release: prepare ForgeFlow 0.10.1

2026-07-30 00:49:58 +02:00
1 parent 6ef4620388
commit 60e8aa8fc2
@@ -51,4 +51,4 @@ ForgeFlow writes its configuration atomically. Explicit server reconciliation ad
 - Read-only repository-scoped deploy keys for server pull.
 - SSH host-key changes fail closed.
 - Live commit, remote commit and runtime health remain separate evidence.
- Production signing must fail closed when the required external certificate is absent.
+- Packaged updates must fail closed on missing or mismatched release assets and SHA-256 evidence; paid code signing is optional.