Context
The hermetic gate assumes a truly immutable registry snapshot (not a live/caching proxy) — the strongest freeze. Stand one up (devpi/bandersnatch/Verdaccio/Athens/cargo-vendor) with epoch bookkeeping.
Acceptance
Two specs in one merge cycle resolve against byte-identical registry state; a mid-cycle publish/yank does not change resolution; an epoch flip is a deliberate, journaled barrier.
Seam
tools/hermetic/ adapters' registry_snapshot.
Context
The hermetic gate assumes a truly immutable registry snapshot (not a live/caching proxy) — the strongest freeze. Stand one up (devpi/bandersnatch/Verdaccio/Athens/cargo-vendor) with epoch bookkeeping.
Acceptance
Two specs in one merge cycle resolve against byte-identical registry state; a mid-cycle publish/yank does not change resolution; an epoch flip is a deliberate, journaled barrier.
Seam
tools/hermetic/adapters'registry_snapshot.