govoplan

Author	SHA1	Message	Date
Albrecht Degering	9c0650b2ed	Bind installed releases to signed artifact receipts	2026-07-22 20:42:05 +02:00
Albrecht Degering	ddee5c00dc	fix(assessment): keep release origin unproven Some checks failed Dependency Audit / dependency-audit (push) Failing after 15s Details Security Audit / security-audit (push) Failing after 14s Details	2026-07-22 19:55:35 +02:00
Albrecht Degering	19c4b63ade	fix(assessment): harden capability evidence trust	2026-07-22 19:21:06 +02:00
Albrecht Degering	6c0b003dee	feat(assessment): verify installed composition evidence	2026-07-22 18:34:02 +02:00