Build caching for deploy actions (sccache) - #347

Draft

aram356 wants to merge 47 commits into

mainfrom

feature/build-app-cli-cache

Commits on Aug 27, 2026

build-app-cli cache: fail-closed image.json digest-pin validator
aram356
committed
b012273
Merge branch 'main' into feature/build-app-cli-cache
aram356
authored
3b5436b

Commits on Aug 28, 2026

Move build-caching spec to docs/superpowers/specs (superpowers convention)
aram356
committed
55dcf07
Timestamp the build-caching spec filename to match the superpowers convention
aram356
committed
aac4448
check-image-pin: reject non-string repository/tag/digest (jq -r coercion gap)
aram356
committed
599ffef
build-caching spec v6.15 + plan: address the v6.14 review's findings
aram356
committed
9f7526b
check-image-pin: require the canonical EdgeZero GHCR repository
aram356
committed
e040db4
build-caching spec v6.16 + plan: address the v6.15 review's contract findings
aram356
committed
3e1ae38

Commits on Aug 29, 2026

build-caching spec v6.17 + plan: address the v6.16 review's contract findings
aram356
committed
3f81105

Commits on Aug 31, 2026

docs: finalize build caching design and plan
aram356
committed
4cda752
docs: harden build caching release contracts
aram356
committed
2ea8c2d

Commits on Sep 4, 2026

docs: finalize build cache design and plans
aram356
committed
97b2eec
docs: close build cache design review gaps
aram356
committed
dbef380

Commits on Sep 5, 2026

docs: fix cache runner identity contracts
aram356
committed
9a778ea

Commits on Sep 6, 2026

docs: harden cache workflow guard contracts
aram356
committed
6743379
ci: enforce exact action versions and documentation release gates
aram356
committed
b358974
feat: add canonical provenance JSON protocol and schema
aram356
committed
8f68476

Commits on Sep 7, 2026

docs: reconcile caching contracts and consolidate deployment docs
aram356
committed
30b87db

Commits on Sep 8, 2026

docs: close build cache v6.31 contracts
aram356
committed
76ecccb
fix(ci): align documentation gate with v6.31
aram356
committed
b32efbc
Merge branch 'main' of github.com:stackpop/edgezero into feature/build-app-cli-cache
aram356
committed
c8cfefc
docs: refresh v6.31 verification evidence
aram356
committed
147f797
docs: record hosted selector qualification
aram356
committed
7d78da8
docs: correct release qualification order
aram356
committed
7ed2600
feat: add provenance archive protocol
aram356
committed
b6167a7
feat: add ELF provenance validation
aram356
committed
3d0984c
feat: add provenance validator CLI
aram356
committed
525a18d
feat: validate build container pin records
aram356
committed
785a6c0
feat: add verified build container source
aram356
committed
fa810a1
feat: verify build container images
aram356
committed
786ef5e

Commits on Sep 9, 2026

feat: qualify build image runtime
aram356
committed
ee7336e

Commits on Sep 11, 2026

feat(actions): add protected build container gate
aram356
committed
82c6696

Commits on Sep 12, 2026

fix(actions): protect build container workflow namespace
aram356
committed
409b38a
fix(actions): make build container CI portable
aram356
committed
0eef6f0
test(actions): model publisher probe repository read
aram356
committed
c67c5cd

Commits on Sep 13, 2026

fix(actions): close toolchain and rotation boundaries
aram356
committed
3941995
fix(provenance): pin owned inode during cleanup
aram356
committed
59bc454
fix(fastly): preserve runtime store mappings
aram356
committed
44cab91
fix(actions): validate workflow code owners
aram356
committed
bce5670
fix(actions): harden release prerequisite audit
aram356
committed
ad6a806
test(actions): make toolchain failures reason sensitive
aram356
committed
a280e80
test(actions): validate archive fixture content
aram356
committed
14458bf
fix(fastly): redact provisioning command failures
aram356
committed
372fb67
test(actions): isolate archive content verdicts
aram356
committed
10ecc74
fix(actions): make release ownership audit exact
aram356
committed
a24db91
docs: correct provisioning cleanup guidance
aram356
committed
d9eb8e9

Commits on Sep 15, 2026

chore(actions): isolate build container gate baseline
aram356
committed
277b876