Repository navigation

feat(perf): attest exact product performance evidence - #2166

Draft

seonghobae wants to merge 64 commits into

mainfrom

feat/product-performance-attestation

Draft

feat(perf): attest exact product performance evidence#2166
seonghobae wants to merge 64 commits into
mainfrom
feat/product-performance-attestation

Commits on Sep 13, 2026
- test(attestation): require called-workflow OIDC identity
  seonghobae
  committed
  2b58ad4
- test(attestation): contract inline OIDC callee identity
  seonghobae
  committed
  4dce888
- fix(attestation): resolve reusable workflow source from OIDC
  seonghobae
  committed
  89b6340
- test(attestation): bind trusted checkout to callee OIDC SHA
  seonghobae
  committed
  0f70e92
- docs(attestation): record reusable workflow OIDC source identity
  seonghobae
  committed
  ba1bc50
- docs(architecture): show reusable attestation source trust
  seonghobae
  committed
  1904842
- docs(changelog): record OIDC reusable workflow identity
  seonghobae
  committed
  874f44f
- test(perf-attestation): require authenticated reusable workflow
  seonghobae
  committed
  46cf5fa
- test(perf-attestation): define sealed evidence verifier contract
  seonghobae
  committed
  a2721f8
- feat(perf-attestation): verify sealed evidence as inert data
  seonghobae
  committed
  f0f5161
- feat(perf-attestation): add authenticated evidence workflow
  seonghobae
  committed
  28da8dc
- ci(perf-attestation): enforce exact verifier quality
  seonghobae
  committed
  3855fa2
- ci(perf-attestation): reuse canonical hash-locked dependencies
  seonghobae
  committed
  1ccca26
- fix(perf-attestation): fail closed on evidence path ancestry
  seonghobae
  committed
  2b18a21
- test(perf-attestation): cover fail-closed verifier edges
  seonghobae
  committed
  5d960ee
- test(perf): reject ambiguous PASS attestation receipt
  seonghobae
  committed
  cfa040c
- fix(perf): distinguish evidence validity from performance verdict
  seonghobae
  committed
  cc33ecd
- test(perf): assert structural evidence validity semantics
  seonghobae
  committed
  fb9e275
- test(perf): reject non-CWL attestation callers
  seonghobae
  committed
  183757b
- fix(perf): restrict central attestations to CWL callers
  seonghobae
  committed
  5c09a98
- test(perf): require bounded inert artifact materialization
  seonghobae
  committed
  b763238
- test(perf): cover bounded artifact materializer
  seonghobae
  committed
  ed83f90
- feat(perf): add bounded inert artifact materializer
  seonghobae
  committed
  992a44c
- fix(perf): bound artifact before inert extraction
  seonghobae
  committed
  f332177
- ci(perf): gate bounded artifact materializer
  seonghobae
  committed
  84b4dc4
- test(perf): align owner gate with bounded download step
  seonghobae
  committed
  a7ed6ee
- docs(perf): record authenticated bounded evidence boundary
  seonghobae
  committed
  3835ba5
- docs(perf): changelog bounded performance attestation
  seonghobae
  committed
  0919c1a
- refactor(perf): simplify bounded materialization invariants
  seonghobae
  committed
  9c4fc53
- fix(perf): remove redundant directory chmod false positive
  seonghobae
  committed
  56d9be3
- test(perf): close materializer security edge coverage
  seonghobae
  committed
  4444548
- fix(perf): normalize corrupt ZIP member failures
  seonghobae
  committed
  3f4894c
- test(perf): cover corrupt ZIP member failure
  seonghobae
  committed
  93d26bc
- fix(perf): preserve multiline verification commands
  seonghobae
  committed
  dac0859
- test(perf): cover sealed artifact CLI parser
  seonghobae
  committed
  b48c88e
- merge(main): reconcile attestation identity with protected sidecar pin
  seonghobae
  committed
  73f5b9d
- merge(attestation): adopt reconciled reusable-workflow identity parent
  seonghobae
  committed
  6889a38
- test(perf): bind attested profile to sealed evidence
  seonghobae
  committed
  e24e9b9
- test(perf): execute profile binding regression
  seonghobae
  committed
  09720f3
- test(perf): require profile binding in both trust jobs
  seonghobae
  committed
  7b372df
- fix(perf): bind attested profile to sealed evidence
  seonghobae
  committed
  abfdf11
- fix(perf): enforce profile binding in verifier and signer
  seonghobae
  committed
  4c2c468
- test(perf): cover matching profile binding path
  seonghobae
  committed
  df06581
- test(perf): bind attested source SHA to sealed evidence
  seonghobae
  committed
  5ad9cc6
- fix(perf): bind attested source SHA to sealed evidence
  seonghobae
  committed
  6fdc273
- fix(perf): couple source identity to commercial profile binding
  seonghobae
  committed
  4c00f63
- test(perf): align commercial identity binding contract
  seonghobae
  committed
  cd737f4
- merge(main): reconcile attestation identity with protected Noema fixes
  seonghobae
  committed
  834d516
- merge(parent): restack performance attestation on reconciled identity
  seonghobae
  committed
  ddd92ee
- test(perf): require authenticated caller workflow identity
  seonghobae
  committed
  b04ae6b
- fix(perf): bind signed predicate to authenticated caller workflow
  seonghobae
  committed
  14405c1
- test(perf): cover caller workflow identity binding
  seonghobae
  committed
  2af8d7c
- fix(perf): authenticate caller workflow in central signer
  seonghobae
  committed
  78c7b52
- docs(perf): record authenticated caller workflow boundary
  seonghobae
  committed
  6fb6676
- fix(perf): normalize corrupt ZIP stream failures
  seonghobae
  committed
  8238e29
- test(perf): cover corrupt ZIP stream exceptions
  seonghobae
  committed
  fabae50
Commits on Sep 15, 2026
- fix(ci): execute corrupt performance artifact regressions
  seonghobae
  committed
  cc44ddb
- merge(main): adopt current protected baseline
  seonghobae
  committed
  b5966ea
- merge(stack): adopt reusable-attestation parent
  seonghobae
  committed
  759c51f
- test(perf): assert validated caller workflow identity
  seonghobae
  committed
  db4962a
Commits on Sep 17, 2026
- merge(main): sync PR #2166 onto current protected main
  seonghobae
  committed
  ea49a16
Commits on Sep 20, 2026
- merge(main): reconcile reusable attestation identity owner
  seonghobae
  committed
  a20726c
- merge(base): restack product attestation on identity owner
  seonghobae
  committed
  43aa19a
Commits on Sep 28, 2026
- merge(main): restack product performance attestation onto protected main
  seonghobae
  committed
  ca365e5

Commits

Commits on Sep 13, 2026

Commits on Sep 15, 2026

Commits on Sep 17, 2026

Commits on Sep 20, 2026

Commits on Sep 28, 2026