3 Commits

Include renames

Author	SHA1	Message	Date
Rogeeandrogee	e1557e7f21	test(HH-468): reject tampered promoted attestations (#98) ... Co-authored-by: Rogee <rogee@ipao.vip>	2026-08-22 04:35:33 +08:00
Rogeeandrogee	b6b1597e90	HH-462: harden release attestation semantics (#94) ... * HH-462: bind release attestations to source and digest * HH-462: exercise release attestation production paths --------- Co-authored-by: Rogee <rogee@ipao.vip>	2026-08-22 04:07:32 +08:00
Rogeeandrogee	02a188dc29	HH-443: establish production CI and supply-chain evidence (#93) ... * ci: enforce production release gates * ci: close release gate review blockers * ci: preserve verified digests during promotion * ci: serialize and verify release cleanup * ci: build govulncheck with Shangwutong toolchain --------- Co-authored-by: Rogee <rogee@ipao.vip>	2026-08-22 03:26:38 +08:00