publish_notes
Publish signed envelopes to git notes for CI verification, enabling Scroll Gate to check commit provenance after envelope creation.
Instructions
Publish local signed envelopes to git notes for CI Scroll Gate verification.
Use after ``create_envelope`` when CI reads ``refs/notes/matrixscroll``.
Do not use for offline single-commit checks — call ``verify_envelope``.
Do not use for hosted org audit — call ``audit_export`` with SSX360_API_KEY.
Side effects: updates the local git notes ref only; push
``refs/notes/matrixscroll`` to remote separately. Returns
``{ok, published, notes_ref, error?}``.
Parameters:
workspace: Git repo root (defaults to detected repo).
base: Range start ref (exclusive) for envelopes to publish.
head: Range end ref (inclusive) for envelopes to publish.
notes_ref: Git notes ref to write (default refs/notes/matrixscroll).
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| base | No | Range start ref (exclusive) for envelopes to publish. | origin/main |
| head | No | Range end ref (inclusive) for envelopes to publish. | HEAD |
| notes_ref | No | Git notes ref to write, default refs/notes/matrixscroll. | refs/notes/matrixscroll |
| workspace | No | Git repository root. Empty auto-detects from the working directory. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||