2 Commits

Author	SHA1	Message	Date
Alpamys	5d7828d40b	test(ci): ANSI-robust help-text asserts in test_v0712 (v0.71.2) ... CI installs [dev] with FORCE_COLOR, so Rich colorizes Typer --help and splits an option name like --key into ANSI-wrapped segments (\x1b[1;36m-\x1b[0m\x1b[1;36m-key\x1b[0m). The 4 raw-substring help asserts passed locally (no color) but failed on all 9 CI test jobs. Add a module-level _strip_ansi() helper and route the sign/verify/merge/ attest-emit --help substring checks through it (mirrors the v0.71.1 test_serve --record-thumbs fix). Confirmed locally under FORCE_COLOR=1: all 4 pass; ANSI-strip alone is sufficient (no flag line-wraps). Test-only change on the unreleased v0.71.2 — no version bump.	2026-06-01 17:36:17 +05:00
Alpamys	9300ee3412	feat(governance,sign): v0.71.2 — ed25519 signing + supply-chain gates ... ed25519 signing (#179/#185 ed25519 half): new utils/signing.py + [sign] extra. `soup adapters sign/verify --backend ed25519` (--key/--generate-key/ --public-key) and `soup attest emit --sign ed25519` + new `soup attest verify`. Sigstore keyless stays infra-blocked (OIDC/Fulcio/Rekor network). #186 namespace-pin gate wired into download_repo (anti-AI-Jacking; fail-open) #187 adapters merge auto-detects each adapter's license #190 license-override reason recorded to the audit log #191 NamespacePinStore WAL + busy_timeout + cross-process lock #192 merge refuses scan-FAIL inputs unless --allow-unscanned +106 tests (12153 -> 12259); full suite 79.07% cov. cryptography added to [dev] for CI. 5 review waves, all findings fixed.	2026-06-01 17:17:44 +05:00