feat: enforce cross-repository conformance evidence

[BunsDev]

Summary

• freeze the complete SDK 0.1 cross-repository assertion, schema, platform, source, and artifact contract
• authenticate exact protected GitHub platform evidence and bind release readiness to one named passing aggregate
• separate conformance artifacts from exact-byte publication candidates and [SDK 0.1.0][P0] Complete the first-release security review and ship/block disposition #40 authorization
• lock protected workflow graphs, environment approvals, toolchain identities, and sterile npm publication

Current state

This PR does not fabricate evidence or enable publication. publishingEnabled remains false, public packages remain private, and aggregateRecord remains null until Chat emits compatible schema-v2 records on darwin-arm64, linux-x64, and win32-x64.

Validation

• 1,448 SDK tests
• 321 focused security/conformance checks
• typecheck and lint
• exact package/release artifact verification
• live GitHub environment policy receipt verified for publication-candidate, npm-release, and npm-publish
• independent final adversarial approval

Advances #38, #40, and #41.

[Copilot]

Pull request overview

This PR strengthens the SDK’s release-readiness and supply-chain gates by formalizing cross-repository conformance inputs (#38) and protected GitHub environment evidence (#40), and wiring those checks into CI and artifact generation/verification so release progression depends on authenticated, pinned evidence.

Changes:

• Introduces a frozen cross-repository conformance contract (schema/lock/registry/docs) and new focused test suites that validate parsing, aggregation constraints, and CLI security boundaries.
• Hardens release workflows and tooling: stricter permissions, checkout credential persistence disabled, OIDC/attestation isolation, environment policy verification, and authenticated toolchain/runtime checks.
• Splits conformance artifacts from publication-candidate artifacts and updates verification scripts and tests to enforce the separation and gating rules.

Reviewed changes

Copilot reviewed 46 out of 60 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
tests/workflow-pins.spec.ts	Updates workflow pin/permission expectations and adds new workflow invariants.
tests/release-runtime-integrity.spec.ts	Adds tests for sterile env + authenticated Node/Corepack/npm integrity.
tests/release-policy.spec.ts	Expands policy assertions for new evidence/attestation requirements.
tests/release-oidc-isolation.spec.ts	Ensures OIDC-bearing jobs are isolated and action-only where required.
tests/release-environment-policy.spec.ts	Adds tests for live GitHub environment policy receipts and gating.
tests/release-artifacts.spec.ts	Splits and verifies conformance vs publication artifact schemas and rules.
tests/publication-source-identity.spec.ts	Adds tests ensuring publication metadata transforms don’t alter reviewed source.
tests/packed-package.spec.ts	Adds tests for authenticated build invocation and hook-free packing behavior.
tests/package-manifests.spec.ts	Adjusts script contract so verify:compat excludes release identity checks.
tests/environment-approval.spec.ts	Adds protected environment approval evidence/receipt tests.
tests/conformance-contract.spec.ts	Adds contract entrypoint tests for #38 lock/schema/registry behavior.
tests/conformance-cli-security.spec.ts	Adds CLI security boundary tests for aggregation coordinator behavior.
scripts/verify-release-readiness.mjs	Tightens CLI defaults/flags for release-readiness verification.
scripts/verify-package.mjs	Switches to conformance artifacts verification terminology/paths.
scripts/verify-github-environment-policies.mjs	New CLI to verify and optionally persist environment policy receipts.
scripts/verify-committed-conformance-evidence.mjs	New verifier for committed lock/schema/registry + GitHub evidence binding.
scripts/repository-metadata.mjs	Uses absolute tar path and allows passing env for deterministic unpacking.
scripts/repository-metadata.d.mts	Updates typing for new readPackedPackageManifest options.
scripts/release-runtime-integrity.mjs	Adds authenticated runtime/toolchain integrity utilities and constants.
scripts/release-runtime-integrity.d.mts	Types for release runtime integrity module exports.
scripts/release-readiness.d.mts	Extends release config/schema typing and readiness option surface.
scripts/publish-release-artifacts.d.mts	Updates types to reflect publication artifacts + approval evidence inputs.
scripts/publication-source-identity.d.mts	Adds types for publication source identity manifest/transform/verification.
scripts/package-artifacts.mjs	Hardens pnpm execution and packing/build logic for release contexts.
scripts/package-artifacts.d.mts	Updates typings for new packing/build helper APIs and options.
scripts/github-release-authorization.d.mts	Adds types for publication security review/authorization records.
scripts/github-environment-policy.d.mts	Adds types for environment policy receipts and verification functions.
scripts/github-environment-approval.d.mts	Adds types for pending approval evidence and protected approval receipts.
scripts/github-environment-approval-evidence.d.mts	Adds types for capturing/verifying approval evidence artifacts.
scripts/github-conformance-evidence.d.mts	Adds types for GitHub conformance verification and workflow checks.
scripts/create-release-artifacts.d.mts	Updates manifest types for conformance vs publication artifact sets.
scripts/conformance-contract.d.mts	Adds comprehensive types for #38 lock/schema/records/aggregation.
scripts/aggregate-client-v1-conformance.d.mts	Adds types for conformance aggregation and checkout inspection helpers.
release.config.json	Bumps schema and adds conformance evidence + protected approval configuration.
README.md	Updates validation instructions to use pnpm verify:release and GH env vars.
package.json	Adds/updates conformance scripts and refactors verify script topology.
docs/workflows/client-v1-cross-repository-conformance.md	New detailed contract/workflow documentation for #38 evidence.
docs/client-v1-cross-repository-results/README.md	New results directory semantics and fail-closed explanation.
conformance/release-artifact-manifest.schema.json	New schema separating conformance vs publication-candidate manifests.
conformance/client-v1-cross-repository-lock.json	New frozen lock defining #38 candidate/sources/toolchain/scanners.
conformance/client-v1-cross-repository-assertions.json	New frozen assertion registry defining required IDs and exclusions.
.github/workflows/ci.yml	Tightens permissions and adds authoritative release gate verification step.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.