ci(release): require a reportable gate and promote only tested artifacts (#632) - #648

Draft

defangdevs wants to merge 9 commits into

fix/632-release-gate

Commits on Sep 10, 2026

ci(release): require a reportable gate and promote only tested artifacts

defangdevs
and
claude
committed
972744d
fix(ci): fail the pin step on a failed field read, and check the pair both ways

defangdevs
and
claude
committed
4c73579
docs(promote): say why the record job's verify skips the channel re-hash

defangdevs
and
claude
committed
1f930e9

Commits on Sep 11, 2026

Merge branch 'master' into fix/632-release-gate
defangdevs
committed
a7ba129
fix(ci): gate every promote.yml/publish-template.yml path CodeRabbit flagged

defangdevs
and
claude
committed
2583995
Merge remote-tracking branch 'origin/master' into fix/632-release-gate
defangdevs
committed
bed0584
fix(ci): keep release_manifest.py's prefetch under promote.yml's job timeout

defangdevs
and
claude
committed
bdc22bc
fix(ci): stop splicing web_password into deploy-test.yml's shell

defangdevs
and
claude
committed
e516424
docs(aws): describe aws-ci.yml's always-reported gate, not its old trigger

defangdevs
and
claude
committed
ee4490b