[workflow-audit] 3 unexplained change(s) on 2026-09-01

[github-actions]

3 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-08-31T15:02:14Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

2fd605b — feat(deploy): installers mint the one-time enrollment offer

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-31 16:08:08 -0700
• Refs: remotes/origin/enroll-offer
• Files:
  • .github/workflows/ci.yml
• View diff

386f3cc — review(deploy): harden the enrollment-offer install chain

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-31 17:23:34 -0700
• Refs: remotes/origin/enroll-offer
• Files:
  • .github/workflows/ci.yml
• View diff

dd7315a — review(deploy): simplify the enrollment-offer install diff

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-31 16:29:30 -0700
• Refs: remotes/origin/enroll-offer
• Files:
  • .github/workflows/ci.yml
• View diff