| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-08-13 | release: verify bundled Tor signatures | Nsable-sh | |
| 2026-08-13 | release: package Windows builds with managed Tor | Nsable-sh | |
| 2026-08-12 | site: document public deployment contract | Nsable-sh | |
| 2026-08-06 | release: sign SHA256SUMS with a pinned key, verify against it | Bitflash | |
| verify-release.sh embeds the Bitflash release signing key and now requires that the checksum signature validate against that exact key, not merely against some key in the caller's keyring (#138). It also fetches releases from releases.bitflash.network instead of the retired GitHub host, resolving 'latest' from latest.txt. Release signing key fingerprint: 910A 2B4C CA87 9E81 FB4B 2AEA 1D4A 53D3 B78A A4B8 | |||
| 2026-08-04 | Add release verification tooling (#108) | mtg0001 | |
| Co-authored-by: Gilcimar Duarte <ti@gpm.infra> | |||