awatch-rus/AWatch-rus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add build provenance to release evidence

Browse Source
This commit is contained in:
igor04091968
2026-07-01 16:49:35 +03:00
parent b9dca66d1b
commit e6378e87f5
7 changed files with 102 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
DEVELOPMENT_PLAN_NEXT.md
+5
View File
@@ -106,6 +106,11 @@ Expected benefit: release and production state become auditable.
### P0-2. Controlled release evidence build
Status: addressed by TASK_070. Existing release evidence tooling now records
resolved Git SHA, deterministic `SOURCE_DATE_EPOCH` / `BUILD_TIME`, runner
environment and artifact checksums, and the evidence checker enforces the
required provenance fields.
Purpose: produce Production 1.0 release evidence outside GitHub public mirror.
Reason: `docs/PROJECT_STATUS_RU.md`, `docs/QUALITY_STATUS_RU.md` and