feat(release): stable release security gate — protected publication chain (F16–F18, F31) - #2585

Merged

namastex888 merged 5 commits into

devfrom

wish/stable-release-security-gate

Jul 14, 2026

Commits on Jul 14, 2026

feat(release): guard the stable publish chain with tag/provenance gates + least-privilege CI

namastex888
and
claude
committed
d4b4b31
feat(install): transactional binary promotion/rollback with .steal regression guard

namastex888
and
claude
committed
7bd9075
fix(release): realign verify-release.sh to the real signed-asset scheme

namastex888
and
claude
committed
b3593c4
docs(wish): stable-release-security-gate plan+execution SHIP evidence, G2 settings evidence

namastex888
and
claude
committed
d3a42fa
fix(release): grant actions:read to publish caller; harden guard script

namastex888
and
claude
committed
7a4d05a