-
Namespace release tags per app, and refuse a dirty tree before a release
-
Add a Bento service kind that deploys onto the host that runs it
-
bento: put the checkout back on its branch after a release
-
bento: a dead mirror is not a missing tag
-
bento: cover the SSH and Agent transports end to end with a fake
-
bento: cover the macOS sign/notarize/staple execution chain
-
bento: cover the missing-recipe target-failure path
-
bento: a library's verify is a crate preflight, not a Gatekeeper check
-
MNW synckit-client/bento/mnw-cli/pom: adopt lint block, fix clippy, fmt
-
bento: pin every build host to one sha before building (audit e5f48171)
-
bento: close the seven release-orchestration audit findings
-
Gate the ops-exec sync plane on observe:artifact + a declared root
-
bento: test build supersession, partial preflight, and DRY test state
-
bento: test multi-target fan-out and the build rollup
-
Compile every configured recipe in the test suite
-
Apply rustfmt across the crate
-
bento: serve GET /status.json, per app rather than per newest build
-
bento: release library crates to crates.io
-
bento: move per-app build config into each app's repo
-
bento: declare cargo features per app in the topology
-
bento: collect over a sync transport, not inline scp
-
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)
-
bento: emit real metrics + bound captured output tail (Run 2 perf)
-
bento: WAL + event-driven finalize + retention (Run 2 S1/S1b/S4/CHRONIC-1)
-
bento: enforce publish monotonicity + restart recovery (Run 2 S5/S2)
-
bento: collapse a nested if in runner (clippy, rust 1.95)
-
bento: expose recipe context + generalize version resolution
-
sando+bento: remediate ultra-fuzz Run 1 (CF1-5, serious, minors)
-
Add bento, ops-core, and egui-updater crate scaffolds