-
Declare what each host is, and check it before building or shipping there
-
Check the version against the tag, not against the working copy
-
Build a release in Bento's own worktree, not the operator's checkout
-
Discard what a build wrote before restoring the branch
-
Unwind the release preflight, and name what blocked a checkout
-
Move off aws-lc-rs onto the ring provider
-
Give Bento a per-host repo path
-
Carry a finished artifact from Bento to Sando
-
Land every build's artifacts at one address on astra
-
Emit an artifact record beside what a build collected
-
Refuse a release build no host was pinned for
-
Gate a bento app green on its release being downloadable
-
Key each step log on its run id
-
Namespace release tags per app, and refuse a dirty tree before a release
-
Add a Bento service kind that deploys onto the host that runs it
-
bento: put the checkout back on its branch after a release
-
bento: a dead mirror is not a missing tag
-
bento: cover the SSH and Agent transports end to end with a fake
-
bento: cover the macOS sign/notarize/staple execution chain
-
bento: cover the missing-recipe target-failure path
-
bento: a library's verify is a crate preflight, not a Gatekeeper check
-
MNW synckit-client/bento/mnw-cli/pom: adopt lint block, fix clippy, fmt
-
bento: pin every build host to one sha before building (audit e5f48171)
-
bento: close the seven release-orchestration audit findings
-
Gate the ops-exec sync plane on observe:artifact + a declared root
-
bento: test build supersession, partial preflight, and DRY test state
-
bento: test multi-target fan-out and the build rollup
-
Compile every configured recipe in the test suite
-
Apply rustfmt across the crate
-
bento: serve GET /status.json, per app rather than per newest build