v0.30.0: two live defects a five-way review found, and the gates that stop them returning - #114

Merged

avrabe merged 14 commits into

mainfrom

Aug 28, 2026

Commits on Aug 27, 2026

REQ-WHICHSTDOUT-001, REQ-NOKEYDISK-001: two findings a five-way review turned up

avrabe
and
claude
committed
92f5d14
REQ-INSTALLSHADOW-001: the installer said it succeeded while a different varve won PATH

avrabe
and
claude
committed
24ea621
REQ-NAMETHEREALM-001: a layer id does not say which realm, and neither did we

avrabe
and
claude
committed
4efdb81
REQ-NOKEYDISK-001 cl.4-5: this realm has one operator, so stop prescribing two

avrabe
and
claude
committed
c3d06bb
REQ-PRODUCER-002: binary discovery, and a `head -1` that chose what got signed

avrabe
and
claude
committed
cf1b33b
REQ-PAYLOADSMOKE-001: the digest proves the bytes are upstream's, not that they work

avrabe
and
claude
committed
ba3c845
REQ-CARRYFORWARD-001: skip the download, never the proof

avrabe
and
claude
committed
a808f59
Layer contents: carry wasm-tools, the first payload from outside this org

avrabe
and
claude
committed
44b55f5
Revert "Layer contents: carry wasm-tools, the first payload from outside this org"
avrabe
committed
b1464bd
REQ-REALM2-002: do the second realm properly, and make it the first ceremony

avrabe
and
claude
committed
b4b41c4
REQ-LAYERADAPT-001: the manifest can state why a payload is unvouched-for

avrabe
and
claude
committed
1f63083
REQ-PRODUCER-002: read the manifest directly, and the second realm becomes buildable

avrabe
and
claude
committed
fe4913e

Commits on Aug 28, 2026