-
Give Bento a per-host repo path
-
Walk a collected bundle the way the verifier will read it
-
Carry a finished artifact from Bento to Sando
-
Land every build's artifacts at one address on astra
-
Emit an artifact record beside what a build collected
-
Key each step log on its run id
-
Namespace release tags per app, and refuse a dirty tree before a release
-
Add a Bento service kind that deploys onto the host that runs it
-
bento: put the checkout back on its branch after a release
-
bento: a dead mirror is not a missing tag
-
bento: cover secret() resolution, the /retry route, and the /events WS
-
bento: cover the macOS sign/notarize/staple execution chain
-
bento: a library's verify is a crate preflight, not a Gatekeeper check
-
MNW synckit-client/bento/mnw-cli/pom: adopt lint block, fix clippy, fmt
-
bento: pin every build host to one sha before building (audit e5f48171)
-
bento: close the seven release-orchestration audit findings
-
bento: strict artifact resolution, replacing silent sh() glob select
-
Apply rustfmt across the crate
-
bento: preflight the crates.io credentials instead of moving the token
-
bento: release library crates to crates.io
-
bento: declare cargo features per app in the topology
-
bento: collect over a sync transport, not inline scp
-
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)
-
bento: WAL + event-driven finalize + retention (Run 2 S1/S1b/S4/CHRONIC-1)
-
bento: enforce publish monotonicity + restart recovery (Run 2 S5/S2)
-
bento: close agent /pull RCE-read + harden command surface (Run 2 CR1/CR2/S3)
-
bento: seal publish behind an unforgeable PublishAuthority (ultra-fuzz structural)
-
bento: expose recipe context + generalize version resolution