-
ops-exec: adopt universal clippy/lint baseline; warnings to zero
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
ops-exec: gate /pull on a dedicated `artifact` observe grant
-
ops-exec: trusted executor (E1+E2), Sando refactor, thin macOS driver