Release-process hardening, and the punt receipt CLOUD-1390 never shipped - #956

Merged

wenzowski merged 9 commits into

mainfrom

claude/release-process-issues-gnphm0

Sep 16, 2026

Commits on Sep 16, 2026

feat(attribution)!: judge who cut a tag, from the tag object rather than its commit
wenzowski
committed
c990aa6
fix(ci): a release leg provisions what it needs, not every pinned tool
wenzowski
committed
2c15d62
fix(land): read why the bot refused instead of asserting non-descent
wenzowski
committed
a57222a
fix(ci): a missing release credential fails the job instead of downgrading silently
wenzowski
committed
933f2f7
fix(land): sweep the fourth branch-keyed receipt family on retirement
wenzowski
committed
415d2fb
fix(land): report the bot's own refusal instead of mapping it to remedies
wenzowski
committed
a5a8dd3
feat(rules)!: refuse the next write after a turn stopped with work unlanded
wenzowski
committed
5e40fda
fix(attribution): join the no-identity arms instead of escaping the lint
wenzowski
committed
21fd318
fix(ci-parity): name the provisioning action the way the tree already names it
wenzowski
committed
4fab657