Repository navigation
Fix publication attestation policy evaluation - #26
Merged
Merged
Conversation
|
Caution Review failedAn error occurred during the review process. Please try again later. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Mnehmos
marked this pull request as ready for review
July 20, 2026 00:32
Owner
Author
|
Protected publica 95F1 tion evidence for the merged correction:
The retained subject digest exactly matches the report. The certificate binds |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Product outcome
Correct the publication attestation policy so every verified attestation object is checked for the required predicate and transparency timestamp before a constrained verification record can be emitted.
Changes
all(.[]; condition)for predicate and timestamp constraintspublication attestation policy rejected verified outputand exit code71Local evidence
8448611307archive SHA-256 matchedaeb3bd768cc56762e19308940a44684c65145342019b965e85b8191e0a3429d026c8ea85cb4ba20260f7ad16f5f4429d92472cdeb64505167e0cfe687ce1d112bash -n scripts/publication-attestation-verify.shpassedcargo fmt --checkpassedcargo test --workspacepassed (89 tests)git diff --checkpassedmcl init,mcl health, andmcl doctorpassed on Windows with Lean 4.32.0Preserved workstation failures
The legacy Python suite currently has one environment-sensitive Lean assertion and two Windows SQLite cleanup locks. The opt-in real Lean worker reaches a host-specific
launch_failedresult. These pre-existing workstation observations are not hidden or mixed into this focused trust-boundary correction; hosted checks remain required.Refs #21
Refs #25