Verify the tool cache against reviewed hashes at link time - #710

Draft

wallrj wants to merge 6 commits into

cert-manager:mainfrom

wallrj:tools-cache-verify-at-use

Commits on Aug 21, 2026

Key go-installed tool binaries on the vendored Go version

wallrj-cyberark
authored and
wallrj
committed
57362d4
Key go-installed tools on the toolchain that builds them

wallrj
and
claude
committed
1ddb0db
Address review: harden the Go toolchain version key and test invalidation

wallrj
and
claude
committed
02b378f
Verify the tool cache against reviewed hashes at link time

wallrj
and
claude
committed
73e9512
Harden the verify-at-link check after review

wallrj
and
claude
committed
7d7d93f
Fix the re-download sub-make and drop the symlink touch

wallrj
and
claude
committed
4c9617b