Why managed CI is not first
A hosted runner that sees plaintext code becomes part of your source-code trust boundary. HushGit avoids pretending otherwise: the first integration path is bring-your-own runner, explicit runner authorization, and auditable decrypt permissions.
Runner flow
- Register a runner device key.
- Approve access for specific repos or workflows.
- Decrypt only inside your runner environment.
- Emit signed build events back to the repository timeline.