Skip to content

Stand up a frozen registry mirror + epoch refresh policy #7

Description

@ronimoe

Context

The hermetic gate assumes a truly immutable registry snapshot (not a live/caching proxy) — the strongest freeze. Stand one up (devpi/bandersnatch/Verdaccio/Athens/cargo-vendor) with epoch bookkeeping.

Acceptance

Two specs in one merge cycle resolve against byte-identical registry state; a mid-cycle publish/yank does not change resolution; an epoch flip is a deliberate, journaled barrier.

Seam

tools/hermetic/ adapters' registry_snapshot.

Metadata

Metadata

Assignees

No one assigned

    Labels

    operational-hardeningWiring real GitHub/CI/registry behind the engine seams

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions