I used some of my Claude Cloud credits to put in place a truly secure pipeline for Elixir Collector. Starting at v3.0.0 all releases are signed using a private key that I manage and the entire pipeline is signed all the way to ingestion. It also got safety improvements in the auto-update process.
