Harden Apple release integrity and exact-source publishing - #707

Merged

PrzemyslawKlys merged 78 commits into

mainfrom

feature/apple-release-integrity

Aug 12, 2026

Commits on Aug 10, 2026

Harden Apple release provenance and recovery
PrzemyslawKlys
committed
bc6a21c
Harden Apple release integrity and source trust
PrzemyslawKlys
committed
420b54a
Close Apple release integrity gaps
PrzemyslawKlys
committed
d7c749b
Close remaining Apple release integrity gaps
PrzemyslawKlys
committed
ba5bd05
Harden Apple source and upload recovery edges
PrzemyslawKlys
committed
0b12cda
Close final Apple source and adoption gaps
PrzemyslawKlys
committed
d1f629e
Close Apple resume and package trust gaps
PrzemyslawKlys
committed
8551d5c
Close Apple source and recovery integrity gaps
PrzemyslawKlys
committed
f7b9809
Harden exact Apple archive provenance
PrzemyslawKlys
committed
f121c58
Complete immutable Apple release inputs
PrzemyslawKlys
committed
3138332
Bind complete Apple mutation policy
PrzemyslawKlys
committed
993cb27
Complete immutable Apple release execution inputs
PrzemyslawKlys
committed
fa63c89
Harden Apple export and source provenance
PrzemyslawKlys
committed
1f5d833
Harden Apple notarization and screenshot replacement integrity
PrzemyslawKlys
committed
6037e21
Close remaining Apple release integrity gaps
PrzemyslawKlys
committed
c14bf20
Close remaining Apple exact-source integrity gaps
PrzemyslawKlys
committed
c3e9b81
Harden Apple source and upload integrity
PrzemyslawKlys
committed
2f9fcf4
Harden Swift package source validation
PrzemyslawKlys
committed
d7dfa7d
Harden Apple release plan integrity
PrzemyslawKlys
committed
5e38b11
Harden Xcode and Swift package source trust
PrzemyslawKlys
committed
5ffa3ed
Harden Apple source trust parsing
PrzemyslawKlys
committed
7eb947e
Fix Apple release integrity edge cases
PrzemyslawKlys
committed
aec8c98
Harden Apple source and upload provenance
PrzemyslawKlys
committed
d33be5d
Harden Apple release evidence and dependency trust
PrzemyslawKlys
committed
fb38cb7
Harden Apple recovery authority and package trust
PrzemyslawKlys
committed
f86683b
Close Apple exact-build trust gaps
PrzemyslawKlys
committed
0701f65
Close final Apple merge blockers
PrzemyslawKlys
committed
8753c34
Harden exact Apple build input boundaries
PrzemyslawKlys
committed
2af953e
Seal exact Apple execution inputs
PrzemyslawKlys
committed
770513c
Close final Apple exact-source merge gaps
PrzemyslawKlys
committed
006b374
Harden Apple source and mutation evidence
PrzemyslawKlys
committed
d5ed1de
Harden Apple source tools and artifact rollback
PrzemyslawKlys
committed
ed54709
Reject indirect Swift manifest execution
PrzemyslawKlys
committed
968806f
Seal Apple source and notarization evidence
PrzemyslawKlys
committed
1d8860c
Complete Apple source trust validation
PrzemyslawKlys
committed
26af8e8
Close final Apple source and export trust gaps
PrzemyslawKlys
committed
52a3b19
Close Apple source and screenshot mutation gaps
PrzemyslawKlys
committed
20214f6
Close Apple source parser input gaps
PrzemyslawKlys
committed
51527d0
Close Apple compiler input integrity gaps
PrzemyslawKlys
committed
cfb57a7
Close Apple preprocessor plugin and version atomicity gaps
PrzemyslawKlys
committed
ec53de7

Commits on Aug 11, 2026

Close Apple config export and stapler integrity gaps
PrzemyslawKlys
committed
2c5df34
Close Apple compiler and module source-trust gaps
PrzemyslawKlys
committed
594fb61
Bind Apple composite inputs and nested screenshots
PrzemyslawKlys
committed
98e9666
Bind Apple archive and rollback integrity
PrzemyslawKlys
committed
5962cb1
Harden final Apple source and notarization boundaries
PrzemyslawKlys
committed
903718e
Bind Swift modules and direct exports at source boundaries
PrzemyslawKlys
committed
8338243
Close Apple source trust and producer boundary gaps
PrzemyslawKlys
committed
88d769b
Close remaining Apple input and screenshot approval gaps
PrzemyslawKlys
committed
f5b7150
Close Apple source and producer boundary gaps
PrzemyslawKlys
committed
a24d671
Close Apple source and screenshot mutation gaps
PrzemyslawKlys
committed
0ba66e7
Close Apple plugin, assembler, and plan gaps
PrzemyslawKlys
committed
7f997be
Close Apple publication and source trust races
PrzemyslawKlys
committed
f9dd3a3
Close Apple source and artifact review gaps
PrzemyslawKlys
committed
7f7575e
Close Apple preprocessing and source snapshot gaps
PrzemyslawKlys
committed
c4d5bd4
Close Apple source and package cache races
PrzemyslawKlys
committed
71940ce
Close Apple package producer boundaries
PrzemyslawKlys
committed
5005bfe
Close Apple source verification gaps
PrzemyslawKlys
committed
9c9180a
Fix remaining Apple release integrity gaps
PrzemyslawKlys
committed
c4aa559
Bind ThinLTO index inputs to exact source
PrzemyslawKlys
committed
bb55fc5
Preserve exact source and private snapshot identity
PrzemyslawKlys
committed
054398f
Harden Apple source input binding
PrzemyslawKlys
committed
98131ce
Serialize Apple receipt journal updates
PrzemyslawKlys
committed
c35d536
Require complete screenshot approval sets
PrzemyslawKlys
committed
47345a4
Harden receipt leases and backup cleanup
PrzemyslawKlys
committed
99d3bcf
Fix Apple output and filtered source integrity
PrzemyslawKlys
committed
e0bf8ff
Harden Apple filesystem and snapshot integrity
PrzemyslawKlys
committed
bc6650f
Harden Apple archive and package boundaries
PrzemyslawKlys
committed
b3f25f8

Commits on Aug 12, 2026

Harden Apple archive recovery boundaries
PrzemyslawKlys
committed
c49bfc1
Close Swift linker and screenshot cleanup gaps
PrzemyslawKlys
committed
c781c5e
Bind Clang offload inputs to exact source
PrzemyslawKlys
committed
01bb37d
Harden screenshot snapshots and Metal input trust
PrzemyslawKlys
committed
9f3c5b3
Bind approved screenshots and package identities
PrzemyslawKlys
committed
bb68a9b
Harden notarization submission continuity
PrzemyslawKlys
committed
cb578e9
Harden Apple remote mutation recovery
PrzemyslawKlys
committed
9584a74
Close Apple mutation ambiguity gaps
PrzemyslawKlys
committed
ec93e1e
Close Apple recovery and path isolation gaps
PrzemyslawKlys
committed
2370bc4
Close Apple source trust and recovery gaps
PrzemyslawKlys
committed
ccb6c48
Complete Apple release input isolation
PrzemyslawKlys
committed
bb1689a