feat: verify reviewed managed image digests - #74

Draft

Nickfost wants to merge 16 commits into

mainfrom

feat/issue-36-reviewed-image-digests

Commits on Aug 16, 2026

feat: verify reviewed managed image digests
Nicks Hermes
committed
30386ff
test: supply managed image digests in CI
Nicks Hermes
committed
6517672
fix: bind managed images to architecture
Nicks Hermes
committed
94ec00e
fix: checkpoint legacy engine revision
Nicks Hermes
committed
b3386e1

Commits on Aug 17, 2026

fix: pass reproducible timestamp to managed builds
Nicks Hermes
committed
fd2573f
test: keep reproducibility assertion shellcheck-clean
Nicks Hermes
committed
42611bc
fix: normalize managed image filesystem timestamps
Nicks Hermes
committed
1af7b2e
fix: avoid immutable build mounts during normalization
Nicks Hermes
committed
84d2c70
fix: exclude runtime bind files from normalization
Nicks Hermes
committed
376a13c
fix: normalize controller copy in one runtime layer
Nicks Hermes
committed
489eca1
fix: remove nondeterministic runner linker cache
Nicks Hermes
committed
427fa20
fix: pin remaining managed image build inputs
Nicks Hermes
committed
8664d64
test: keep deterministic shadow assertion literal
Nicks Hermes
committed
942f030
fix: stage managed image enforcement safely
Nicks Hermes
committed
1c4dcf3
test: use non-placeholder image IDs in CI
Nicks Hermes
committed
9ba44a6
fix: keep image staging manager-only
Nicks Hermes
committed
7ca616f