeds only once Pages publishes the pushed commit: the commit is never built	not recorded	passed	735.47 ms
  deploy succeeds only once Pages publishes the pushed commit: the answer arrives after the wait	not recorded	passed	1540.55 ms
  preview still stamps and uploads rendered pages when evidence is absent and validation fails	not recorded	passed	130.42 ms
  places external file rows under their verifier and renders shared files once	not recorded	passed	61.71 ms
  accepts the preview workflow's base and run flags together	not recorded	passed	56.64 ms
  formats external run durations to at most two decimals on every page	not recorded	passed	18.88 ms
  preview stamps only this invocation's page set: malformed-runs	not recorded	passed	800.83 ms
  preview stamps only this invocation's page set: escaping-parent	not recorded	passed	53.99 ms
  preview stamps only this invocation's page set: fresh-findings	not recorded	passed	1732.01 ms

Requirement drawing

Decisions

No decision record named.

• component:protocol.cli · entry points, shared build and publication · src/cli/build-command.ts:31 · layer edge · context protocol

  Uses

  • component:protocol.adapters · external runtime and source adapters · src/adapters/vitest.ts:23 · layer adapter · context protocol
  • component:protocol.codegen · contracts and registrar output · src/codegen/contracts.ts:671 · layer application · context protocol
  • component:protocol.extract · the carrier and source pipeline · src/extract/index.ts:197 · layer application · context protocol
  • component:protocol.graph · the one graph and its semantic decisions · src/graph/schema.ts:34 · layer domain · context protocol
  • component:protocol.import · canonical conversion with a fidelity boundary · src/import/import.ts:45 · layer application · context protocol
  • component:protocol.model · the authored contracts and stable ids · src/model/anchors.ts:100 · layer domain · context protocol
  • component:protocol.projections · read-only output, layout and owned publication · src/projections/design-review.ts:29 · layer edge · context protocol
  • component:protocol.reader · the typed graph contract and body evaluator · src/reader/reader.ts:697 · layer application · context protocol
  • component:protocol.validate · one finding currency and ordered checks · src/validate/validators.ts:76 · layer domain · context protocol
• component:protocol.studio-elements · optional browser behavior and proposal handoff · src/studio-elements/index.ts:13 · layer edge · context protocol

  Uses

  • component:protocol.projections · read-only output, layout and owned publication · src/projections/design-review.ts:29 · layer edge · context protocol
  • component:protocol.reader · the typed graph contract and body evaluator · src/reader/reader.ts:697 · layer application · context protocol
• impl:protocol.stamp-command · writes the publishing stamp without extraction or rendering · src/cli/stamp-command.ts:9

  Component: component:protocol.cli · entry points, shared build and publication · src/cli/build-command.ts:31 · layer edge · context protocol

  Uses

  • impl:protocol.schema-version · versioned graph nodes, claims, edges and located evidence · src/graph/schema.ts:9
• impl:protocol.studio-preview-workflow · asserts the reusable Studio preview workflow and Protocol CI caller · test/studio-s4.test.ts:744

  Uses

  None.

• impl:protocol.studio-stamp · resolves published stamps and source links in the browser · src/studio-elements/stamp.ts:30

  Component: component:protocol.studio-elements · optional browser behavior and proposal handoff · src/studio-elements/index.ts:13 · layer edge · context protocol

  Uses

  None.

Runtime observation: not tracked.

Runtime observation: not tracked.

Build attestations: not tracked.

Deployments: not tracked.

Bills of materials: not tracked.