Skip to content

Attest the non-Brain public assets for Brain release B - #82

Merged
Deicyde merged 2 commits into
mainfrom
claude/attest-public-assets-b
Oct 18, 2026
Merged

Deicyde merged 2 commits into
mainfrom
claude/attest-public-assets-b

Conversation

@Deicyde

@Deicyde Deicyde commented Oct 17, 2026 •

Copy link
Copy Markdown
Owner

Brain release B is built at main, so the promotion baseline must attest the public bytes main ships at that commit.

The release-B inventory is release A's public baseline (sha256:0ee63469…) with these changes:

It is rendered by site/ops/brain_public_baseline.py attest. The other 2,697 entries are unchanged, and _headers (PR #84) is build output that is excluded from the baseline.

Merge order: #84, then #85, then this PR. This PR's merge commit is the authority commit C for release B. Freeze main from then until P1C.

Checks:

  • exact entry diff;
  • sha256 and byte counts equal the source files;
  • a trial freeze passed for the first commit's tree (2,699 files).

Release B is built at the current main, so the promotion baseline must attest
the public bytes main now ships. Since release A (2eb31ba) only two
non-Brain public assets changed: assets/script.js (from site/assets/script.js)
and assets/editor.js (from wiki/assets/editor.js). This inventory is release
A's public baseline (sha256:0ee63469...) with those two files replaced,
rendered by site/ops/brain_public_baseline.py attest. The other 2,697 entries
are unchanged.
PR #85 adds site/assets/atlas.css and atlas.js, which build-public copies to
assets/. The release-B inventory must list them, so release B's commit must
include #84 and #85 before this one. The build-generated _headers file
(#84) stays out of the baseline payload.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant