mirror of
https://github.com/stablyai/orca.git
synced 2026-10-17 08:03:14 +00:00
Jinwoo Hong
3e9054c737
- Update package-electron-runtime-contract test: the old test pinned the pre-inner-signing layout (publish immediately after installer verify); now pins the new fail-open contract (inner verify + evidence upload between verify and publish, warn-only gate, continue-on-error chain). - Budget SignPath waits under the 360-minute hosted-job cap: explicit timeout-minutes on build, inner-signing wait 4h -> 1h (missing the window falls through to today's unsigned-inner flow). - Wrap the evidence gate in try/catch so unexpected script errors cannot block a release while the gate is warn-only. - Rehearsal workflow: persist-credentials false, same 1h inner wait.