From 641024fed438bdb7f94c0c11ed8c9d18b70473ec Mon Sep 17 00:00:00 2001
From: Constantin <74049135+constantin-jais@users.noreply.github.com>
Date: Sat, 10 Oct 2026 05:23:05 +0200
Subject: [PATCH] chore(bun): carry the three-day release-age guard on every
 install root

The fleet gate check-release-age (project-governance) requires every
tracked bunfig.toml to set [install] minimumReleaseAge >= 259200 with no
undeclared minimumReleaseAgeExcludes, and every directory holding a tracked
bun.lock to hold a bunfig.toml: Bun reads the configuration of the
directory it runs in, so a lockfile next to no configuration installs
unguarded (threat triage 2026-10-09, menace 6).

Claude-Session: https://claude.ai/code/session_01F18JyLzoGrRpt7efAr4E92
Signed-off-by: Constantin <74049135+constantin-jais@users.noreply.github.com>
---
 bunfig.toml | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 bunfig.toml

diff --git a/bunfig.toml b/bunfig.toml
new file mode 100644
index 0000000..0524d72
--- /dev/null
+++ b/bunfig.toml
@@ -0,0 +1,3 @@
+[install]
+minimumReleaseAge = 259200
+minimumReleaseAgeExcludes = []