[verified] feat: harden llama.cpp provenance workspace

2026-07-17 16:24:46 +03:00
parent ae51526e85
commit f83cf331c3
6 changed files with 405 additions and 38 deletions
--- a/packages/node/native/llama/UPSTREAM_LOCK.json
+++ b/packages/node/native/llama/UPSTREAM_LOCK.json
@@ -3,6 +3,13 @@
  "upstream": "https://github.com/ggml-org/llama.cpp.git",
  "commit": "e920c523e3b8a0163fe498af5bf90df35ff51d25",
  "commit_tree": "6c91a11407a3a3fb160f5dac705f9c59718f54f1",
+  "expected_source": {
+    "git_tree": "6c91a11407a3a3fb160f5dac705f9c59718f54f1"
+  },
+  "retrieval": {
+    "method": "git-clone-detached-commit",
+    "workspace": "build/llama.cpp"
+  },
  "patched_tree": "322d8b463df74a2226f0b513176643d815f54452",
  "upstream_license": "MIT",
  "patch_series": [