nicweyand/argand-site-registry
1
0
Fork 0
Code Issues Pull requests Projects Releases 7 Packages Wiki Activity Actions

feat: harden reviewed registry releases
All checks were successful
Standalone registry checks / check (push) Successful in 3m43s
Details

Browse source
This commit is contained in:
Nic Weyand 2026-09-13 01:19:27 -04:00
commit e83f43d00f
Signed by: nicweyand
SSH key fingerprint: SHA256:2te+ycJIQON/Wo/dH6+ZkFSQ4HnHWpetV2azx9E65dQ
37 changed files with 2856 additions and 286 deletions
Download patch file Download diff file Expand all files Collapse all files

4
GOVERNANCE.md
View file

@ -15,8 +15,8 @@ a consumer's accepted destinations or signing keys.
Policy, license, normalization, source-allowlist and signature changes receive
explicit maintainer review and complete acceptance checks. Additional independent
review is appropriate for trust-boundary changes when another qualified reviewer
is available. This is a governance expectation; the current software does not
enforce a multi-reviewer quorum or authenticate a free-text reviewer name.
is available. The software authenticates each decision to an allowed SSH reviewer
identity, but does not enforce a multi-reviewer quorum.
Corrections and appeals must identify the exact assertion or review fingerprint
and supply contrary evidence. Retain the original claim and decision, append the