Oliver Kieselbach 6d7783566f feat(ci): shared build-counter blob, CI build parity, ZIP provenance attestation ...

Build numbers now come from a public counter blob (buildcounter-v2.txt,
reserve-before-build with ETag-CAS) shared by local build.ps1 and CI, so the
two paths can never mint the same number. The CI step that committed
buildcounter.txt bumps to main is gone; the repo file is now a gitignored
offline fallback for -SkipUpload smoke builds only.

CI parity fixes vs the local build:
- ship SummaryDialog.exe.config in the ZIP (WPF AppContextSwitchOverrides;
  without it the dialog dies with 0x8007045A when spawned from SYSTEM)
- verify EXE version == manifest == reserved build number before zipping
- update the AdminConfiguration hash-oracle only on publish_as_stable

CI-built release ZIPs now carry a GitHub Artifact Attestation (Sigstore
keyless provenance, actions/attest-build-provenance@v4).

Doc: docs/agent/build-counter-blob.md

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-17 10:49:18 +02:00

..

agent

feat(ci): shared build-counter blob, CI build parity, ZIP provenance attestation

2026-07-17 10:49:18 +02:00

images

docs(readme): green brand logo in front of the title

2026-07-06 20:27:20 +02:00

architecture.md

docs: convert /docs into an OKF v0.1 knowledge bundle

2026-07-11 12:47:27 +02:00

index.md

feat(ci): shared build-counter blob, CI build parity, ZIP provenance attestation

2026-07-17 10:49:18 +02:00

log.md

feat(ci): shared build-counter blob, CI build parity, ZIP provenance attestation

2026-07-17 10:49:18 +02:00

mcp-oauth-flow.md

docs: convert /docs into an OKF v0.1 knowledge bundle

2026-07-11 12:47:27 +02:00