The manifest-update scripts write without re-validating, so a broken manifest can land on disk and only fail later in verify-deployment-manifest.ts. We should, after computing the new manifest, run the existing verification in-process and abort the write on failure.
Acceptance criteria
- A would-be-invalid manifest is rejected before writing.
- The existing verification logic is reused with no duplication.
The manifest-update scripts write without re-validating, so a broken manifest can land on disk and only fail later in
verify-deployment-manifest.ts. We should, after computing the new manifest, run the existing verification in-process and abort the write on failure.Acceptance criteria