feat(registry): verify delegated releases independently - #2746

Open

ascorbic wants to merge 12 commits into

feat/drs-review-03-approvalsfrom

feat/drs-review-04-verification

Commits on Aug 28, 2026

feat(registry): add delegated release verification
ascorbic
committed
06f68d6
fix(registry): preserve artifact proxy checksums
ascorbic
committed
d4923da
fix(release-service): filter package release listings
ascorbic
committed
0e127b0
fix(registry): align installer provenance digests
ascorbic
committed
1f771b8
fix(release-service): distinguish redirect destinations
ascorbic
committed
4a1ae44
fix(registry-client): retry publisher resolution
ascorbic
committed
5fb479a
docs(registry): clarify verification boundaries
ascorbic
committed
6cdaf62
fix(release-service): verify profile membership proofs
ascorbic
committed
4587128
fix(release-service): terminalize fatal verification
ascorbic
committed
69c7f81
fix(registry): distinguish artifact fetch failures
ascorbic
committed
d3d7f46
docs(registry): define handle checks as advisory
ascorbic
committed
547e7f5

Commits on Aug 29, 2026

fix(registry): make verifier bundle safe to rebundle
ascorbic
committed
0dc935c