-
sando: never gc an artifact a tier still references
-
Refuse a bundle above the node's declared glibc, before the rsync
-
Give Sando an intake path for artifacts it did not build
-
sando: reconcile deploys against tier_state on startup
-
sando: content-addressed release identity; key promote/burn-in on build id
-
Dedup ct_eq + sando live_log into ops-core; put sando errors on JSON
-
sando: serve GET /status.json
-
sando: remove the Prometheus exporter instead of deciding its auth posture