Prepare ForgeFlow for public release #10

2026-08-31T18:10:33Z

Jens commented

2026-08-31 18:10:33 +00:00

Consolidates all useful branch work and prepares ForgeFlow for public publication.

strengthens Gitea/SSH credential origin binding
requires signed packaged updates and disables unsigned source updates
hardens diagnostics privacy, IPC and external-tool launching
isolates release secrets and pins workflow actions
replaces private infrastructure notes with a reusable migration example
fixes the generated source manifest and refreshes public documentation

Validation already completed locally: 363 tests (362 pass, 1 skip), coverage thresholds, lint/manifest/verify, 0 npm audit findings, 84/84 Playwright browser scenarios, full-history secret scan clean.

Consolidates all useful branch work and prepares ForgeFlow for public publication. - strengthens Gitea/SSH credential origin binding - requires signed packaged updates and disables unsigned source updates - hardens diagnostics privacy, IPC and external-tool launching - isolates release secrets and pins workflow actions - replaces private infrastructure notes with a reusable migration example - fixes the generated source manifest and refreshes public documentation Validation already completed locally: 363 tests (362 pass, 1 skip), coverage thresholds, lint/manifest/verify, 0 npm audit findings, 84/84 Playwright browser scenarios, full-history secret scan clean.

Jens added 23 commits 2026-08-31 18:10:34 +00:00

feat(deploy): add signed AppOps-approved workflow 181330b78f

feat(deploy): verify AppOps Ed25519 evidence before machine deploy d1f4cb6ba8

test(deploy): lock signed AppOps evidence contract b5b6660fdc

docs(deploy): include signed approval evidence in status example 858b09afeb

ci: add managed exact-head validation gate 1dc3bea8dd

ci: run managed validation on codex change branches

ChatGPT validation / quality (push) Canceled after 0s

Details

2174b79544

fix(deploy): centralize approved workflow dispatch

ChatGPT validation / quality (push) Failing after 0s