coulomb/the-custodian
5
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions
the-custodian/docs/changes/netkingdom-target-2026-10-16/decision-package/README.md
codex a856698b03
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Reject generated-only commits / generated-commit-guard (push) Successful in 10s
Details
docs: preserve reviewed NetKingdom session artifacts
2026-11-01 22:58:57 +01:00

1 KiB
Raw Blame History

Secrets CLI packaging source handoff

Review/apply implementation-r1.patch on c80a944. Source/source hashes, exact changed paths, scanner and build receipts are in integration-manifest-r1.json. The implementation delivers the existing wheel and exact producer verifier through an explicit reproducible bundle and offline new-prefix installer.

Seven disposable tests pass: two byte-identical builds; clean offline install and installed signature boundary; unsigned/missing/tampered refusals; exact reviewed manifest, existing-prefix and producer-source-drift refusals. Scanner is clean. No test signer is installed. The launcher fixes the bundle helper and validates its checksum before CLI import; no runtime compilation or service is added.

Proof bundle is retained under /tmp/secrets-cli-package-proof; its exact manifest is copied here. Artifact integrity is not independent package admission. No production tool, key/trust configuration or backend privilege was changed. Root owns canonical integration/consistency; the next strict task handoff is separate.