Operationalization Release P0: release integrity and trust hardening - #30

Open

Protonmatter wants to merge 75 commits into

mainfrom

agent/operationalization-release-p0

Commits on Aug 13, 2026

docs: define P0 operationalization release
Protonmatter
committed
1ba015d
docs: add P0 operationalization plan
Protonmatter
committed
678bc1b
test: define authoritative mutation audit contract
Protonmatter
committed
4a9d604
test: define append-only audit storage
Protonmatter
committed
3a95f39
test: require immutable release image rendering
Protonmatter
committed
412f6ed
test: require request identity support
Protonmatter
committed
d7c65af
feat: define mutation audit event model
Protonmatter
committed
2a13004
fix: constrain mutation audit detail fields
Protonmatter
committed
57f3b37
feat: add append-only mutation audit store
Protonmatter
committed
bda9028
feat: render digest-bound release manifests
Protonmatter
committed
696bd23
deploy: require release-rendered image digest
Protonmatter
committed
ca68325
feat: configure authoritative mutation audit storage
Protonmatter
committed
a050254
feat: add request identity helper
Protonmatter
committed
65455d0
refactor: preserve established control-plane core
Protonmatter
committed
a3ac6e5
feat: audit authoritative mutations and protect raw evidence
Protonmatter
committed
58b9624
test: add operator control-plane URL validation cases
Protonmatter
committed
0d1eca2
test: run operator control-plane URL validation cases
Protonmatter
committed
e15d647
refactor: preserve operator weather adapter core
Protonmatter
committed
cb374e7
feat: validate control-plane destination before credential use
Protonmatter
committed
1979e5f
test: supply explicit control-plane host allowlist
Protonmatter
committed
7c861c2
test: fix operator URL contract fixture
Protonmatter
committed
0f80fa9
ci: add Python dependency lock generation
Protonmatter
committed
7748185
test: verify operational mutation accountability
Protonmatter
committed
3ae6188
ci: pin pip for compatible lock generation
Protonmatter
committed
a60a9fb
feat: generate digest-bound release metadata
Protonmatter
committed
73be113
ci: publish digest-bound deployment evidence
Protonmatter
committed
b8b4f54
build: include wheel toolchain in dependency locks
Protonmatter
committed
78f3ef9
build: lock the Python wheel toolchain
Protonmatter
committed
2b87bd9
build: construct release images from locked wheels
Protonmatter
committed
f31c234
style: import release sequence from collections
Protonmatter
committed
2f894af
style: format operationalization route assertions
Protonmatter
committed
b6869e3
build: add one-shot lock materialization workflow
Protonmatter
committed
0a28f0a
build: materialize hash-pinned Python locks
github-actions[bot]
committed
95817a8
ci: install Python from hash-pinned lock
Protonmatter
committed
2f57909
ci: bootstrap Python from hash-pinned lock
Protonmatter
committed
fff86da
ci: lock operational weather contract dependencies
Protonmatter
committed
cc7c37b
ci: lock schema contract dependencies
Protonmatter
committed
d24368a
ci: use reproducible scientific dependency set
Protonmatter
committed
b911f86
build: include build-system packages in Python locks
Protonmatter
committed
540edac
build: materialize hash-pinned Python locks
github-actions[bot]
committed
7f23ada
build: refresh one-shot lock materializer
Protonmatter
committed
a152243
build: recreate one-shot lock materializer
Protonmatter
committed
28c12c7
build: allow explicit TypeScript module imports
Protonmatter
committed
9c3aea4
fix: use explicit TypeScript core module
Protonmatter
committed
30c139f

Commits on Aug 14, 2026

feat: render immutable release deployment evidence
Protonmatter
committed
8e348a1
test: verify release image reference contract
Protonmatter
committed
265e116
test: inspect handled audit-store failures
Protonmatter
committed
b03d07f
build: expose release tooling module
Protonmatter
committed
36fdc34
docs: align license with public source visibility
Protonmatter
committed
a0a19be
chore: make repository ownership enforceable
Protonmatter
committed
238574c
docs: define public proprietary repository posture
Protonmatter
committed
7baa783
ci: remove one-shot lock materializer
Protonmatter
committed
010c4d7
docs: document operationalization and repository posture
Protonmatter
committed
694fcbf
docs: document control-plane destination policy
Protonmatter
committed
fdb6a18
ci: lock specification validation dependencies
Protonmatter
committed
7af0d8b
style: replace release module with formatted source
Protonmatter
committed
52e3cfb
style: restore formatted release module
Protonmatter
committed
674ef66
docs: record P0 operationalization release evidence
Protonmatter
committed
836b7d5
fix: resolve operationalization review findings
Protonmatter
committed
3cf7cf2
fix: reconcile interrupted audit mutations
Protonmatter
committed
5d3f05c
test: cover audit recovery boundaries
Protonmatter
committed
c24ac30
fix: harden audit recovery and release builds
Protonmatter
committed
49daef2
docs: refresh PR 30 validation evidence
Protonmatter
committed
56722b0
fix: preserve request identity and base image trust
Protonmatter
committed
536c298
docs: refresh review validation evidence
Protonmatter
committed
b680c68
Address crash-consistency review findings
Protonmatter
committed
b78fb10
Preserve source retention request IDs
Protonmatter
committed
bdc91e1
Cover crash-consistency recovery branches
Protonmatter
committed
0e8714f
fix: close operational audit durability gaps
Protonmatter
committed
0e30874
feat: enforce spec-driven delivery pipeline
Protonmatter
committed
6449be4
fix: preserve npm lockfile integrity
Protonmatter
committed
482a35a

Commits on Aug 15, 2026