 Bo
|
fc16cf31df
|
feat(release): require zero-trust audit evidence (#297)
## Summary
- add eval fast, eval baseline-audit, VIL, and digital-twin evidence to
local release artifact manifests
- require resolver/audit validation to reject incomplete
SBOM/security/eval/HIL/VIL/twin proof bundles
- document the zero-trust release proof bundle and add focused BATS
coverage
## Validation
- bash -n scripts/ci-local-release.sh
scripts/resolve-release-artifacts.sh
scripts/validate-release-audit-artifacts.sh
- shellcheck --severity=error scripts/ci-local-release.sh
scripts/resolve-release-artifacts.sh
scripts/validate-release-audit-artifacts.sh
- bats tests/scripts/ci-local-release.bats
tests/scripts/release-artifacts.bats
- git diff --check
- markdownlint docs/RELEASING.md docs/release-e2e-checklist.md
docs/contracts/release-readiness.md
- bash scripts/validate-ci-policy-parity.sh
- bash tests/docs/validate-doc-release.sh
- scripts/pre-push-gate.sh --fast (passed; warn-only executable-spec
link-integrity reports unknown flags --lint/--orphans)
- bd dep cycles
- scripts/bd-audit.sh --json
Bead: soc-owed.7
---------
Co-authored-by: Codex <codex@example.invalid>
|
2026-05-18 01:14:33 +00:00 |
|