docs(release): define immutable supply-chain boundary - #925

Draft

seonghobae wants to merge 47 commits into

mainfrom

feat/immutable-release-supply-chain

Commits on Sep 3, 2026

docs(adr): define immutable release supply-chain boundary
seonghobae
committed
1971304
docs(release): record immutable release gates
seonghobae
committed
d0e82b6
docs(adr): map release operator contract to ADR 0358
seonghobae
committed
42c10c1
docs(release): add authoritative supply-chain references
seonghobae
committed
72d9985
docs(adr): trace release standards to ADR 0358
seonghobae
committed
0eea515
test(adr): reject duplicate supporting-document mappings
seonghobae
committed
98af84b
fix(adr): deduplicate supporting-document authority map
seonghobae
committed
4552ac0
test(release): require immutable-release admission gate
seonghobae
committed
f25677f
fix(release): fail closed on mutable GitHub release policy
seonghobae
committed
2e2a6cf
docs(release): gate publication on immutable-release policy
seonghobae
committed
28fd4bc
docs(release): trace immutable-release admission sources
seonghobae
committed
52f43c9
test(release): require publish-boundary immutability recheck
seonghobae
committed
0174382
fix(release): revalidate immutable tag at publish boundary
seonghobae
committed
374a490
fix(release): close preflight-to-publish TOCTOU window
seonghobae
committed
adc564d
docs(release): correct artifact-attestation reference
seonghobae
committed
a15fd04
docs(release): trace publish-boundary revalidation
seonghobae
committed
a7c5753
test(release): require annotated-tag commit peeling
seonghobae
committed
f0ec13f
docs(release): peel annotated tags to source commits
seonghobae
committed
f94ebb0
docs(adr): define annotated-tag commit identity
seonghobae
committed
a92012e
docs(release): clarify annotated-tag target type
seonghobae
committed
b4715a7
docs(doctoring): trace annotated-tag identity
seonghobae
committed
fa6eeb7
fix(adr): move release boundary to unused ADR 0361
seonghobae
committed
b9b0e00
fix(adr): remove collided ADR 0358 release path
seonghobae
committed
bdb2d99
fix(adr): point release supporting docs to ADR 0361
seonghobae
committed
9dbf979
fix(adr): align release operator guide with ADR 0361
seonghobae
committed
a35f61c
fix(adr): bind release traceability to ADR 0361
seonghobae
committed
0442ff7
test(adr): follow release contract at ADR 0361
seonghobae
committed
0ba5957
test(release): require identity-safe prepublication abort
seonghobae
committed
f7ed27c
docs(release): define identity-safe prepublication abort
seonghobae
committed
b97c5b9
docs(adr): fail closed on aborted release identity
seonghobae
committed
dc6b4e1
docs(doctoring): trace aborted release identity cleanup
seonghobae
committed
8a17e2a

Commits on Sep 4, 2026

docs(release): align immutable identity contract
Codex
committed
9dfb79d
test(release): pin repaired canonical attestation owner
seonghobae
committed
29a443c
docs(release): consume repaired exact-artifact owner
seonghobae
committed
d222a70
docs(adr): converge repaired attestation owner
seonghobae
committed
bca8200
docs(doctoring): record acyclic owner handoff
seonghobae
committed
8a97e52
test(release): clean exact-owner contract fixture
seonghobae
committed
c8774e9
test(release): pin publish and cleanup race controls
seonghobae
committed
099c289
docs(release): serialize immutable publication boundary
seonghobae
committed
778d776
docs(adr): close release publication race boundaries
seonghobae
committed
c5d4a0d
docs(release): correct release contract identities
seonghobae
committed
a51ed48
docs(doctoring): trace release race controls
seonghobae
committed
d0adba9
test(release): order abort identity and cleanup contract
seonghobae
committed
655ad58
test(release): enforce cleanup control ordering
seonghobae
committed
084649e
test(release): normalize wrapped contract steps
Codex
committed
3501529
chore(main): non-force converge protected #930
seonghobae
committed
18d7c8a
chore(main): non-force converge protected #931
seonghobae
committed
8cbaad5