bug: verify standalone embedded vendor copies by codeforester · Pull Request #362 · basefoundry/base-bash-libs

codeforester · 2026-08-31T06:00:09Z

Summary

write a manifest-, version-, and source-commit-bound lock into standalone applications' embedded vendor copy
verify embedded release identity in the ordinary offline vendor verification path
replace the vacuous lock assertion with end-to-end embedded-tree verification and document root versus embedded authority

Fixes #346

bug: verify standalone embedded vendor copies (#346)

7394d96

codeforester merged commit 8f64708 into main Aug 31, 2026
10 checks passed

codeforester deleted the bug/346-20260831-bug-make-standalone-vendor-copies-pass-vendor-verification branch August 31, 2026 06:10