Approved binaries and models for tools across the estate — 3 approved, 0 withdrawn.
index.txt and verify it against
index.txt.sig.
| artefact | version | standing | advisory | licence |
|---|---|---|---|---|
onnxruntime |
1.23.0 |
approved | legacy | MIT |
onnxruntime |
1.28.0 |
approved | supported | MIT |
onnxruntime |
1.29.0 |
approved | untested | MIT |
Standing is whether an artefact may be used at all. approved means yes; withdrawn means stop, and it is final — a correction ships as a new version rather than restoring an old one. Withdrawn artefacts stay published so an incident can be reconstructed, and so a consumer sees a refusal rather than a 404, which would be indistinguishable from an outage.
Advisory — supported, legacy, untested — is a recommendation for a person choosing a version. Nothing resolves against it, because a floating pointer resolves to something correctly signed and the surprise is silent.
index.txt — the signed index. The control.index.txt.sig — its detached OpenPGP signature.index.json — the same thing as JSON, unsigned, for dashboards.