nicweyand/argand-site-registry
1
0
Fork 0
Code Issues Pull requests Projects Releases 7 Packages Wiki Activity Actions

feat: harden reviewed registry releases
All checks were successful
Standalone registry checks / check (push) Successful in 3m43s
Details

Browse source
This commit is contained in:
Nic Weyand 2026-09-13 01:19:27 -04:00
commit e83f43d00f
Signed by: nicweyand
SSH key fingerprint: SHA256:2te+ycJIQON/Wo/dH6+ZkFSQ4HnHWpetV2azx9E65dQ
37 changed files with 2856 additions and 286 deletions
Download patch file Download diff file Expand all files Collapse all files

14
README.md
View file

@ -83,6 +83,10 @@ own admission policy. A null destination is a meaningful abstention.
The [consumer contract](docs/CONSUMERS.md) covers Rust dependencies, CLI JSON,
SQLite/JSONL distribution, compatibility and Argand's eventual upstream cutover.
Exact entity, URL/domain, source-separated popularity and redacted Curlie category
queries support audit tools. `resolve` also reports a stable abstention reason and
decision counts. The bounded `evaluate` command replays JSONL judgments and reports
accuracy plus native p50/p95 latency for one pinned generation.
## Sources and trust
@ -92,7 +96,9 @@ and the Public Suffix List (MPL 2.0) remain logically separate. Read the exact
Curlie attribution applies to names and categories as well as descriptions.
The [trust policy](docs/TRUST.md) explains enforced checks, publisher responsibilities,
evidence standards, expiry and revocation. [CONTRIBUTING.md](CONTRIBUTING.md),
evidence standards, expiry and revocation. The [publisher runbook](docs/PUBLISHING.md)
covers authenticated reviewer decisions, candidate inspection and activation.
[CONTRIBUTING.md](CONTRIBUTING.md),
[GOVERNANCE.md](GOVERNANCE.md) and [SECURITY.md](SECURITY.md) cover contributions,
decisions, disputes and incidents. Pull requests cannot directly approve destinations.
@ -109,9 +115,9 @@ documentation, Python release tests, and native Rust/Python consumer parity.
verification and rebuilding outside the checkout. The Forgejo workflow requires
a dedicated isolated runner; it has no signing or dataset-promotion authority.
The [validation record](docs/VALIDATION.md) reports the initial independent builds
and native acceptance. Hosted CI requires runner provisioning; the workflow is
included and Actions remains disabled until an isolated runner is ready.
The [validation record](docs/VALIDATION.md) reports independent builds and native
acceptance. Hosted checks use the repository's isolated Forgejo runner label and
have no dataset, review, signing or activation authority.
The code remains **AGPL-3.0-or-later**; the complete license is in [LICENSE](LICENSE).
Original attribution is retained. [UPSTREAM.json](UPSTREAM.json) records the signed