Edition 2026-06-24

Edition 2026-06-24.

Source commit: 1bcbdcc
Release tag: edition/2026-06-24

The canonical record is the locally built, PGP-signed integrity manifest
on the site and in the repository (public/integrity.json + .sig), verified
against the published PGP key.

trentpower-fr-2026-06-24-site.tar.gz was built in this workflow run from
the tagged source on a clean GitHub-hosted runner, and carries a SLSA
build-track Level 3 provenance attestation (keyless Sigstore + Rekor).
Verify which commit and workflow produced it:

gh attestation verify trentpower-fr-2026-06-24-site.tar.gz \
  --repo trentpower/trentpower.fr

trentpower-fr-2026-06-24-sbom.cdx.json is a CycloneDX SBOM of the build
toolchain (the site itself ships no runtime dependencies).

See https://trentpower.fr/en-au/verify/ and docs/PROVENANCE.md.

Edition 2026-06-21

Edition 2026-06-21.

Source commit: 8537e30
Release tag: edition/2026-06-21

The canonical record is the locally built, PGP-signed integrity manifest
on the site and in the repository (public/integrity.json + .sig), verified
against the published PGP key.

trentpower-fr-2026-06-21-site.tar.gz was built in this workflow run from
the tagged source on a clean GitHub-hosted runner, and carries a SLSA
build-track Level 3 provenance attestation (keyless Sigstore + Rekor).
Verify which commit and workflow produced it:

gh attestation verify trentpower-fr-2026-06-21-site.tar.gz \
  --repo trentpower/trentpower.fr

trentpower-fr-2026-06-21-sbom.cdx.json is a CycloneDX SBOM of the build
toolchain (the site itself ships no runtime dependencies).

See https://trentpower.fr/en-au/verify/ and docs/PROVENANCE.md.

Edition 2026-06-14

Edition 2026-06-14.

Source commit: cfd495a
Release tag: edition/2026-06-14

The canonical record is the locally built, PGP-signed integrity manifest
on the site and in the repository (public/integrity.json + .sig), verified
against the published PGP key.

trentpower-fr-2026-06-14-site.tar.gz was built in this workflow run from
the tagged source on a clean GitHub-hosted runner, and carries a SLSA
build-track Level 3 provenance attestation (keyless Sigstore + Rekor).
Verify which commit and workflow produced it:

gh attestation verify trentpower-fr-2026-06-14-site.tar.gz \
  --repo trentpower/trentpower.fr

trentpower-fr-2026-06-14-sbom.cdx.json is a CycloneDX SBOM of the build
toolchain (the site itself ships no runtime dependencies).

See https://trentpower.fr/en-au/verify/ and docs/PROVENANCE.md.

Edition 2026-06-10

Edition 2026-06-10

First GitHub Release of trentpower.fr — the bilingual, source-verifiable public record.

This Release is a secondary pointer. The canonical record is the signed material on the live site and in the repository: the signed integrity manifest (integrity.json + detached PGP signature), the byte-matching source mirrors under /source/, and the frozen per-edition archives under /integrity/releases/. If this Release and the signed record ever disagree, the signed record wins.

Attached artefacts (copies of the canonical record, never rebuilt)

Asset	Role
trentpower-fr-2026-06-10.tar.gz (+ .sig)	the frozen edition archive and its detached PGP signature
integrity.json (+ .sig)	the signed per-file SHA-256 manifest at this edition
release.json (+ .sig)	the signed release trust anchor
VERIFY.md	verification instructions

Verify

Public key: https://trentpower.fr/.well-known/pgp-key.asc
Fingerprint: A729 591B 450D 3F59 3694 98BD 8299 1F25 04AE 0263

See VERIFY.md for the full procedure, or https://trentpower.fr/en-au/verify/ for the in-browser guide.