-
Namespace release tags per app, and refuse a dirty tree before a release
-
Add a Bento service kind that deploys onto the host that runs it
-
bento: close the seven release-orchestration audit findings
-
Gate the ops-exec sync plane on observe:artifact + a declared root
-
Apply rustfmt across the crate
-
bento: release library crates to crates.io
-
bento: move per-app build config into each app's repo
-
bento: declare cargo features per app in the topology
-
bento: collect over a sync transport, not inline scp
-
ops-exec: gate /pull on a dedicated `artifact` observe grant
-
bento: expose recipe context + generalize version resolution
-
sando+bento: remediate ultra-fuzz Run 1 (CF1-5, serious, minors)
-
Add bento, ops-core, and egui-updater crate scaffolds