Commits
Click on a commit to change the comparison rangefeat(security): add GPG signing for release artifacts fix(security): address PR review feedback for GPG signing feat(security): add release verification script fix(security): prevent gpg --import grep from aborting verify script docs: document two-phase release workflow in CLAUDE.md fix(security): show GPG signer identity and failure diagnostics fix(security): pin GPG key fingerprint to prevent TOFU attacks