coulomb/the-custodian
5
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions
the-custodian/docs/changes/netkingdom-target-2026-10-16/decision-package
History
codex a856698b03
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Reject generated-only commits / generated-commit-guard (push) Successful in 10s
Details
docs: preserve reviewed NetKingdom session artifacts
2026-11-01 22:58:57 +01:00
..
canonical-integration.json docs: record verified NetKingdom source restructuring and remaining native gates 2026-10-16 09:25:50 +02:00
implementation-r1.patch docs: preserve reviewed NetKingdom session artifacts 2026-11-01 22:58:57 +01:00
integration-manifest-r1.json docs: record verified NetKingdom source restructuring and remaining native gates 2026-10-16 09:25:50 +02:00
original-owner-dirty.patch docs: preserve reviewed NetKingdom session artifacts 2026-11-01 22:58:57 +01:00
proof-build-r1.json docs: preserve reviewed NetKingdom session artifacts 2026-11-01 22:58:57 +01:00
README.md docs: preserve reviewed NetKingdom session artifacts 2026-11-01 22:58:57 +01:00
scanner-r1.json docs: preserve reviewed NetKingdom session artifacts 2026-11-01 22:58:57 +01:00
source-provenance.json docs: preserve reviewed NetKingdom session artifacts 2026-11-01 22:58:57 +01:00

README.md

Secrets CLI packaging source handoff

Review/apply implementation-r1.patch on c80a944. Source/source hashes, exact changed paths, scanner and build receipts are in integration-manifest-r1.json. The implementation delivers the existing wheel and exact producer verifier through an explicit reproducible bundle and offline new-prefix installer.

Seven disposable tests pass: two byte-identical builds; clean offline install and installed signature boundary; unsigned/missing/tampered refusals; exact reviewed manifest, existing-prefix and producer-source-drift refusals. Scanner is clean. No test signer is installed. The launcher fixes the bundle helper and validates its checksum before CLI import; no runtime compilation or service is added.

Proof bundle is retained under /tmp/secrets-cli-package-proof; its exact manifest is copied here. Artifact integrity is not independent package admission. No production tool, key/trust configuration or backend privilege was changed. Root owns canonical integration/consistency; the next strict task handoff is separate.