Skip to content

Configuration

Package configlock: draft → staged → validated → approved → active.

Production + require-signatures rejects unsigned activation. Content hash detects substitution.