store#1: add secret-free catalog validation - #2

Merged

ksanrse merged 12 commits into

mainfrom

codex/store-issue-1-validator-ci

Aug 28, 2026

Commits on Aug 28, 2026

Add secret-free Store catalog validator
ksanrse
committed
ce4ae60
Add Store catalog PR quality gate
ksanrse
committed
6830d3a
Document secret-free catalog validation
ksanrse
committed
2565276
feat(store): validate replacements identities and signatures
ksanrse
committed
1f43c0d
feat(store): add secret-free ephemeral signing dry-run
ksanrse
committed
eac7e0a
fix(store): keep dry-run independent of production trust
ksanrse
committed
3a592e7
test(store): cover catalog and envelope failure cases
ksanrse
committed
740c549
feat(store): add monotonic release sequence guard
ksanrse
committed
d1fdfcd
fix(store): read catalog locally in sequence guard
ksanrse
committed
16655b4
ci(store): run validator fixtures dry-run and actionlint
ksanrse
committed
e8e0d0d
Guard immutable catalog releases before signing
ksanrse
committed
cac5e1e
Document dry-run and immutable release contract
ksanrse
committed
b6a14dd