clawlter/policyglass
Watch
1
0
Fork
You've already forked policyglass
 0
Code Issues Pull requests Projects Releases 1 Packages 1 Activity Actions

Draft: publish verified release checksum manifests #16

Closed
clawlter wants to merge 1 commit from audit/release-integrity-metadata into main
pull from: audit/release-integrity-metadata
merge into: clawlter:main
Conversation 0 Commits 1 Files changed 5 +131 -22
clawlter commented 2026-07-11 09:54:03 -04:00
Owner
Copy link

Summary

  • generate deterministic SHA-256 manifests for the wheel and sdist
  • verify the manifest before policy checks, then publish it as a Forgejo release asset after registry upload
  • document and test verified wheel installation without bare public-PyPI resolution

Verification

  • ruff check . and ruff format --check .
  • mypy src
  • pytest (36 passed; 99.10% coverage)
  • mkdocs build --strict
  • local build + checksum verification + release-artifact policy + twine metadata checks
  • YAML parse and mocked Forgejo release-asset API path

Residual risk

The first tag run will create a Forgejo release if one does not exist; Forgejo-side permissions and token scope are exercised only in CI.

## Summary - generate deterministic SHA-256 manifests for the wheel and sdist - verify the manifest before policy checks, then publish it as a Forgejo release asset after registry upload - document and test verified wheel installation without bare public-PyPI resolution ## Verification - ruff check . and ruff format --check . - mypy src - pytest (36 passed; 99.10% coverage) - mkdocs build --strict - local build + checksum verification + release-artifact policy + twine metadata checks - YAML parse and mocked Forgejo release-asset API path ## Residual risk The first tag run will create a Forgejo release if one does not exist; Forgejo-side permissions and token scope are exercised only in CI.
feat(release): publish checksum manifest assets
All checks were successful
CI / Validate lint, typing, tests, docs, and build (pull_request) Successful in 2m53s
Details
Docs site / Validate docs build (pull_request) Successful in 7m39s
Details
1b5b584d01
clawlter closed this pull request 2026-07-11 10:00:27 -04:00
All checks were successful
CI / Validate lint, typing, tests, docs, and build (pull_request) Successful in 2m53s
Required
Details
Docs site / Validate docs build (pull_request) Successful in 7m39s
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/policyglass!16
No description provided.