Repository navigation

Publish attested release binaries with provenance and SBOMs - #1435

Merged

prk-Jr merged 49 commits into

mainfrom

feature/binary-attestations-phase1

Nov 11, 2026

Merged

Publish attested release binaries with provenance and SBOMs#1435
prk-Jr merged 49 commits into
mainfrom
feature/binary-attestations-phase1

Commits on Oct 22, 2026
- Phase the reviewed binary attestation contract
  prk-Jr
  committed
  b772cd3
- Map binary attestation phases to review boundaries
  prk-Jr
  committed
  be81ca8
- Build and attest phased release binaries
  prk-Jr
  committed
  ca06217
- Document binary verification and release deployment
  prk-Jr
  committed
  4dd2171
- Align Phase 1 signing and publication with the reviewed contract
  prk-Jr
  committed
  3c41de5
- Allow the exact GitHub Actions build type reference host
  prk-Jr
  committed
  cb82e4b
- Document Phase 1 compatibility and verification boundaries
  prk-Jr
  committed
  41896cb
- Avoid stale API connections during release verification
  prk-Jr
  committed
  ca902b6
- Clarify rehearsed release status and CLI verification
  prk-Jr
  committed
  f3a8696
- Retry transient post-publication verification reads
  prk-Jr
  committed
  922c221
- Document offline verification and completed release rehearsal
  prk-Jr
  committed
  ff9f9c4
- Add production Axum assets and release startup checks
  prk-Jr
  committed
  7c7f4b0
- Disable rustup self-updates in temporary build homes
  prk-Jr
  committed
  b818b59
- Expose pinned compiler binaries in the GNU builder
  prk-Jr
  committed
  16d6690
Commits on Oct 23, 2026
- Supply runtime trust data to Axum startup checks
  prk-Jr
  committed
  937214a
- Record the seven-binary release rehearsal
  prk-Jr
  committed
  6824226
- Derive immutable release build facts
  prk-Jr
  committed
  e907e26
- Allow runtime Axum bind address overrides
  prk-Jr
  committed
  72b7e1e
- Harden release eligibility and artifact validation
  prk-Jr
  committed
  81a5a72
- Align release documentation and reference-host policy
  prk-Jr
  committed
  39a769c
- Reduce startup logging and align runtime port aliases
  prk-Jr
  committed
  e22d700
- Harden release verification and preflight boundaries
  prk-Jr
  committed
  2cc39ec
- Record rehearsal failure and release recovery checks
  prk-Jr
  committed
  7a05940
- Record the successful binary attestation rehearsal
  prk-Jr
  committed
  f84ab21
- Handle attestation availability and verify published bytes
  prk-Jr
  committed
  149754d
- Record the successful ninth attestation rehearsal
  prk-Jr
  committed
  f66da48
- Clarify final release verification notes (docs-only)
  prk-Jr
  committed
  a501d1b
Commits on Oct 26, 2026
- Merge current main and clarify bind diagnostics
  prk-Jr
  committed
  afdc928
Commits on Oct 27, 2026
Commits on Oct 28, 2026
- Record the main-merge Phase 1 rehearsal
  prk-Jr
  committed
  2015231
- Record two independent Phase 1 spec review rounds
  prk-Jr
  committed
  c9a6117
- Merge branch 'main' into feature/binary-attestations-phase1
  prk-Jr
  authored
  4940928
Commits on Oct 29, 2026
- Address attested release review feedback
  prk-Jr
  committed
  79b1188
- Merge branch 'main' into feature/binary-attestations-phase1
  prk-Jr
  authored
  990509b
Commits on Nov 2, 2026
- Address maintainer review of Phase 1 attested releases
  prk-Jr
  committed
  c827eb2
- Merge main into feature/binary-attestations-phase1
  prk-Jr
  committed
  5f0139b
- Record Phase 1 fork rehearsal .22 at the current head
  prk-Jr
  committed
  890acd2
- Merge main into feature/binary-attestations-phase1
  prk-Jr
  committed
  029f204
- Bound release-attestation availability checks by their deadline
  prk-Jr
  committed
  69b74e2
- Merge main into feature/binary-attestations-phase1
  prk-Jr
  committed
  ba54b27
Commits on Nov 3, 2026
- Address second maintainer review of Phase 1 attested releases
  prk-Jr
  committed
  54d10bb
Commits on Nov 5, 2026
- Address third maintainer review of Phase 1 attested releases
  prk-Jr
  committed
  07c2bdf
- Raise the bundle check output limit and pin its real output size
  prk-Jr
  committed
  739016b
- Test the remaining publisher and SPDX guards
  prk-Jr
  committed
  3e2dd48
- Refuse release tags on commits that are on no branch
  prk-Jr
  committed
  861ed76
Commits on Nov 10, 2026
- Address fourth maintainer review of Phase 1 attested releases
  prk-Jr
  committed
  3e6bb0f
Commits on Nov 11, 2026
- Address release review and integrate main
  prk-Jr
  committed
  a94ddd3

Commits

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 26, 2026

Commits on Oct 27, 2026

Commits on Oct 28, 2026

Commits on Oct 29, 2026

Commits on Nov 2, 2026

Commits on Nov 3, 2026

Commits on Nov 5, 2026

Commits on Nov 10, 2026

Commits on Nov 11, 2026