feat(release): deliver descriptor-pinned reproducible evidence

[seonghobae]

Consolidated release-evidence slice

This Draft is the authoritative replacement for former intermediate #55/#56. The unchanged final source already contains the reproducible-build feature plus the later descriptor-relative publication and artifact-identity hardening, so protected main does not need to pass through known superseded security states.

Bounded implementation

The source uses governed pure-Python uv_build, rebuilds the exact source twice from clean archives under deterministic inputs, proves wheel/sdist byte identity, keeps PR verification read-only and separate from publication/attestation authority, bounds artifact enumeration/hashing, publishes manifests through descriptor-relative no-follow traversal and atomic rename/synchronization, and binds verification to held file descriptors plus device/inode/type/size/mtime/ctime identity. Path traversal, symlink substitution, membership drift, same-name inode replacement, in-place identity change, and unsupported no-follow capability fail closed.

No package publication, release attestation, OIDC grant, model credential, or other release write authority is introduced.

Current exact state

• Head: 6a6fac2a99134f2bf0271d0d550dffd36ddb6d9c.
• Exact current base: feat(tenant): isolate durable lifecycle state #53 head f6f328a8b9f7db57c5286be00c854fafc0b5bbf8.
• GitHub reports Draft and mergeable.
• Pre-consolidation CI 31283564618 and Release Acceptance 31283564708 are historical development provenance from the former base only and are not final evidence for the current retargeted relation.
• feat(release): prove reproducible artifact identity #55/fix(release): pin manifest writes to directory descriptors #56 are closed unmerged as superseded; their checks/reviews do not transfer.

Dependency chain

Current order is:

.github#790 -> #53 -> this PR -> #58 -> #59 -> #60 -> #92 -> #94 -> #95 -> #96 -> #97.

Keep Draft while #53 is unintegrated. After #53 reaches protected main, reconcile/retarget only when integration correctness requires it and reacquire every required exact-head/exact-base CI, release-acceptance, security, dependency, SBOM/provenance, packaging, semantic-review, branch-policy, and repository-policy gate.

Merge only when the unchanged final head has zero valid unresolved findings and every review/approval requirement actually imposed by live repository/CWL policy is satisfied. The protected code-owner review gate is disabled/on hold for the current solo-maintainer state and must not be inferred as a universal approval requirement. No predecessor/old-base/generated-merge/queued/pending/skipped/cancelled/absent/stale/status-only/author-only/synthetic-only evidence is final acceptance.

[seonghobae]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[seonghobae]

@coderabbitai review

Please review exact current head 6a6fac2a99134f2bf0271d0d550dffd36ddb6d9c against exact predecessor #53 head f6f328a8b9f7db57c5286be00c854fafc0b5bbf8. Focus on the consolidated release-evidence result (descriptor-relative/no-follow publication, descriptor-bound verification, reproducibility, bounded evidence, and read-only release authority). Do not transfer findings/evidence from superseded #55/#56.

[coderabbitai]

@seonghobae I will review the requested exact head comparison. I will limit the review to the consolidated release-evidence implementation. I will not transfer findings or acceptance evidence from superseded PRs #55 or #56.

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.