ScottW514 1179d5e7c1 Release acceptance gate: release.sh refuses to sign without a matching artifact ...

scripts/acceptance-gate.py recomputes every catalog test's domain fingerprint
from /etc/forgefirm-manifest.json inside the release rootfs and requires the
committed releases/v<version>/acceptance.json to carry a matching PASS
(inherited results not core and newer than the invalidate epoch; the artifact
self-hashed; the catalog identical to the tree). release.sh runs it after the
build and stages the artifact as a release asset; FORGEFIRM_ACCEPTANCE_SKIP=1
bypasses loudly. scripts/manifest-from-tree.py builds the same manifest from
the recipe pins with git for CI and the workstation; forgetest-ci.yml runs the
unit tests and enforces the coverage lint (every manifest path covered by some
test). docs/ACCEPTANCE.md is the contract; the coverage currency rule and the
status live in BRINGUP.

2026-08-15 15:57:12 -04:00

..

forgetest-ci.yml

Release acceptance gate: release.sh refuses to sign without a matching artifact

2026-08-15 15:57:12 -04:00

yocto-cold-build.yml

docs: present-state build and update docs; fix the ring-size arithmetic

2026-08-15 06:12:51 -04:00