releasecandidate

Overview ¶

Command releasecandidate verifies signed draft release assets and assembles the release-candidate-v1.json evidence index consumed by the release workflow. It is source-bound tooling: the release workflow runs it from the clean tag checkout with `go run ./test/releasecandidate <subcommand>`.