Skip to content

Document StoreKit2 RC1 provenance#2

Merged
Kapusch merged 1 commit into
masterfrom
agent/document-storekit2-rc1-provenance
Jul 16, 2026
Merged

Document StoreKit2 RC1 provenance#2
Kapusch merged 1 commit into
masterfrom
agent/document-storekit2-rc1-provenance

Conversation

@Kapusch

@Kapusch Kapusch commented Jul 16, 2026

Copy link
Copy Markdown
Owner

Summary

Document the immutable historical provenance mismatch for Kapusch.StoreKit2.iOS 1.0.0-rc.1 discovered during the final package inventory:

  • published nuspec source commit: f453c9da75a99e3d2ea45de9b78314afd332ebda
  • retained annotated tag target: 27cc3daaa47a45f80399736880bef4df9f6d025e
  • official nupkg SHA-256: 3597ea716e0bcdbcca6942e66bd5348589d9422affab0992eda7814c1f3311cb

Both commits remain reachable from master. The documentation explicitly prohibits moving the tag or republishing the immutable version and distinguishes tag source history from authoritative package build metadata.

Validation

  • downloaded the official NuGet V3 flat-container package and inspected its nuspec
  • verified the recorded SHA-256
  • verified both historical commits are ancestors of origin/master
  • git diff --check passed

@Kapusch
Kapusch marked this pull request as ready for review July 16, 2026 18:51
@Kapusch
Kapusch merged commit 865fbd3 into master Jul 16, 2026
1 check passed
@Kapusch
Kapusch deleted the agent/document-storekit2-rc1-provenance branch July 16, 2026 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant