Repository navigation

fix(sdk): bind installed tools and published image identities - #60

Merged

zoeyrose merged 24 commits into

mainfrom

build/llvm-final-portable-source

Oct 13, 2026

Merged

fix(sdk): bind installed tools and published image identities#60
zoeyrose merged 24 commits into
mainfrom
build/llvm-final-portable-source

Commits on Oct 12, 2026
- fix(portable): bind CMake and Ninja to installed producer bytes
  zoeyrose
  committed
  8a8245a
- fix(portable): reject symlink hops in protected build tool paths
  zoeyrose
  committed
  96eafd2
- build(portable): add bounded installed inventory foundation
  zoeyrose
  committed
  4079934
- fix(portable): bind pkgconf queries to producer executable receipt
  zoeyrose
  committed
  1ede7cc
- fix(portable): generate curl producer receipt before inventory
  zoeyrose
  committed
  84bdeb7
- fix(portable): align installed build tool receipt validation
  zoeyrose
  committed
  3529659
- fix(portable): require installed pkgconf identity
  zoeyrose
  committed
  a935976
- build(portable): bind SDK to merged Classic LLVM source
  zoeyrose
  committed
  0307d05
- build(portable): bind SDK to merged Classic LLVM repair
  zoeyrose
  committed
  a25b5df
- build(portable): bind SDK to Classic inspector repair
  zoeyrose
  committed
  46f3961
- fix(sdk): require nonempty collector files by default
  zoeyrose
  committed
  a0f5240
- fix(sdk): verify audio and LLVM source archive closure
  zoeyrose
  committed
  cfb2beb
- test(sdk): reject empty inventory notices and build tools
  zoeyrose
  committed
  e07ffb5
- docs(sdk): clarify retained manifests and sealed tool cohort
  zoeyrose
  committed
  d18a2de
- fix(sdk): require complete portable source archive declarations
  zoeyrose
  committed
  1c1865a
- chore(ci): synchronize current dependency review policy
  zoeyrose
  committed
  7b021fb
- ci: retain scrubbed dependency review job summaries
  zoeyrose
  committed
  502c672
- build: retarget portable consumer to merged Classic revision
  zoeyrose
  committed
  ebe1b46
- fix(sdk): bind provider bytes and protect tool ownership
  zoeyrose
  committed
  cc6b6ed
- fix(sdk): fence published Linux image identity
  zoeyrose
  committed
  90cac14
- fix(linux): install pinned gh-stack without API discovery
  zoeyrose
  committed
  0a97144
Commits on Oct 13, 2026
- fix(build): preserve Docker 1.49 image identity checks
  zoeyrose
  committed
  abcbc50
- fix(ci): select Linux images for publication identity changes
  zoeyrose
  committed
  7a69f75
- build(portable): pin current Classic consumer revision
  zoeyrose
  committed
  0de3f50

Commits

Commits on Oct 12, 2026

Commits on Oct 13, 2026