Signet
deployabilityrenmy release validatePresses the seal on a release. renmy release validate runs your local gates plus a real Salesforce check-only validation and writes an immutable receipt; after approval, renmy release deploy ships exactly the payload the receipt names, on any machine. The seal is earned by inspection: the save-time rules Salesforce applies to metadata run locally first, so dangling references, invalid API versions, and compiler rejects surface before anything is pushed.
The receipt is the contract. It records everything the deploy will re-check and expires (ten days by default), and renmy release deploy accepts only a matching, unexpired one. There is no bypass flag. Where the org-side validation ran tests, the deploy is a quick deploy: Salesforce ships the payload it already checked rather than checking it twice. renmy validate runs the save-time rules on their own, before any of this; renmy deploy runs the whole cycle end to end.