-
Move off aws-lc-rs onto the ring provider
-
Gate a bento app green on its release being downloadable
-
Key each step log on its run id
-
bento: cover secret() resolution, the /retry route, and the /events WS
-
bento: close the seven release-orchestration audit findings
-
Dedup ct_eq + sando live_log into ops-core; put sando errors on JSON
-
Apply rustfmt across the crate
-
bento: serve GET /status.json, per app rather than per newest build
-
bento: move per-app build config into each app's repo
-
bento: collect over a sync transport, not inline scp
-
ops-core: lift Sando's split event bus into the shared crate
-
bento: prove sh_quote adversarially + document /metrics posture (Run 3 security)
-
bento: bound request bodies, stream logs, protocol-version the agent wire (Run 2 S6 + wiring)