Add a read-only native worker and canonical consumer bridge. Verify the pinned Kustomize binary, render every configuration without logging resources, and audit adoption. Behavioral and audit tests pass; all five marketing GitOps configurations render successfully.
Co-authored-by: Codex <noreply@openai.com>
Allow unauthenticated Circle API reads for public projects, preserve optional authentication and all fail-closed provenance checks.
Co-authored-by: Codex <noreply@openai.com>
Add Actions and Python alongside Java and JavaScript before retiring duplicate default setup after hosted proof.
Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Preserve aggregate-app GA/RC validators in the shared worker, add exact-source Circle evidence, and own business E2E and workflow lint centrally. Audit explicit managed branches and verified no-CI exceptions without inventing merge checks.
Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Preserve native publication and database checks while removing POM-proven duplicate MCP compilation. Retain the disabled E2E exception and require credential equivalence before Circle retirement.
Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Keep release cuts short, validate exact publisher and Maven Central provenance before signed tags, and reconcile pending releases without paid polling runners.
Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Own canonical consumer validation, selective workflow generation, Maven caching and RC completion in the shared orb. Centralize native workers and preserve acceptance/publication contracts with packed-output, behavioral and estate-audit tests.
Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
james.maesandCodex