Align uniWAHL production inputs and source controls with offline evaluation - #2335

Draft

edulix wants to merge 59 commits into

mainfrom

feat/meta-10548/main

Commits on Jan 22, 2026

📖 [doc] Application for BSI Certification
edulix
committed
78da6a7
cross reference the cybersec page
edulix
committed
a4217f4
more explictly addressing disclosure
edulix
committed
a648d4c
wip
edulix
committed
d71a86c

Commits on Mar 13, 2026

wip
edulix
committed
658089b

Commits on Mar 17, 2026

wip
edulix
committed
6c7c295

Commits on Jul 22, 2026

vulnerabilities
edulix
committed
4371a10
fix broken links
edulix
committed
a2404b1

Commits on Aug 2, 2026

Merge remote-tracking branch 'origin/main' into feat/meta-10548/main
edulix
committed
a99de66

Commits on Aug 3, 2026

wip
edulix
committed
d8c56c4
fix(vdp): align the disclosure policy with ALC-05 for ITSEF delivery

edulix
and
claude
committed
3cbfd56
fix(vdp): drop repository identity from the policy scope

edulix
and
claude
committed
27d94ec
fix(vdp): drop the pointer to the product lifecycle page

edulix
and
claude
committed
fd12dc4
fix(vdp): say where advisories are published and how customers are reached

edulix
and
claude
committed
b4ef9fe
fix(vdp): use "consumer" for the TOE recipient, as CC:2022 does

edulix
and
claude
committed
91ff09f
docs(vdp): state the policy version so a reviewed copy can be identified

edulix
and
claude
committed
e1970c3

Commits on Sep 2, 2026

build: pin every base image by immutable digest in the TOE build definitions

edulix
and
claude
committed
866af8f
docs(security): publish CSAF provider metadata under .well-known/csaf

edulix
and
claude
committed
0847495
Merge remote-tracking branch 'origin/main' into feat/meta-10548/main
edulix
committed
0e495ca
build: gate the Miru/ECIES integration behind a default-off feature and drop it from the TOE images

edulix
and
claude
committed
00588a0
build: prune Cargo.lock after removing the unused ecies crate

edulix
and
claude
committed
0429112
windmill: encrypt exports in-process with PBKDF2-HMAC-SHA-256 and AES-256-CBC

edulix
and
claude
committed
afc67e2

Commits on Sep 3, 2026

style(windmill): cargo fmt the in-process export encryption

edulix
and
claude
committed
80b0bcd
test(velvet): keep the Miru receipts stage out of the default test pipeline

edulix
and
claude
committed
f23594b

Commits on Sep 4, 2026

build: make the production build definitions of the TOE parts buildable

edulix
and
claude
committed
26519eb
build: put the cargo vendoring configuration where cargo reads it

edulix
and
claude
committed
90ea027
build: build the sequent-core WebAssembly module instead of committing it

edulix
and
claude
committed
aead483
build: take the Maven local repository from the accepted inputs, not the network

edulix
and
claude
committed
d5d9ccf
build: make the WebAssembly toolchain the publishers' archives, not binaries

edulix
and
claude
committed
9025263
build: drop the auto_generate_cdp patch that Cargo.lock never used

edulix
and
claude
committed
c83d295
build: take every stage's packages, crates and npm packages from the accepted inputs

edulix
and
claude
committed
9b1a68f
build: declare webpack with the range the lockfile resolves

edulix
and
claude
committed
9b92eda
build: forbid unsafe code in every crate, and report the uses that remain

edulix
and
claude
committed
9c219c8
strand: compare the shuffle sizes for zero the way an unsigned type allows

edulix
and
claude
committed
422592d
docs: point the dependency report at the reference it documents, and name B4

edulix
and
claude
committed
e58b3b2

Commits on Sep 5, 2026

Commits on Sep 6, 2026