Repository navigation

Add pre-publication installed-native acceptance and checksum-bound publish - #178

Merged

rmcdaniel merged 10 commits into

mainfrom

feat/prepublication-acceptance

Nov 4, 2026

Merged

Add pre-publication installed-native acceptance and checksum-bound publish#178
rmcdaniel merged 10 commits into
mainfrom
feat/prepublication-acceptance

Commits on Nov 3, 2026
- Add pre-publication installed-native acceptance and checksum-bound publish
  
  rmcdaniel
  and
  claude
  committed
  eeed3d5
- Address static-analysis findings in the pre-publication change
  
  rmcdaniel
  and
  claude
  committed
  501d031
- Confine every release and harness path to an explicit root
  
  rmcdaniel
  and
  claude
  committed
  944b73a
- Require a complete passing receipt and the tracked approval record
  
  rmcdaniel
  and
  claude
  committed
  94af784
- Keep caller values out of git argv for the approval read
  
  rmcdaniel
  and
  claude
  committed
  f9b28f4
Commits on Nov 4, 2026
- Isolate the crates.io credential by job and bind the committed acceptance summary
  
  rmcdaniel
  and
  claude
  committed
  f7ef1d5
- Keep tagged-tree code out of release tool installation (F5)
  
  rmcdaniel
  and
  claude
  committed
  675236e
- Merge remote-tracking branch 'origin/main' into feat/prepublication-acceptance
  rmcdaniel
  committed
  d4f7e6a
- Read crate archives without following links; inspect them from memory
  
  rmcdaniel
  and
  claude
  committed
  4bcbca5
- Justify the confined no-follow read for SonarCloud S8707
  
  rmcdaniel
  and
  claude
  committed
  8325ac7