-
sando: pin referenced artifacts in the node release gc too
-
sando: never gc an artifact a tier still references
-
Guard companion binaries before the swap, not by their unit failing to start
-
Refuse a bundle above the node's declared glibc, before the rsync
-
Declare what each host is, and check it before building or shipping there
-
Refuse a binary the node cannot resolve, before the swap
-
Configure pom as Sando's second app, and take an intake through the seam
-
Stop reporting a safe rollback as a production incident
-
sando: adopt lint block, fix clippy, fmt
-
sando: content-addressed release identity; key promote/burn-in on build id
-
sando: test deploy_remote choreography and multi-node canary promote
-
sando: refuse unprovisioned promotes, harden the companion path guard, drop the stale hook
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
ops-exec: split pull into pull_file/pull_dir; move backup.rs onto the executor
-
sando: build + deploy companion services (mnw-cli) in lockstep
-
sando: fix pre-swap config-check env parsing; enable the gate on both nodes
-
sando: detached-task promote + opt-in pre-swap config-drift guard