james.maesandCodex bb310f3208 fix(template): verify required check producers during readback ...

Resolve the official GitHub Actions identity for apply and validation, verify every required check binding, and preserve the caller plan. Add regression coverage for missing or incorrect bindings and invalid check producers.

Refs: KofTwentyTwo/AppKit#27, KofTwentyTwo/AppKit#10

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

2026-10-10 18:46:04 -05:00

..

adr

docs: README, security policy, contributing guide, threat model, ADR, releasing

2026-10-09 14:49:26 -05:00

security

fix(template): verify required check producers during readback

2026-10-10 18:46:04 -05:00

distribution.md

test(template): exercise installed channels and reject altered payloads

2026-10-10 15:56:25 -05:00

installed-updates.md

docs(updates): record public service acceptance for both variants

2026-10-10 18:33:40 -05:00

release-signing.md

fix(template): block releases until signing is configured

2026-10-10 16:58:08 -05:00

RELEASING.md

fix(template): block releases until signing is configured

2026-10-10 16:58:08 -05:00

repository-setup.md

fix(template): verify required check producers during readback

2026-10-10 18:46:04 -05:00