build: pin direct dependencies and classify build tooling - #13

Merged

seonghobae merged 9 commits into

docs/product-readiness-baseline-20260908from

codex/pin-direct-dependencies-issue-12

Sep 9, 2026

Commits on Sep 8, 2026

test(deps): reject mutable direct dependency specs
seonghobae
committed
80b69d6
build(deps): pin reviewed versions and isolate tooling
seonghobae
committed
cd9144f
test(ci): require exact-head CycloneDX evidence
seonghobae
committed
f6bbf9d
ci(deps): publish exact-head CycloneDX evidence
seonghobae
committed
a3592da
docs(deps): bind supply-chain evidence and gaps
seonghobae
committed
c0c2b0a
test(ci): isolate dependency evidence artifact
seonghobae
committed
3c8ac64
ci(deps): isolate CycloneDX artifact
seonghobae
committed
00b89fb
docs(deps): record artifact isolation evidence
seonghobae
committed
71fe275
test(deps): close exact-head review gaps
seonghobae
committed
eff7ec1