fix: verify signed release tag objects - #3

Merged

AlexMikhalev merged 1 commit into

mainfrom

codex/release-tag-fetch-v0.2.1

Sep 16, 2026

AlexMikhalev commented Sep 16, 2026

Contributor

Summary

fetch the annotated tag object before release signature verification
publish patch version 0.2.1 consistently across all manifests and archives
add a regression test and release evidence

Validation

23 Python tests
generator drift check
Ruff lint/format
actionlint
Claude Code strict plugin validation
deterministic AutoClaw rebuild and SHA-256 verification
independent structured review: PASS 5/5, no P0/P1/P2


          fix: verify signed release tag objects

becccf1

AlexMikhalev merged commit 7ea887c into main

1 check passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet