Harden runtime tuple recertification policy

2026-07-18 16:46:56 -07:00
parent 84c0d80b76
commit 0d0ab1f23f
20 changed files with 1753 additions and 120 deletions
--- a/profiles/plugin-ledger.json
+++ b/profiles/plugin-ledger.json
@@ -1,6 +1,8 @@
 {
  "id": "plugin-ledger",
  "owner": "opencode-ajent",
+  "certification_mode": "executable-consumer-attestation",
+  "shared_ruby_probe_sufficient": false,
  "required_behaviors": [
    "exact-upstream-image",
    "exact-plugin-version",