-
Bento: name the tracked Cargo.lock, not the dirty tree
-
Say which recipes may call glibc_check, and which structurally cannot
-
Check the version against the tag, not against the working copy
-
Build a release in Bento's own worktree, not the operator's checkout
-
Discard what a build wrote before restoring the branch
-
Unwind the release preflight, and name what blocked a checkout
-
Give Bento a per-host repo path
-
Walk a collected bundle the way the verifier will read it
-
Carry a finished artifact from Bento to Sando
-
Land every build's artifacts at one address on astra
-
Emit an artifact record beside what a build collected
-
Key each step log on its run id
-
Namespace release tags per app, and refuse a dirty tree before a release
-
Add a Bento service kind that deploys onto the host that runs it
-
bento: put the checkout back on its branch after a release
-
bento: a dead mirror is not a missing tag
-
bento: cover secret() resolution, the /retry route, and the /events WS
-
bento: cover the macOS sign/notarize/staple execution chain
-
bento: a library's verify is a crate preflight, not a Gatekeeper check
-
MNW synckit-client/bento/mnw-cli/pom: adopt lint block, fix clippy, fmt
-
bento: pin every build host to one sha before building (audit e5f48171)
-
bento: close the seven release-orchestration audit findings
-
bento: strict artifact resolution, replacing silent sh() glob select
-
Apply rustfmt across the crate
-
bento: preflight the crates.io credentials instead of moving the token
-
bento: release library crates to crates.io
-
bento: declare cargo features per app in the topology
-
bento: collect over a sync transport, not inline scp