Skip to content

release: v0.1.0 signed supply chain - #66

Merged
gnanirahulnutakki merged 2 commits into
mainfrom
dev
Jul 11, 2026
Merged

release: v0.1.0 signed supply chain#66
gnanirahulnutakki merged 2 commits into
mainfrom
dev

Conversation

@gnanirahulnutakki

Copy link
Copy Markdown
Member

Release increment

This promotes the tested Slice P Phase-L packaging gate from dev to main for the first public Sith tag.

  • reproducible darwin/linux amd64/arm64 archives
  • SPDX SBOM per archive
  • keyless Sigstore bundles for archives, SBOMs, checksums, and Homebrew formula
  • SLSA provenance and per-platform SPDX attestations
  • signed-tag/main-ancestry release gate with draft-until-complete publication
  • verified ArdurAI/homebrew-tap synchronization with no cross-repository Sith credential

Evidence

Feature PR #65 merged only after the full product/two-cluster job and independent reproducible-release job passed. The post-dev CI run must also pass before this release PR merges. After merge, an annotated SSH-signed v0.1.0 tag will exercise the real signing/attestation workflow; the public release and a clean Homebrew install will be verified before announcement.

Refs #27

Gnani Rahul and others added 2 commits July 11, 2026 15:51
GSTACK-Checkpoint: 2026-07-11/slice-p-release-supply-chain#2
Signed-off-by: Gnani Rahul <gnani.nutakki@gmail.com>
Refs #27.

Signed-off-by: Gnani Rahul <gnani.nutakki@gmail.com>
@gnanirahulnutakki
gnanirahulnutakki merged commit 5e50168 into main Jul 11, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant