town-crier-artifacts

Blessed build artifacts for town-crier deploys. Third-party binaries are verified (hash + provenance + runtime probe) and mirrored here so upstream in-place release-asset mutations cannot break our deploys. Only maintainers can replace assets — our control is the immutability guarantee (the war-tent-releases pattern).

frankenphp-v1.12.6-r20260802

• Source: https://github.com/php/frankenphp/releases/download/v1.12.6/frankenphp-linux-x86_64-gnu
• Fetched: 2026-08-02 (twice, byte-identical)
• sha256: 1fd9c7ea43c0c968c06dd90cb47867987a61affb306913bd501f5929e5bce54c
• Self-reports: FrankenPHP v1.12.6 · PHP 8.5.9 · Caddy v2.11.4
• Context: upstream rebuilt ALL v1.12.6 assets in place on 2026-08-02 (second in-place mutation in 14 days; prior: v1.12.4 on 2026-07-20). The rebuild absorbs a newer embedded PHP patch. Blessed after verification — see war-room WR-0652.

Re-bless procedure

1. Fetch the upstream asset twice; confirm byte-identical + sha256.
2. Run ./frankenphp version — record FrankenPHP/PHP/Caddy versions.
3. Cut a new release here (frankenphp-vX.Y.Z-rYYYYMMDD), upload the binary.
4. PR the town-crier Dockerfile: bump mirror URL + FRANKENPHP_SHA256 together.