release: harden the complete sealed release-evidence handoff - #60

Merged

seonghobae merged 69 commits into

mainfrom

feature/post-publication-evidence-revalidation

Aug 6, 2026

Commits on Aug 5, 2026

test: define sealed release evidence API
seonghobae
committed
b908a39
test: specify sealed evidence trust boundary
seonghobae
committed
50e0351
release: implement fail-closed evidence verifier
seonghobae
committed
e81c2b8
docs: define sealed evidence handoff contract
seonghobae
committed
252c08a
docs: record sealed release evidence verifier
seonghobae
committed
9b0e780
security: preserve evidence-directory symlink boundary
seonghobae
committed
270848d
test: reject public evidence-directory symlink traversal
seonghobae
committed
beceb43
style: use modern callable import
seonghobae
committed
ee93da2
test: expose sealed evidence filesystem races
seonghobae
committed
adedffe
fix: bind sealed evidence to stable regular-file snapshots
seonghobae
committed
83370a0
test: cover sealed snapshot failure boundaries
seonghobae
committed
c11a615
docs: define immutable evidence snapshot boundary
seonghobae
committed
f1ae25a
style: combine snapshot test contexts
seonghobae
committed
12233c6
chore: record sealed evidence snapshot hardening
seonghobae
committed
e637b3c
test: expose sealed evidence resource-limit gaps
seonghobae
committed
06f0866
fix: bound sealed evidence snapshot reads
seonghobae
committed
1331710
test: align filesystem fault injection with bounded reads
seonghobae
committed
f12c22e
test: cover bounded snapshot filesystem failure
seonghobae
committed
b2f7974
test: reject post-verification checksum mutation
seonghobae
committed
c9bd881
fix: bind checksum file through manifest issuance
seonghobae
committed
749231d
docs: record checksum snapshot lifetime
seonghobae
committed
1224890
chore: record checksum lifetime hardening
seonghobae
committed
975a166
test: require exclusive strict manifest output
seonghobae
committed
a28cfcd
test: cover durable exclusive manifest output
seonghobae
committed
dc96722
fix: seal manifest output boundary
seonghobae
committed
ede4ba8
docs: define fail-closed manifest output
seonghobae
committed
4207522
test: expose CLI output symlink resolution gap
seonghobae
committed
471c225
security: preserve final manifest path for no-follow creation
seonghobae
committed
4b2f5b8
docs: record sealed manifest output
seonghobae
committed
b17e8a0
test: require sealed repository and source identity
seonghobae
committed
8adb4e2
release: seal exact repository and source identity
seonghobae
committed
9453465
test: fix sealed evidence import ordering
seonghobae
committed
185d6b3
test: expose SBOM semantic ABA substitution
seonghobae
committed
53a3f88
test: normalize sealed evidence imports
seonghobae
committed
a3bc152
test: normalize SBOM digest regression imports
seonghobae
committed
b9b859e
fix: bind parsed SBOMs to sealed digests
seonghobae
committed
97f53da
test: forward sealed SBOM digest in checksum snapshot hook
seonghobae
committed
552cf01
test: forward sealed SBOM digest in snapshot hook
seonghobae
committed
00b9a41
docs: explain checksum-bound SBOM parsing
seonghobae
committed
10d9828
test: reject output-parent redirection into evidence
seonghobae
committed
8489c52
fix: recheck manifest parent outside sealed evidence
seonghobae
committed
1f3e333
docs: document output-parent redirection boundary
seonghobae
committed
93505f2
chore: record manifest parent redirection hardening
seonghobae
committed
c05fd48
test: cover output-parent resolution failure
seonghobae
committed
eb2cba6
test: reject symlinked evidence ancestors
seonghobae
committed
4f94a82
test: normalize evidence root resolution failure
seonghobae
committed
772d4e7
fix: bind evidence verification to canonical root
seonghobae
committed
c5f1d0f
docs: define canonical evidence root boundary
seonghobae
committed
8457b89
docs: record canonical evidence root hardening
seonghobae
committed
103ad12
docs: clarify evidence path and current CWE citation
seonghobae
committed
ccfd780

Commits on Aug 6, 2026