Development record

2026-10-17 — The reservation sweep's workflow runs the latest published release of abcd, verified by checksum and build-provenance attestation, never the default branch's code, so only released code ever holds the App's one-hour bypass token. Chosen by the technical facilitator on 2026-10-17 over leaving the residual or requiring code-owner review of all code; the cost is that a sweep fix reaches the job only with the next release.