The fog opt-in lane is now hardened so placeholders fail admission by default. The next step is to replace those placeholders with real artifact pins once the approved fog images/charts exist.
Scope:
- replace placeholder fog catalog entries with real digest-pinned entries
- keep policy gate strict (
sha256:<64 hex>, no placeholders)
- document the provenance/approval path for promoted fog artifacts
- define any rollout/evidence outputs needed for fog artifact admission
Acceptance:
- no placeholder fog catalog entries remain for promoted artifacts
- all admitted fog entries are digest-pinned and policy-valid
- docs clearly distinguish placeholder review entries from promotable entries
The fog opt-in lane is now hardened so placeholders fail admission by default. The next step is to replace those placeholders with real artifact pins once the approved fog images/charts exist.
Scope:
sha256:<64 hex>, no placeholders)Acceptance: