Safe · GitLab Duo repair
Recheck the preserved J1 repair source against the pinned runtime policy. Historical Duo attribution and CI; source integrity checks run now.
Open in Workbench →Inspect the source. Verify the evidence. Hold the release.
COPPER FOUNDRY / SOURCE VERIFICATION
A software candidate is more than a claimed green result. Forge checks exact source identity, protected runtime files, and the evidence bound to them.
No release credentials or promotion authority are present. A verification PASS means only that the declared source checks passed.
Recheck the preserved J1 repair source against the pinned runtime policy. Historical Duo attribution and CI; source integrity checks run now.
Open in Workbench →A real controlled Git commit replaces the protected guard with an unconditional approval. The source tier inspects it as data; its separate bounded behavioral attempt fails closed.
Open in Workbench →The genuine repair source is paired with a receipt claiming a different commit and tree. Source-to-receipt binding must fail.
Open in Workbench →