-
Namespace release tags per app, and refuse a dirty tree before a release
-
Add a Bento service kind that deploys onto the host that runs it
-
bento: put the checkout back on its branch after a release
-
bento: a dead mirror is not a missing tag
-
bento: cover secret() resolution, the /retry route, and the /events WS
-
bento: cover the macOS sign/notarize/staple execution chain
-
bento: a library's verify is a crate preflight, not a Gatekeeper check
-
MNW synckit-client/bento/mnw-cli/pom: adopt lint block, fix clippy, fmt
-
bento: pin every build host to one sha before building (audit e5f48171)
-
bento: close the seven release-orchestration audit findings
-
bento: strict artifact resolution, replacing silent sh() glob select
-
Apply rustfmt across the crate
-
bento: preflight the crates.io credentials instead of moving the token
-
bento: release library crates to crates.io
-
bento: declare cargo features per app in the topology
-
bento: collect over a sync transport, not inline scp
-
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)
-
bento: WAL + event-driven finalize + retention (Run 2 S1/S1b/S4/CHRONIC-1)
-
bento: enforce publish monotonicity + restart recovery (Run 2 S5/S2)
-
bento: close agent /pull RCE-read + harden command surface (Run 2 CR1/CR2/S3)
-
bento: seal publish behind an unforgeable PublishAuthority (ultra-fuzz structural)
-
bento: expose recipe context + generalize version resolution
-
sando+bento: remediate ultra-fuzz Run 1 (CF1-5, serious, minors)
-
Add bento, ops-core, and egui-updater crate scaffolds