Skip to content

Extend Distribution verifier for marketplaces - #3

Merged
woksin merged 1 commit into
mainfrom
generated/public-marketplace-control
Aug 28, 2026
Merged

woksin merged 1 commit into
mainfrom
generated/public-marketplace-control

Conversation

@woksin

@woksin woksin commented Aug 28, 2026

Copy link
Copy Markdown
Collaborator

Summary

Extends the generated Distribution verifier to admit the exact public evaluation marketplace state while preserving all existing fixture and candidate checks.

Changed

  • Verify marketplace canonical/plugin byte parity from explicit copy inventories.
  • Admit .github/plugin/marketplace.json as manifested payload rather than control-plane code.
  • Require publication availability to remain distinct from installation support and stable promotion.

Security

  • Preserve exact inventory, JSON parsing, checksums, provenance, script/dependency rejection, package lifecycle smoke, and rollback simulation.

Admit exact public evaluation marketplace payloads while preserving fixture compatibility, byte parity, checksums, package lifecycle, and rollback checks.
@woksin
woksin merged commit 56d656a into main Aug 28, 2026
7 checks passed
@woksin
woksin deleted the generated/public-marketplace-control branch August 28, 2026 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant