-
Move off aws-lc-rs onto the ring provider
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
ops-exec: bound the agent control calls, leave builds unbounded
-
ops-exec: carry the remote exit code in-band, never trust ssh's
-
bento: collect over a sync transport, not inline scp
-
ops-exec: split pull into pull_file/pull_dir; move backup.rs onto the executor
-
ops-exec: gate /pull on a dedicated `artifact` observe grant
-
bento: wire the agent protocol-version skew check (Run 3 wiring)
-
bento: stream AgentRpc::pull to disk (Run 3 performance)
-
bento: bound request bodies, stream logs, protocol-version the agent wire (Run 2 S6 + wiring)
-
bento: emit real metrics + bound captured output tail (Run 2 perf)