fix: exercise strict release checks in CI

2026-09-19 10:01:23 -04:00
parent 197e6a3a70
commit b13df3fa34
8 changed files with 46 additions and 11 deletions
@@ -82,7 +82,9 @@ persistent deployment.
 Read-only `tea` inspection on 2026-09-19 reported no Gitea workflows or runs
 for `jb/eden`; runner labels, Docker availability, and action availability are
 therefore not validated. The workflow is prepared locally but has not run
-remotely.
+remotely. The source job runs a strict staging release check after building
+the client, and the separate container job validates Compose expansion and
+builds the digest-pinned web image.
 No browser automation, OAuth callback failure injection, Convex migration
 rollback, instance-credential backup/restore, key rotation, or live
 revocation/transfer evidence is claimed by this lane. Those remain explicit