2 Commits

Author	SHA1	Message	Date
ethernet	b37acb8389	feat(release): dynamic R2-owned channels and preview retirement (rounds 1-2) ... Checkpoint before round-3 reduction (two-tier retirement derived from product identity). Includes: - R2 channel protocol (release_channels.py, channel-protocol.ts): records, builds, manifests, retired channels with pinned destinationHead and receiverProtocol; fail-closed readers in both languages - One shared native manifest/feed writer (scripts/bundles/channel_artifacts.py) - Scoped/disposable R2 publication, fork isolation before credential access, canary bootstrap verification of its own promoted outputs - Channel source CLI: typed SourceTarget, source-channel resolution, retirement downgrade refusal - Desktop channel resolver/strategy, install-stamp/build-stamp receiver ownership (stable-owned S/T candidates), single-flight updater operation - Cross-package retirement machinery (receiver/host/preservation/ compatibility/connections/dialog/discovery, backup_migration strict snapshots with retained-link inventory, empty-dir preservation, connection-collision resolution, URL-credential rejection) - Native install harness (tests/install/channel-retirement-*) and install-e2e retirement jobs - checkout-source.test.ts transport shim now covers build_opener().open (was silently hitting the real network in CI) Removed secondary certification protocol (channel_qualification.py) per approved round-2 plan. All focused suites green at checkpoint; native cross-package journeys unverified (to be deleted in round 3).	2026-09-14 10:26:36 -04:00
ethernet	11c65c4f33	feat(release): dispatch exact-commit builds and bind their stamps ... Resolve pushed revisions before dispatching the default-branch workflow. Reject release-mode flags and untrusted admission contexts. A dry run never dispatches or creates a tag. Preserve Git's effective push URL when choosing the GitHub repository. Commit-build stamps check the actual checkout, including an explicit Python --commit argument. The workflow SHA cannot replace build identity. Direct Git argv also avoids the Windows command-shell PATH limit. Real temporary Git CLI and stamp tests pass: 60 Python tests and 22 JS tests, with no failures. GitHub authorization and dispatch are intercepted at their process boundary. Workflow guards and native assembly remain separate work. No live dispatch, signature, or package acceptance claimed.	2026-09-10 03:45:03 -04:00