Batch 4 part 2 — kayak-deploy: digest-verified paired releases (S7, D2) - #190

Merged

mousebrains merged 14 commits into

mainfrom

b4-paired-release

Jun 13, 2026

Commits on Jun 13, 2026

feat(deploy): kayak-deploy — digest-verified paired-release staging + activation (S7/4B, D2)

mousebrains
and
claude
committed
bd4241d
fix(ci): deploy tests use a bare scratch engine repo — CI checks out detached HEAD

mousebrains
and
claude
committed
90ac841
fix(ci): engine fixture archives the tree into a fresh repo — CI checkout is shallow too

mousebrains
and
claude
committed
cafe204
fix(ci): deployer bootstraps pip via venv/ensurepip — no host pip assumed

mousebrains
and
claude
committed
1c7d7cb
fix(review): kayak-deploy — sidecar apply, full quiesce, config-aware identity, locked deps, virgin rollback

mousebrains
and
claude
committed
6f746c7
fix(review): activation gate, wrapper-installed config, stable identity, locked build backend, virgin pre-switch rollback

mousebrains
and
claude
committed
b98c83a
fix: reproducible wheel bytes via SOURCE_DATE_EPOCH=commit timestamp

mousebrains
and
claude
committed
255e856
fix: drop database_url from the normalized config view

mousebrains
and
claude
committed
e8f04f0
fix(review): config rollback, secret filtering, app-user model, build-lock CI check, activation test

mousebrains
and
claude
committed
65b7f29
fix(review): app-user DB boundary, consumer cutover gate, reused-release verify (4th round)

mousebrains
and
claude
committed
97a2987
fix(review): live-host env model, cutover exemptions, release pruning, type-based secret exclusion

mousebrains
and
claude
committed
be43a93
fix(deploy): atomic symlink cutover that survives an existing current

mousebrains
and
claude
committed
abb8ded
fix(deploy): stage on real disk, not /tmp (tmpfs ENOSPC)

mousebrains
and
claude
committed
a22585b
fix(deploy): harden per the live-server reviews (app-env, reuse, umask, units)

mousebrains
and
claude
committed
530b4a0

Navigation Menu

Batch 4 part 2 — kayak-deploy: digest-verified paired releases (S7, D2) - #190

Batch 4 part 2 — kayak-deploy: digest-verified paired releases (S7, D2)#190
mousebrains merged 14 commits into
mainfrom
b4-paired-release

Commits on Jun 13, 2026

feat(deploy): kayak-deploy — digest-verified paired-release staging + activation (S7/4B, D2)

fix(ci): deploy tests use a bare scratch engine repo — CI checks out detached HEAD

fix(ci): engine fixture archives the tree into a fresh repo — CI checkout is shallow too

fix(ci): deployer bootstraps pip via venv/ensurepip — no host pip assumed

fix(review): kayak-deploy — sidecar apply, full quiesce, config-aware identity, locked deps, virgin rollback

fix(review): activation gate, wrapper-installed config, stable identity, locked build backend, virgin pre-switch rollback

fix: reproducible wheel bytes via SOURCE_DATE_EPOCH=commit timestamp

fix: drop database_url from the normalized config view

fix(review): config rollback, secret filtering, app-user model, build-lock CI check, activation test

fix(review): app-user DB boundary, consumer cutover gate, reused-release verify (4th round)

fix(review): live-host env model, cutover exemptions, release pruning, type-based secret exclusion

fix(deploy): atomic symlink cutover that survives an existing current

fix(deploy): stage on real disk, not /tmp (tmpfs ENOSPC)

fix(deploy): harden per the live-server reviews (app-env, reuse, umask, units)