ci(af01): establish workflow trust baseline - #43

Open

TheHalfMoon wants to merge 17 commits into

mainfrom

feat/af01-stack-a-workflow-trust

Commits on Aug 26, 2026

docs(af01): inventory workflow trust authority
TheHalfMoon
committed
daae1ef
feat(af01): define workflow trust policy
TheHalfMoon
committed
0f373b6
feat(af01): add deterministic workflow trust audit
TheHalfMoon
committed
d602343
test(af01): cover workflow trust counterexamples
TheHalfMoon
committed
cbac27b
ci(af01): harden mandatory workflow trust
TheHalfMoon
committed
ad8d0fc
ci(af01): pin registry smoke runner
TheHalfMoon
committed
9163611
ci(af01): harden oracle workflow authority
TheHalfMoon
committed
6ba5364
test(af01): register audit module before execution
TheHalfMoon
committed
e844f5b
fix(af01): close action metadata checkout authority gap
TheHalfMoon
committed
0be4766
test(af01): prove metadata checkout and policy fail closed
TheHalfMoon
committed
95a2b48
fix(af01): audit logical cargo invocations
TheHalfMoon
committed
d76afa1
test(af01): cover logical cargo command parsing
TheHalfMoon
committed
0d639dc
test(af01): construct literal cargo continuation
TheHalfMoon
committed
8550a64
fix(af01): close workflow policy parser bypasses
TheHalfMoon
committed
bb7183e
docs(af01): bind trust rules to rationale
TheHalfMoon
committed
47fe525
test(af01): regress all trust parser bypasses
TheHalfMoon
committed
c6d8434
docs(af01): record completed Stack A implementation tasks
TheHalfMoon
committed
3c84f9a