mirror of
https://github.com/nyakang/nyaterm.git
synced 2026-11-07 00:07:20 +00:00
Pin package checkouts and validate per-target source provenance before signing or reusing artifacts. Separate verification from GitHub and R2 publication, and exercise invalid signatures and rehearsal publication gates.