Myasnikov Daniil a37a3178e5 docs(release): name all four sourcers of the image-ref enumeration ...

The library header still claimed three call sites. There are four:
this PR made hack/verify-promoted-packages.sh source it to compare
the candidate's refs against the rc artifact's. The historical
drift story stays with the original three, since the verifier has
only ever read the shared enumeration.

The consumer table gained hack/promote-packages-artifact.sh under a
bullet requiring every consumer of references to read all three
shapes through the library, while the exception below it still named
only hack/overlay-main-images.sh. The publisher sources nothing and
needs nothing: it hands the whole tree to `flux push artifact` and
touches one reference, the installer's own self-pin, by key with yq.
Say that, rather than implying a gap it does not have -- the real
exception remains overlay-main-images.sh, which does read references
and does walk the tree itself.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>

2026-08-14 18:37:59 +05:00

..

image-refs.sh

docs(release): name all four sourcers of the image-ref enumeration

2026-08-14 18:37:59 +05:00

promoted-packages.sh

fix(release): preflight the rc tree's own pin before publishing

2026-08-14 18:37:58 +05:00