[Homebrew/Security] Run sealed Formula checks against the authenticated source tree - #1082

Merged

brandonpayton merged 13 commits into

mainfrom

homebrew/formula-xtask-authority-qk044

Jul 24, 2026

Commits on Jul 24, 2026

[Homebrew] Seal prepublication package generations
brandonpayton
committed
a0450c3
[Packaging] Attribute browser ZIPs to their bundle packages
brandonpayton
committed
6bb2b98
[Homebrew] Clarify the sealed publisher descendant
brandonpayton
committed
dc8f830
[Homebrew] Seal Formula resolver checker authority
brandonpayton
committed
0466c42
[Homebrew] Keep checker handoff out of package identity
brandonpayton
committed
74e8a10
[Homebrew] Detach Formula checker from Cargo hardlinks
brandonpayton
committed
5669c1d
[Homebrew] Read Formula checker through its sealed alias
brandonpayton
committed
f0cbe75
[Homebrew] Require the checker seal’s exact read-only mode
brandonpayton
committed
c303579
[Homebrew/Test] Separate private and replaceable checker fixtures
brandonpayton
committed
250d228
[Homebrew/Test] Reseal checker after fixture mutations
brandonpayton
committed
01129b4
[Homebrew] Preserve the sealed checker through Formula tests
brandonpayton
committed
9819f87
[Homebrew/Security] Give Formula tests a root-owned checker
brandonpayton
committed
ec586b9
[Homebrew/Security] Bind sealed checks to the authenticated source root
brandonpayton
committed
2a8b317