feat: add signed trust bundles, JVM verification and install policy - #207

Merged

brunoro merged 13 commits into

mainfrom

feat/tool-signing-policy

Sep 30, 2026

Commits on Sep 14, 2026

feat: add initial trust bundle builder and vectors
brunoro
committed
a66a24e
fix: harden trust bundle validation and build recovery
brunoro
committed
9ac7a14
fix: validate all bundle pins and normalize separator bytes
brunoro
committed
0054f57
feat: add JVM trust bundle verification and store
brunoro
committed
7c8952a
fix: parse certs using BouncyCastle
brunoro
committed
4975973
test: clarify trust bundle test scenarios
brunoro
committed
7f906bf

Commits on Sep 21, 2026

fix: enforce trust bundle encoding parity
brunoro
committed
db15c1f

Commits on Sep 23, 2026

feat: add LightInstallPolicy and the threat matrix
brunoro
committed
ad81e8a
ci: stop installing the removed `tools` SDK package
brunoro
committed
699a90f

Commits on Sep 29, 2026