Phase 1: harden internal model supply chain - #63

Draft

hoang12122 wants to merge 14 commits into

mainfrom

agent/phase-1-model-supply-chain

Commits on Jul 27, 2026

docs(security): add phase 1 internal model supply chain plan
hoang12122
committed
59ebb25
feat(model-registry): add phase 1 executable contract
hoang12122
committed
2d0c770
feat(model-registry): sign dual checksums and validate provenance
hoang12122
committed
68afc1d
feat(model-registry): enforce load-time dual checksum and provenance
hoang12122
committed
c38d181
feat(model-registry): add controlled promotion state machine
hoang12122
committed
061f00f
feat(model-registry): add recovery-ready rollback evidence command
hoang12122
committed
54caf6e
feat(model-registry): add SBOM validation gate
hoang12122
committed
5e3d444
test(model-registry): cover phase 1 supply-chain rejection cases
hoang12122
committed
d0fd1e3
chore(ci): expose phase 1 model supply-chain commands
hoang12122
committed
0c7c400
fix(model-registry): preserve unrelated dependency version
hoang12122
committed
655acfb
ci(model-registry): add phase 1 supply-chain gate
hoang12122
committed
3a7b1a1
fix(ci): use published Jest 30 version
hoang12122
committed
32e72e9
fix(deps): use published Radix label version
hoang12122
committed
10b3168
fix(deps): pin radix label to published version
hoang12122
committed
f186dce