- The copy of a release to git.kof22.com is a numbered step, with the
attestation check before it; the verification step says what is checked
there and from where, and no longer tells to merge a pull request on GitHub.
- winget: the job stays switched off while it would submit the GitHub URL;
the command for an update by hand is given.
- A hand run of Update-PackageManifests.ps1 takes the CLI zip from the GitHub
release: given the file from git.kof22.com it would compare that file with
itself.
- The dev edition's installer is named as the section on the dev edition
names it.
- Threat model: T11 is not 'Mitigated' as a whole while the copy is manual;
T2 says when Chocolatey's hash is computed in CI.
Refs #183
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>
Statements the release reviews of 1.1.1 found untrue at this commit, and two
gaps in the release tooling.
- Threat model: the version reviewed; an installed build contacts
git.kof22.com for updates; the binaries are signed (the accepted risks named
them unsigned) and T1 with the Scoop part of T2 is what is accepted; T2 and
T11 say what ADR 0009 changed.
- SECURITY.md names 1.1.x as the supported line.
- README: the beta is a separate app with its own accounts; parallelism is
under Sync options, after loading; the buttons have the names on screen; the
app is built unpackaged, with no Developer Mode. CONTRIBUTING the same.
docs/CLI.md shows a current version.
- RELEASING.md: on which forge the packaging commit lands; the check that the
server answers from outside comes before anything is tagged; a version that
moves the updater is rehearsed with two prereleases read from that server;
the engine package is numbered by its own public surface.
- Update-PackageManifests.ps1 downloads the file the manifests will name and
compares its SHA-256 with the built one's, instead of asking only whether
the URL answers; and writes the Scoop manifest with the repository's line
endings.
- One vault test stored an entry in the credential namespace the installed
app uses. It uses two test scopes now (#161).
Closes#183
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>
james.maesandClaude Fable 5.2