10 Commits

Author	SHA1	Message	Date
pulse-triage[bot]	9a5af6ff79	Keep Windows agent update signatures addressable ... Change-source: pulse-maintainer	2026-09-01 16:11:04 +01:00
pulse-triage[bot]	240adaa5e4	Authenticate every published installer	2026-08-31 04:55:15 +01:00
rcourtman	7650fdaba3	Wire secure runtime RC qualification	2026-08-31 01:50:48 +01:00
pulse-triage[bot]	e66f6a26f7	Fail closed when installing MCP binaries ... Verify the signed release checksum manifest against Pulse's pinned SSH key before either MCP installer accepts a downloaded binary. Remove the unsigned bypass and require one exact digest entry. Include bare Unix MCP executables in release checksum/signature assembly, cover unavailable, invalid, ambiguous, mismatched, and successful evidence paths with executable regression tests, and enforce MCP installer pins against the configured release key.	2026-08-30 05:11:55 +01:00
Pulse Test	d607d5cf46	Separate agent remediation runtime	2026-08-29 23:48:28 +01:00
Pulse Test	6d4ee48000	Add typed agent privilege helper	2026-08-29 22:51:58 +01:00
rcourtman	dcc67662b6	Stage release archives directly in parallel	2026-08-21 13:23:44 +01:00
rcourtman	1a9fa936ee	Fix release key helper module path	2026-05-04 09:44:41 +01:00
rcourtman	f58840e8a8	Guard forward release signing against trust-root drift	2026-04-22 19:59:18 +01:00
rcourtman	16ad67a9b5	Add historical release asset backfill workflow	2026-04-22 17:25:58 +01:00