ci: unified tag-triggered release pipeline with SLSA provenance on the Release (Scorecard Signed-Releases → 10)#91

Merged

Navi Bot (project-navi-bot) merged 10 commits into

mainfrom

ci/unified-release-provenance

May 28, 2026

Commits on May 27, 2026

fix(python): accept any integer dtype for subset candidate ids

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed

Commits on May 28, 2026

feat(python): normalize vector input to f32 at the boundary; refine id contract

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
fix(python): validate vector width before f32 coercion (codex stop-gate)

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
ci: unified tag-triggered release pipeline with SLSA provenance on the Release

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
ci(release): fix CI red on #91 — qodo findings + actionlint SC2035 + zizmor cache-poisoning

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
docs(release): fix env-policy deadlock for tag-triggered publishing (codex stop-gate)

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
docs(release): scrub remaining branch-only / workflow_dispatch refs (codex stop-gate)

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
ci(release): un-draft only after publishes succeed + byte-identity crate publish (grumpy blockers)

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
ci(release): post-publish proof that crates.io served bytes == attested (codex stop-gate)

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed
docs(release): scrub stale `release-assets` comment refs (grumpy round-2)

Nelson Spence (Fieldnote-Echo)
and
Claude (claude)
committed