control: DO NOT MERGE — PF-013 positive controls for the PyPI publish rehearsal gate (#350) - #367

Closed

dean0x wants to merge 5 commits into

mainfrom

ci/release-surface-gate-control

Commits on Sep 6, 2026

ci(release): run release.yml on release-surface PRs; rehearse the PyPI publish; add opt-in TestPyPI leg (#342, #350)
dean0x
committed
d993916
refactor(scripts): extract fetchChangedFiles from main() inline block
dean0x
committed
d518878
fix(release): rehearsal must never invoke gh-action-pypi-publish; fail closed on the PR-files API
dean0x
committed
df9ae24
fix(ci): align B1 with the approved plan — restore PR-time credential probes, fail closed on fork/Dependabot PRs, decouple the rehearsal from the napi matrix, harden gate controls (#342, #350)
dean0x
committed
c7f68b5
control(A): DO NOT MERGE — pin pypa/gh-action-pypi-publish to @v9.99.99 to prove the GHCR manifest probe fails closed (#350, PF-013)
dean0x
committed
fa62459