fix(binjovi): admit trusted package source reads #203
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/package-publisher-read-credential"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Permit only the trusted package publisher to read private candidate artifacts while it holds its separate promotion or signing credential. Untrusted package tests remain init-only.
Validated with the full seanfarm test suite, the focused Binjovi admission contract, the CEL balance guard, and a complete Kustomize render.