Watch
1
0
Fork
You've already forked SouveraineOS
0

distribution: gate producers by declared artifacts

This commit is contained in:
Fimeg 2026-08-13 13:53:30 -04:00
commit a3ff22531f
3 changed files with 60 additions and 4 deletions

View file

@ -19,8 +19,10 @@ its release lands. Those decisions live here, once.
- The signed `edge` archive is one multi-producer archive. Its implementation
currently lives in `souveraine/packaging/arch/publish-edge.sh`; this manifest
names it so consumers do not grow their own publisher.
- `../tools/validate-distribution.py` checks graph integrity without requiring
a runner, a device, or a secret.
- `../tools/validate-distribution.py` checks graph integrity and can verify a
producer's complete emitted package/architecture set without requiring a
device or a signing secret. A producer must fail rather than publish a
package absent from this graph.
- `.gitea/workflows/distribution.yml` makes that check a gate in the OS repo.
The manifest is deliberately honest about maturity. A profile marked `blocked`