fix: harden release metadata and runtime (#29) #12

Job	Run time
Verify the authorized immutable release recovery	0s
Maintain the reviewed release PR and release	0s
Select one independently verified release identity	-1s
Verify the exact release commit against CometAPI	-1s
Verify and build the immutable default-branch release	-1s
Publish verified artifacts with PyPI OIDC	0s
Verify the public registry artifact	0s
	-3s

Navigation Menu