ci: enforce distribution quality gate#11

Merged

wesleysimplicio merged 7 commits into

codex/issue-10-ci-audit

Jul 14, 2026

Commits on Jul 14, 2026

ci: enforce distribution quality gate
Simplicio, Wesley (ext)
committed
fix(ci): verify signed release provenance
Simplicio, Wesley (ext)
committed
fix(release): block immutable provenance drift
Simplicio, Wesley (ext)
committed
fix(release): validate structured publish plan
Simplicio, Wesley (ext)
committed
fix(release): enforce closed-world workflow
Simplicio, Wesley (ext)
committed
fix(release): enforce exact publish set
Simplicio, Wesley (ext)
committed
Merge origin/master into codex/issue-10-ci-audit, keeping the closed-world release design

Simplicio, Wesley (ext)
and
claude
committed