Enable arm64 runtime smoke execution

2026-08-03 19:11:45 +02:00
parent af27b9fbdf
commit 017aa7a702
3 changed files with 21 additions and 0 deletions
@@ -160,6 +160,10 @@ as immutable release assets.
 PostgreSQL and Redis indexes are resolved to untagged platform-child digests
 before each smoke run. This keeps the evidence architecture-specific and
 avoids retargeting one local Docker tag between incompatible platforms.
+The CI host registers arm64 execution with an explicitly supplied,
+digest-pinned `tonistiigi/binfmt` image immediately before the smoke. This
+privileged helper is confined to the release runner and is never part of a
+GovOPlaN target deployment or its runtime image set.
 The smoke also proves a bounded post-migration table contract and aborts as
 soon as a required container exits, rather than allowing a dead process to
 consume the full readiness timeout.