[Homebrew/Publisher] Secure and unblock tap-owned bottle builds - #1121

Merged

brandonpayton merged 13 commits into

mainfrom

packaging/sealed-tap-recipes-main-qk044

Jul 28, 2026

Commits on Jul 27, 2026

[Homebrew] Attest and isolate tap-owned recipe builds
brandonpayton
committed
7d17ea3
Homebrew: isolate tap recipes in a closed service root
brandonpayton
committed
4952b22
[Homebrew/Build] Keep recipe identity out of package cache keys
brandonpayton
committed
d586391
[Homebrew/Test] Make socket boundary fixtures path-independent
brandonpayton
committed
df5fc6a
[Homebrew/Security] Make directory seals filesystem-independent
brandonpayton
committed
3223749
[Homebrew/Security] Exercise the complete sealed recipe boundary
brandonpayton
committed
a431470
[Homebrew/Security] Admit protected host version selectors
brandonpayton
committed
5396996
[Homebrew/Security] Source the supervisor from sealed tools
brandonpayton
committed
a33a517
[Homebrew/Security] Enforce schema 3 namespace invariants
brandonpayton
committed
4c1534a
[Homebrew/Security] Bind the sealed recipe publisher contract
brandonpayton
committed
d329dab
[Homebrew] Validate executable and side-module bottle roles
brandonpayton
committed
8915cb7
Homebrew: project attested Formula resources into recipes
brandonpayton
committed
198cc28

Commits on Jul 28, 2026

[Homebrew/Publisher] Admit source-owned Formulae through the wasm32 lane
brandonpayton
committed
0187ff0