fix(release): gate release identity, model/updater admission, and platform trust - #1126

Draft

seonghobae wants to merge 312 commits into

fix/trusted-release-version-identity-960

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 14, 2026

Commits on Sep 15, 2026

Commits on Sep 16, 2026

fix(distribution): expose in-flight staging path
seonghobae
committed
8564741
test(distribution): bind redirects to full provisional identity
seonghobae
committed
fd29aa1
fix(distribution): bind redirect token to full candidate identity
seonghobae
committed
6b0fe81
docs(distribution): trace full redirect identity binding
seonghobae
committed
b79a250
test(distribution): preserve candidate identity through sealing
seonghobae
committed
9901b2d
fix(distribution): bind sealed artifacts to release identity
seonghobae
committed
e42f6e6
test(distribution): read sealed artifact through owned descriptor
seonghobae
committed
3ef753f
docs(distribution): trace sealed candidate identity binding
seonghobae
committed
50f072e
test(distribution): redact sealed transport diagnostics
seonghobae
committed
dea8f7b
docs(distribution): trace sealed transport diagnostics
seonghobae
committed
1136d34
test(distribution): reject prerelease TLS boundary drift
seonghobae
committed
dbe7988
fix(distribution): compare TLS advisory prereleases correctly
seonghobae
committed
98a53d6
docs(distribution): trace prerelease advisory boundary repair
seonghobae
committed
a3737a3
test(distribution): align prerelease rejection receipt
seonghobae
committed
269bd4a
docs(distribution): record prerelease regression verification
seonghobae
committed
c85402f
test(distribution): reject transitive HTTP source substitution
seonghobae
committed
340e7eb
fix(distribution): bind full HTTP lock graph provenance
seonghobae
committed
92162da
docs(distribution): trace full HTTP lock provenance
seonghobae
committed
6cded37
test(distribution): cover lock provenance admission edges
seonghobae
committed
5324118
docs(distribution): record lock provenance edge evidence
seonghobae
committed
4920cf2
test(distribution): reject reqwest feature forwarding
seonghobae
committed
ed5be00
fix(distribution): block reqwest feature forwarding
seonghobae
committed
bc56faa
test(distribution): cover weak reqwest feature forwarding
seonghobae
committed
0f74972
docs(distribution): trace reqwest feature forwarding gate
seonghobae
committed
ae98559
test(distribution): document integration test crates
seonghobae
committed
da5c690
fix(release): revalidate publication asset list
seonghobae
committed
2cd906c
docs(distribution): explain consumed staging cleanup
seonghobae
committed
528ba04

Commits on Sep 29, 2026