-
Gate the ops-exec sync plane on observe:artifact + a declared root
-
ops-exec: adopt universal clippy/lint baseline; warnings to zero
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
ops-exec: carry the remote exit code in-band, never trust ssh's
-
bento: collect over a sync transport, not inline scp
-
ops-exec: split pull into pull_file/pull_dir; move backup.rs onto the executor
-
ops-exec: kill_on_drop the rsync transport so a cancelled deploy can't orphan it
-
bento: close agent /pull RCE-read + harden command surface (Run 2 CR1/CR2/S3)
-
ops-exec: trusted executor (E1+E2), Sando refactor, thin macOS driver