Refuse to publish without provenance, and gate every publish path against regression - #57

Merged

unbraind merged 15 commits into

mainfrom

fix/refuse-unattested-publish-fallback

Aug 28, 2026

Commits on Aug 28, 2026

Refuse to publish without provenance, and gate every publish path against regression
unbraind
committed
31b64be
Record pm item for provenance attestation gate
unbraind
committed
2cc1310
Record pm item for provenance attestation gate
unbraind
committed
7786173
fix(release): reconcile on the artifact, and stop the gate erasing npm scripts
unbraind
committed
2270ebb
fix(release): restore this package's own workflow and reconcile on the artifact
unbraind
committed
00d6b38
fix(gate): detect a publish whose flags come before the subcommand
unbraind
committed
89e5918
fix(release): stop the reconcile probe terminating the step it is polled by
unbraind
committed
9390cd8
fix(release): unblock the changelog step, and judge a publish by what it does not how it is spelled
unbraind
committed
746e967
fix(pm): repair corrupted linked metadata, link three duplicate items, correct a false non-vacuity record
unbraind
committed
ec7b2c7
fix(gate): inspect a shell string handed over through a combined short-option cluster
unbraind
committed
3aea875
docs(changelog): regenerate against the released 2026.8.28 main, and normalise item provenance
unbraind
committed
28229e9
fix(release): converge the publish-attestation gate on one tokeniser-backed implementation
unbraind
committed
4a458b3
fix(pm): keep one record per defect instead of one per review round
unbraind
committed
21d66ed
fix(release): inline only plain scalars, and close four more bypasses
unbraind
committed
a94f0b7
docs(pm): record pull request 57 verification evidence
unbraind
committed
264c9b2

Navigation Menu

Refuse to publish without provenance, and gate every publish path against regression - #57

Refuse to publish without provenance, and gate every publish path against regression#57
unbraind merged 15 commits into
mainfrom
fix/refuse-unattested-publish-fallback

Commits on Aug 28, 2026

Refuse to publish without provenance, and gate every publish path against regression

Record pm item for provenance attestation gate

Record pm item for provenance attestation gate

fix(release): reconcile on the artifact, and stop the gate erasing npm scripts

fix(release): restore this package's own workflow and reconcile on the artifact

fix(gate): detect a publish whose flags come before the subcommand

fix(release): stop the reconcile probe terminating the step it is polled by

fix(release): unblock the changelog step, and judge a publish by what it does not how it is spelled

fix(pm): repair corrupted linked metadata, link three duplicate items, correct a false non-vacuity record

fix(gate): inspect a shell string handed over through a combined short-option cluster

docs(changelog): regenerate against the released 2026.8.28 main, and normalise item provenance

fix(release): converge the publish-attestation gate on one tokeniser-backed implementation

fix(pm): keep one record per defect instead of one per review round

fix(release): inline only plain scalars, and close four more bypasses

docs(pm): record pull request 57 verification evidence