feat(saas): enforce signed release evidence and verified deployments

start-frozen.js

@@ -0,0 +1,10 @@
+'use strict';
+
+// Explicit acceptance mode for an already built and signed V2 RC artifact.
+// The same deployment directory is used later by start-stable.js after promotion.
+const { startStable } = require('./start-stable');
+if (require.main === module) startStable({ mode: 'frozen' }).catch(error => {
+  process.stderr.write(`${error?.message || error}\n`);
+  process.exitCode = 1;
+});
+module.exports = { startFrozen: options => startStable({ ...options, mode: 'frozen' }) };