Skip to content

🐛 fix(release): grade every cosign verify-blob invocation, not just one (D-160) #90

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
konih merged 4 commits into from
Aug 23, 2026
+749 −40
Merged

🐛 fix(release): grade every cosign verify-blob invocation, not just one (D-160) #90

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
e733b64
:lock: fix(release): grade EVERY cosign invocation, not just some (UN…
konih Aug 23, 2026
26a4a73
:lock: fix(release): grade per OCCURRENCE, not per line (UC-01..UC-04…
konih Aug 23, 2026
784d737
:lock: fix(release): stop the gate overclaiming; close the quoted-spe…
konih Aug 23, 2026
7757ab3
:memo: docs(release): correct the residual the gate documents (R3-01)
konih Aug 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,6 +93,7 @@ repository still gets a decision, never by following the link; no release carrie
- :memo: docs(e11): Shape D rests on no-recursion alone — the decode barrier was false (F-01)
- :memo: docs(e11): delete the false cost claim; reason 1 carries Shape D alone (F3-01)
- :memo: docs(ci): D-159 recorded a residual that does not exist (ORPH-01..04)
- :memo: docs(release): correct the residual the gate documents (R3-01)

### Features
- :sparkles: feat(audit): measure REL-03/REL-07 by real mutation run, not by name
Expand All @@ -119,6 +120,9 @@ repository still gets a decision, never by following the link; no release carrie
- :lock: fix(provider): bound exec stdout, set WaitDelay, capture stderr
- :lock: fix(release): pin cosign signer identity on the maintainer verify path (AUD2-F01)
- :lock: fix(hack): refuse to run gate scripts under a too-old bash (BASH32-F01)
- :lock: fix(release): grade EVERY cosign invocation, not just some (UNIV-COSIGN, D-160)
- :lock: fix(release): grade per OCCURRENCE, not per line (UC-01..UC-04, D-160)
- :lock: fix(release): stop the gate overclaiming; close the quoted-spelling hole (UC-05..UC-09)

### Testing
- :white_check_mark: test(cmd): assert the REL-03 error wrap as one contiguous substring
Expand Down
Loading