Skip to content

distribution: reject contradictory signed manifests - #226

Merged
turinglambdaai merged 1 commit into
mainfrom
hardening/manifest-invariants
Oct 13, 2026
Merged

turinglambdaai merged 1 commit into
mainfrom
hardening/manifest-invariants

Conversation

@turinglambdaai

@turinglambdaai turinglambdaai commented Oct 13, 2026 •

Copy link
Copy Markdown
Owner

Closes #225.

Hardens the versioned update-manifest boundary before 1.0:

  • Requires a non-empty set of positive-size artifacts.
  • Requires minimum and previous versions to precede the release.
  • Rejects duplicate platform/architecture/installer identities.
  • Rejects unknown fields or trailing JSON values in signed wrappers and payloads.

ZIP and AppImage remain valid distinct installer identities for the same Linux target.

Local evidence: 239 distribution and documentation tests pass after rebasing onto current main.

@turinglambdaai
turinglambdaai merged commit 4e89389 into main Oct 13, 2026
23 checks passed
@turinglambdaai
turinglambdaai deleted the hardening/manifest-invariants branch October 13, 2026 00:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

distribution: reject self-contradictory signed manifest policy

1 participant