Skip to content

DL-583

A fork stages its release closure through the cache signer’s OIDC-authenticated upload endpoint and holds no signing key, no bucket credential and no other long-lived cache secret.

Status: Active (Matt, 2026-10-18)

Record: ../../fork-cache-producer.md#decisions