Repository navigation

Binary attestations: phase 2 – reproducible Fastly builds - #1449

Open

prk-Jr wants to merge 65 commits into

feature/binary-attestations-phase1from

feature/binary-attestations-phase2

Open

Binary attestations: phase 2 – reproducible Fastly builds#1449
prk-Jr wants to merge 65 commits into
feature/binary-attestations-phase1from
feature/binary-attestations-phase2

Commits on Oct 26, 2026
- Record approved attestation phase assignment and closure checks
  prk-Jr
  committed
  26d69ce
- Require runtime source resources in release CLI builds
  prk-Jr
  committed
  4ee86da
- Propose ordinary Fastly release equality integration
  prk-Jr
  committed
  15a7b40
- Record approved Fastly gate activation and compatibility conditions
  prk-Jr
  committed
  8874e4f
- Port strict release documents and process supervision
  prk-Jr
  committed
  1534d46
- Specify reviewed ordinary Fastly gate implementation
  prk-Jr
  committed
  d0d5c37
- Align integration notes with immutable release facts
  prk-Jr
  committed
  d1c1d69
- Validate ordinary Fastly build observations
  prk-Jr
  committed
  021fdfd
- Compare complete ordinary Fastly final bytes
  prk-Jr
  committed
  ad78fc5
- Validate bounded ordinary Fastly transfer archives
  prk-Jr
  committed
  bb05d98
- Merge Phase 1 updates into Phase 2
  prk-Jr
  committed
  6de495a
- Bind ordinary uploads to current producing jobs
  prk-Jr
  committed
  ce7daa5
- Port reviewed tool tree content measurement
  prk-Jr
  committed
  4447b68
- Port reviewed final executable inspection
  prk-Jr
  committed
  ee5598b
- Join ordinary archive bytes to release observations
  prk-Jr
  committed
  cb5f16a
- Port the closed recipe and composition dependency graph
  prk-Jr
  committed
  13f63f0
- Record the closed Phase 2 port and policy boundaries
  prk-Jr
  committed
  f0d00dd
- Measure ordinary recipe and private JavaScript input identities
  prk-Jr
  committed
  c8ea09d
- Port checked JavaScript preparation alongside ordinary release builds
  prk-Jr
  committed
  c0f53a5
- Align remaining source identity documentation and comments
  prk-Jr
  committed
  f721ddb
- Record compatible preparation and remaining release integration
  prk-Jr
  committed
  b2cde8b
- Link excluded compatibility notes through their committed source
  prk-Jr
  committed
  3776d27
- Record source-pinned ordinary Fastly build observations
  prk-Jr
  committed
  cc4d0f3
- Seal real ordinary equality results in fresh atomic outputs
  prk-Jr
  committed
  6e9f713
- Expose checked ordinary measurement and comparison commands
  prk-Jr
  committed
  d365f56
- Acquire ordinary transfer archives through bounded authenticated reads
  prk-Jr
  committed
  f9e6cce
- Keep diagnostic payload assertions independent of optional backtraces
  prk-Jr
  committed
  4ede699
- Record ordinary adapter progress and remaining release wiring
  prk-Jr
  committed
  1e9a209
- Compare fresh ordinary Fastly builds before signing
  prk-Jr
  committed
  cc7df93
Commits on Oct 27, 2026
- Propose Fastly path normalization after the real A/B mismatch
  prk-Jr
  committed
  604d5d8
- Bind Docker image configuration and disable inherited commands
  prk-Jr
  committed
  7885bed
- Remove owned comparison outputs after sealing failures
  prk-Jr
  committed
  18df990
- Close inherited build controls and check direct JS entrypoints
  prk-Jr
  committed
  635086d
- Normalize compiler paths before ordinary Fastly byte comparison
  prk-Jr
  committed
  7beaa54
- Attest and publish the real Fastly rebuild check
  prk-Jr
  committed
  169e2a3
- Prove failed comparison skips downstream CI stages
  prk-Jr
  committed
  6f34d62
- Pin the browser integration test job to ubuntu-24.04
  prk-Jr
  committed
  886cf33
- Verify the pinned Fastly package route without network access
  prk-Jr
  committed
  a7e2056
- Record bounded raw Fastly package header diagnostics
  prk-Jr
  committed
  a8f8bcb
- Accept the confirmed Fastly directory header forms
  prk-Jr
  committed
  7127077
- Construct duplicate-key fixtures explicitly
  prk-Jr
  committed
  3ccfe29
- Merge Phase 1 updates into Phase 2
  prk-Jr
  committed
  770a425
- Record verified rehearsals and online SBOM checks
  prk-Jr
  committed
  2ed1b94
Commits on Oct 28, 2026
- Merge branch 'feature/binary-attestations-phase1' into feature/binary-attestations-phase2
  prk-Jr
  committed
  81020c0
- Record the exact Phase 2 integration commit
  prk-Jr
  committed
  3ae0e19
- Merge commit '054c7b777ce67db34744cb1f4100b14e59c4bc5a' into feature/binary-attestations-phase2
  prk-Jr
  committed
  7d55177
- Record the newer-main Phase 2 integration
  prk-Jr
  committed
  5349b7c
- Merge the Phase 1 spec review log into Phase 2
  prk-Jr
  committed
  08e1c33
- Merge the updated Phase 1 branch into Phase 2
  prk-Jr
  committed
  8a797db
- Retain structured ordinary comparison failure diagnostics
  prk-Jr
  committed
  f2b2fa8
- Record Phase 2 spec reviews and reconcile readiness evidence
  prk-Jr
  committed
  5fa3843
- Record the exact-source Phase 2 rehearsal and completed checks
  prk-Jr
  committed
  fb48433
- Observe process groups without signalling after reaping
  prk-Jr
  committed
  927109f
- Record the runtime verification and current phase tracking
  prk-Jr
  committed
  36454c5
- Record the remaining rehearsal gate and runner failures
  prk-Jr
  committed
  5163241
Commits on Oct 29, 2026
- Record the successful Phase 2 release rehearsal
  prk-Jr
  committed
  0f89eae
Commits on Nov 3, 2026
Commits on Nov 5, 2026
- Merge the narrowed Phase 1 into Phase 2
  prk-Jr
  committed
  3ddcd19
- Restore the Cargo metadata file the ordinary capture reads
  prk-Jr
  committed
  9eeccbb
- Record rehearsal .27 of the narrowed Phase 2
  prk-Jr
  committed
  c8c1efd
- Merge the Phase 1 branch check into Phase 2
  prk-Jr
  committed
  4455722
- Address Phase 2 review: drop inert canaries and unrelated churn
  prk-Jr
  committed
  1858b6d
- Document Phase 2 review follow-ups
  prk-Jr
  committed
  1860b99

Commits

Commits on Oct 26, 2026

Commits on Oct 27, 2026

Commits on Oct 28, 2026

Commits on Oct 29, 2026

Commits on Nov 3, 2026

Commits on Nov 5, 2026