3 commits

Author	SHA1	Message	Date
Miguel Jacq	ddb18403c8	fail loudly on an empty/truncated frozen harvest bundle. Tighten as much as we can the remote harvesting	2026-06-29 08:56:06 +10:00
Miguel Jacq	a2dc054882	Close TOCTOU gap by freezing directory harvest bundles into a private 0700 copy before the two consumers that actually read artifacts (manifest and diff) touch them.	2026-06-28 21:07:49 +10:00
Miguel Jacq	d93de8a8a2	Fix for remote harvest tmp dir	2026-06-22 12:46:45 +10:00