Harden runtime tuple recertification policy

2026-07-18 16:46:56 -07:00
parent 84c0d80b76
commit 0d0ab1f23f
20 changed files with 1753 additions and 120 deletions
--- a/profiles/strict-v2.json
+++ b/profiles/strict-v2.json
@@ -1,6 +1,8 @@
 {
  "id": "strict-v2",
  "owner": "leela",
+  "certification_mode": "executable-consumer-attestation",
+  "shared_ruby_probe_sufficient": false,
  "required_behaviors": [
    "exact-upstream-version-and-commit",
    "bun-toolchain-provenance",