COPPER FOUNDRY / SOURCE VERIFICATION

Control Center

A software candidate is more than a claimed green result. Forge checks exact source identity, protected runtime files, and the evidence bound to them.

Open Verification Workbench →

Release gate · HOLD

No release credentials or promotion authority are present. A verification PASS means only that the declared source checks passed.

Preview source

Commit
UNVERIFIED — Git metadata unavailable
Tree
UNVERIFIED
Tracked changes
None
CI
No fresh hosted CI run. Local checks are reported per run.

Safe · GitLab Duo repair

Recheck the preserved J1 repair source against the pinned runtime policy. Historical Duo attribution and CI; source integrity checks run now.

Open in Workbench →

Unsafe · weakened guard

A real controlled Git commit replaces the protected guard with an unconditional approval. The source tier inspects it as data; its separate bounded behavioral attempt fails closed.

Open in Workbench →

Forged · release receipt

The genuine repair source is paired with a receipt claiming a different commit and tree. Source-to-receipt binding must fail.

Open in Workbench →