fix(release): attest and verify desktop updates end to end - #4008

Merged

M4n5ter merged 7 commits into

mainfrom

fix/desktop-autoupdate-release-hardening

Aug 28, 2026

Commits on Aug 27, 2026

fix(release): harden desktop auto-updates
M4n5ter
committed
c30cd29
fix(release): bind publication to immutable build evidence
M4n5ter
committed
ad3b57f
fix(release): separate evidence from publication control
M4n5ter
committed
9337e56
fix(release): attest convenience updates
M4n5ter
committed
e6aabf0
test(release): consolidate trust-boundary coverage
M4n5ter
committed
161ca1a
test(release): keep only boundary evidence
M4n5ter
committed
26a9b27
fix(release): verify provenance before publication
M4n5ter
committed
31ff980