Skip to content

docs: record production release evidence - #7

Merged
julia-script merged 1 commit into
mainfrom
julia/production-rc-integration
Aug 20, 2026
Merged

docs: record production release evidence#7
julia-script merged 1 commit into
mainfrom
julia/production-rc-integration

Conversation

@julia-script

Copy link
Copy Markdown
Owner

Summary

  • record the exact candidate CI and protected OIDC publication runs
  • record npm registry digests, signed SLSA provenance, and clean-install canary
  • mark the final two production-release OpenSpec tasks complete

Verification

  • pnpm check
  • openspec instructions apply --change harden-core-for-production-release --json (70/70)
  • registry tarball SHA-512 and SHA-1 match npm metadata
  • clean install loads every public export

@julia-script
julia-script merged commit 1a75c74 into main Aug 20, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant