feat(signing): drain three foundation-audit deferreds (#298, #299, #300)#303

Merged

bokelley merged 3 commits intomainfrom

bokelley/signing-prep-followups

Apr 29, 2026

Commits on Apr 29, 2026

fix(signing): default covers_content_digest to spec-mandated 'either'

bokelley
and
claude
committed
feat(signing): wire SSRF guard into legacy webhooks.deliver()

bokelley
and
claude
committed
test(signing): apply review nits — module-top imports, drop test prefix, docstring

bokelley
and
claude
committed