[Homebrew/VFS] Verify the lazy shell before boot and activate Homebrew atomically - #1109

Merged

brandonpayton merged 22 commits into

mainfrom

homebrew/sealed-lazy-lifecycle-qk044

Jul 27, 2026

Commits on Jul 26, 2026

[VFS] Authenticate sealed package trees before composition
brandonpayton
committed
91009ea
[VFS] Authenticate restored images before derived output
brandonpayton
committed
5aee904
[Browser/VFS] Keep boot ownership continuous across async work
brandonpayton
committed
ab8831e
[VFS/Security] Authenticate sealed lazy images before use
brandonpayton
committed
95fed07
[Homebrew/Product] Activate brew atomically from the lazy bottled shell
brandonpayton
committed
9bf83cc
[Homebrew/Product] Inherit resident Dinit in shell-derived images
brandonpayton
committed
6400c0f
[Homebrew/Test] Prove resident Dinit inheritance boundaries
brandonpayton
committed
2db92a8
[Packaging] Bind VFS package identities to sealed helpers

Kandelo Integration Rehearsal
authored and
brandonpayton
committed
1296867
[Homebrew/Acceptance] Gate the exact live stock lifecycle
brandonpayton
committed
ff545e5
[Homebrew/Acceptance] Require live main authority for lifecycle cutover
brandonpayton
committed
9705132
[Homebrew/CI] Separate source-shell and bottle validation
brandonpayton
committed
ae66f0b
fix(pages): build exact source-rootfs shell bridge
brandonpayton
committed
1d8b16d
fix(pages): contain source bridge to hosted runner
brandonpayton
committed
59e7e87
[Homebrew/CI] Keep temporary source-shell gates fail closed
brandonpayton
committed
0104d21
[Packaging/Publication] Gate pending package closures before release
brandonpayton
committed
9e00479
[Packaging/Provenance] Validate generation re-homing explicitly
brandonpayton
committed
40498e2
[Packaging/Releases] Advance changed VFS package revisions
brandonpayton
committed
1115a19
[CI/Packaging] Test pending package closures without publishing them
brandonpayton
committed
5df3dac
[CI/Packaging] Preserve resolver ownership during shell validation
brandonpayton
committed
5765e0f

Navigation Menu

Uh oh!

[Homebrew/VFS] Verify the lazy shell before boot and activate Homebrew atomically - #1109

[Homebrew/VFS] Verify the lazy shell before boot and activate Homebrew atomically#1109
brandonpayton merged 22 commits into
mainfrom
homebrew/sealed-lazy-lifecycle-qk044

Commits on Jul 26, 2026

[VFS] Authenticate sealed package trees before composition

[VFS] Authenticate restored images before derived output

[Browser/VFS] Keep boot ownership continuous across async work

[VFS/Security] Authenticate sealed lazy images before use

[Homebrew/Product] Activate brew atomically from the lazy bottled shell

[Homebrew/Product] Inherit resident Dinit in shell-derived images

[Homebrew/Test] Prove resident Dinit inheritance boundaries

[Packaging] Bind VFS package identities to sealed helpers

[Homebrew/Acceptance] Gate the exact live stock lifecycle

[Homebrew/Acceptance] Require live main authority for lifecycle cutover

[Homebrew/CI] Separate source-shell and bottle validation

fix(pages): build exact source-rootfs shell bridge

fix(pages): contain source bridge to hosted runner

[Homebrew/CI] Keep temporary source-shell gates fail closed

[Packaging/Publication] Gate pending package closures before release

[Packaging/Provenance] Validate generation re-homing explicitly

[Packaging/Releases] Advance changed VFS package revisions

[CI/Packaging] Test pending package closures without publishing them

[CI/Packaging] Preserve resolver ownership during shell validation

Commits on Jul 27, 2026

[Packaging/Resolver] Preserve exact local package generations

[Homebrew/CI] Test each shell image against the exact files it owns

[Homebrew/CI] Retire incompatible rootfs cache admission