feat(release): add deterministic artifact integrity manifest - #616

Draft

seonghobae wants to merge 14 commits into

feat/release-artifact-manifest

Commits on Aug 27, 2026

test(release): define artifact manifest integrity contract
seonghobae
committed
9389b27
test(release): register manifest contract in CI coverage
seonghobae
committed
e9d4dbb
test(release): remove unused RED-stage import
seonghobae
committed
d8ff722
feat(release): implement deterministic artifact manifest
seonghobae
committed
a0b0c6f
docs(release): record artifact integrity decision and evidence
seonghobae
committed
7795385
docs(release): record artifact integrity manifest
seonghobae
committed
de21f19
test(release): require canonical nested manifest serialization
seonghobae
committed
ec72006
fix(release): canonicalize manifest artifact digest payload
seonghobae
committed
a01066b
test(release): reproduce manifest path replacement race
seonghobae
committed
1689f57
fix(release): bind manifest reads to opened file
seonghobae
committed
dbd5a42
test(release): reproduce artifact path replacement race
seonghobae
committed
d60c9bf
test(release): run artifact replacement regression
seonghobae
committed
d3018a4
fix(release): detect artifact path replacement during verification
seonghobae
committed
ea9472e
docs(release): record pathname identity repair evidence
seonghobae
committed
b427cd4