feat: verified bootstrap engine and release signature contract - #12

Merged

3leapsdave merged 14 commits into

mainfrom

chore/trust-anchor-bootstrap-v0411

Jul 31, 2026

Commits on Jul 31, 2026

feat: verified installer bootstrap and release signature contract

3leapsdave
and
Grok 4.5
committed
96c66d5
fix: harden verified bootstrap contract for panel review

3leapsdave
and
Grok 4.5
committed
69b94fc
chore: drop unused variable in bootstrap harness

3leapsdave
and
Grok 4.5
committed
ecaffc9
fix: single engine SSOT, machine route field, exact tokens

3leapsdave
and
Grok 4.5
committed
9c051c1
fix: remove engine env trust seams; thin action matcher

3leapsdave
and
Grok 4.5
committed
0f0b964
fix: release-gate anchor assert and strict semver

3leapsdave
and
Grok 4.5
committed
79364f8
fix: verify release minisig against canonical anchor file

3leapsdave
and
Grok 4.5
committed
b48ca58
fix: compare semver components without integer overflow

3leapsdave
and
Grok 4.5
committed
e42bdc9
test: pin both semver overflow faces before route selection

3leapsdave
and
Grok
committed
869f860
docs: entarch A/B — bootstrap range release gate and verified smoke

3leapsdave
and
Grok 4.5
committed
2e6c96c
chore: shfmt bootstrap after range-constant comments

3leapsdave
and
Grok 4.5
committed
804ff2e
fix: put pinned minisign on PATH for installer execution

3leapsdave
and
Grok 4.5
committed
00847e9
chore: satisfy SC2155 on PATH export for pinned minisign

3leapsdave
and
Grok 4.5
committed
7be01f5
fix(ci): assert version via stderr; fixtures use pinned minisign

3leapsdave
and
Grok 4.5
committed
2cc6643