mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-10 10:35:51 +00:00
Richard Courtman
79d87a4a2c
The secure-runtime qualification required the candidate commit to be an ancestor of origin/main. Under the release train a patch candidate is cut from release/vX.Y and is not on main at all, so v6.4.3-rc.1's qualification failed at "Verify detached release source" before running any check, and the steward correctly refused to treat the candidate as stable-capable. Resolve the branch the control plane maps the version to, fetch that, check ancestry against it, and hand the same ref to the attestation so the receipt records the line it was verified against. Refs #1753 Contract-Neutral: release qualification checks ancestry against the mapped release branch; no product or contract change