Trust
Deployments rail (preview)
This surface is reserved for signed deployment events (promotion / rollback / emergency hold) and replayable audit receipts. Until production signatures are published, treat this rail as HOLD (fail‑closed).
Signed deploy events
- Promotion record: what was deployed, when, and which receipts were verified.
- Rollback record: the exact revert target and verification outcome.
- Emergency hold: explicit reason codes and escalation path.
Current posture
Deployment events are not yet published as signed receipts on the public rail. The authoritative audit surface today is:
- Website release integrity (pinned manifests + verifier UI integrity)
- Transparency log (append‑only posture + inclusion proofs)
Signed artifacts are authoritative; web pages are display-only.