Zwall
Talk to an Engineer
Talk to an Engineer
Documentation
Docs Home › Security › Release Trust

Release Trust

EnterpriseStatus: SUPPORTED as signed-release admission. Not a public key-distribution URL.Audience: Enterprise deployment engineer

Purpose

Enterprise Manager database admission verifies a signed release before migrate. Community source builds do not use this path.

Procedure

Independently stage the bundle, independently install zwall-release and a pinned trust root, then run --manager-database-only. Detailed admission steps are provided separately to Enterprise customers.

--allow-test-release is disposable non-production only. licensing.enable_test_trust is the same class of foot-gun.

In-product updater signing keys (zwallctl signing-key) exist; updater campaigns are not the production upgrade path.

Customer verifier

Customer verifier commands: verify-directory, verify-pax, release-id, compare, capabilities-json. stage-manager-custody / close-manager-custody are privileged install steps, not daily ops. Full verifier usage is provided separately to Enterprise customers.

What this does not certify

Whole-product production readiness, updater campaigns, or secret-custody final acceptance. No compliance marks.

  • Verified-release admission details are provided separately to Enterprise customers.