Accept a push
One repository and release sequence become the current source identity.
Private release infrastructure
A trusted path from push to production.
This service coordinates GitTrove’s release pipeline: it fences workers, verifies immutable artifacts, records staging evidence, and requires an explicit promotion before production.
Release contract
Four deliberate gates.
The control plane owns coordination, not execution. Isolated workers build and deploy; GitTrove makes every handoff explicit, scoped, and replay-safe.
Verify and build
A leased runner produces a checksum-bound immutable artifact.
Prove staging
A separate deployer records stage and smoke evidence against that artifact.
Approve promotion
An owner authorizes production to use the exact staged candidate.
This is infrastructure, not the customer app.
Accounts, repository browsing, and product pages remain on GitTrove. Pipeline endpoints require scoped service credentials and private objects are never public.