v0.5 production hardening: aarch64, attestation signing, supply-chain CI, threat model - #2

Merged

aimable100 merged 11 commits into

mainfrom

feat/v0.5-hardening

May 13, 2026

Commits on May 13, 2026

feat(guard): aarch64 Linux support + RESOLVE_NO_XDEV opt-in
aimable100
committed
1d88b33
feat(guard): pluggable attestation signing (Signer/Verifier traits)
aimable100
committed
7d6241f
chore(ci): supply-chain & release hardening
aimable100
committed
7fe93c6
docs: add SECURITY.md threat model
aimable100
committed
8f4d488
fix(guard): openat2 mode=0, Windows cfg, clippy needless_return
aimable100
committed
09a6b65
chore: deny duplicate versions in cargo-deny; TODO for real no_xdev test
aimable100
committed
b147336
fix(guard): magic link maps to SymlinkRejected (kernel collapses errno)
aimable100
committed
9099e8d
fix(guard): drop unused Errno::raw() helper
aimable100
committed
37692d2
fix(secure-open): gate to cfg(unix) on Windows
aimable100
committed
301db16
fix(tests): gate Unix-only test files for Windows --all-features
aimable100
committed
d46cf58
fix(docs): gate guard quick-start doctest on cfg(unix)
aimable100
committed
0a93335