fix(release,ci): hold sigstore at 4.4.0 per owner ruling, make it stick, and audit the lock (BACKLOG #332) - #801

Merged

wshallwshall merged 4 commits into

mainfrom

worktree-agent-a0b411c043c40076f

Sep 4, 2026

Commits on Sep 3, 2026

docs(backlog,adr): record #332's shipped mechanism, raise the sigstore version discrepancy (BACKLOG #332)

wshallwshall
and
claude
committed
e0bfb91
fix(release): hold the signing toolchain at sigstore 4.4.0, per owner ruling (BACKLOG #332)

wshallwshall
and
claude
committed
127587a
fix(ci): make the sigstore 4.4.0 ruling stick, and audit the lock that backs it (BACKLOG #332)

wshallwshall
and
claude
committed
144abab
docs(backlog,adr,release): correct every record that argued for sigstore 4.5.0 (BACKLOG #332)

wshallwshall
and
claude
committed
3c3f778