-
sando: reconcile deploys against tier_state on startup
-
sando: document the rollback contract + gate migration-bearing promotes
-
sando: adopt lint block, fix clippy, fmt
-
sando: content-addressed release identity; key promote/burn-in on build id
-
sando: remove the Prometheus exporter instead of deciding its auth posture
-
sando: refuse unprovisioned promotes, harden the companion path guard, drop the stale hook
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
sando: add the hardening_test gate for what fast-tests hides
-
sando: fail the promote on red post-deploy gates, stop rollback rolling forward
-
Add code_smoke host gate: migrate-from-scratch + seed + serve /health
-
Extract sando promotion service out of daemon routes.rs