nestwyn/nestwyn-releases
1
0
Fork 0
Code Issues Pull requests 1 Releases Packages Activity Actions

Channel alpha, manifest schema and release checks #1

Merged
Sascha Prütz merged 1 commit from feature/channel-alpha into main 2026-10-26 15:24:04 +00:00
Conversation 0 Commits 1 Files changed 8 +556
Sascha Prütz commented 2026-10-26 14:52:29 +00:00
Owner
Copy link

Channel alpha, manifest schema and release checks for the public release repository.

  • channels/alpha.json: channel alpha (0.x, "Calyx"), current: null until the first release
  • schema/channel.schema.json
  • tools/check.py: allowed paths only, no internal host names, addresses or environment names, schema, Ed25519 signatures of the manifest and of SHA256SUMS (OpenSSL), release assets and sizes, version only forward unless rollback
  • README pair with the verification guide

Verified locally: check passes; negative tests (tampered manifest, private address and node name in a file, broken JSON) fail as intended. The public key keys/nestwyn-release.pem follows once the signing key exists in OpenBao Transit.

🤖 Generated with Claude Code

Channel `alpha`, manifest schema and release checks for the public release repository. - `channels/alpha.json`: channel `alpha` (0.x, "Calyx"), `current: null` until the first release - `schema/channel.schema.json` - `tools/check.py`: allowed paths only, no internal host names, addresses or environment names, schema, Ed25519 signatures of the manifest and of `SHA256SUMS` (OpenSSL), release assets and sizes, version only forward unless `rollback` - README pair with the verification guide Verified locally: check passes; negative tests (tampered manifest, private address and node name in a file, broken JSON) fail as intended. The public key `keys/nestwyn-release.pem` follows once the signing key exists in OpenBao Transit. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Channel alpha, manifest schema and release checks
All checks were successful
CI / Release manifests (pull_request) Successful in 4s
Details
CI / Secret scan (pull_request) Successful in 5s
Details
c2a343d93b 
- channels/alpha.json (0.x "Calyx"), no release yet
- schema/channel.schema.json: version, build, release name, assets with checksums, SHA256SUMS, Ed25519 signature,
  oldest client, data format versions, rollback mark
- tools/check.py: only allowed paths, no internal names or addresses, schema, manifest and SHA256SUMS signatures,
  release assets, version only forward
- README pair with the verification guide, CODEOWNERS (team maintainers), Forgejo CI with Gitleaks

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sascha Prütz deleted branch feature/channel-alpha 2026-10-26 15:24:04 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nestwyn/nestwyn-releases!1
No description provided.