Block a user
feat: MCP server catalog core -- signed, validated, resolvable (#10, #61)
the_og
deleted branch feat/63-signed-checksums from the_og/better-claude-config
2026-07-12 17:42:11 -04:00
Binary distribution is the root of trust — code signing / notarization story
Sign release checksums with Ed25519 (#63)
[#10] Server catalog / one-click add — design pass first
Phase 1 landed as PRs — and the supply-chain audit immediately paid for itself
PR #65 (catalog core + signed verification) · PR #64 (signed release checksums, #63). 239 tests green,…
feat: MCP server catalog core -- signed, validated, resolvable (#10, #61)
the_og
created branch feat/10-catalog-core in the_og/better-claude-config
2026-07-12 17:32:54 -04:00
Sign release checksums with Ed25519 (#63)
the_og
created branch feat/63-signed-checksums in the_og/better-claude-config
2026-07-12 17:30:13 -04:00
Binary distribution is the root of trust — code signing / notarization story
Decision (AJ, 2026-07-12): no paid certificates. Do the free half, document the limit honestly.
Investigated, all dead ends for a zero-budget project:
- macOS — Gatekeeper trusts…
Binary distribution is the root of trust — code signing / notarization story
Catalog Console: maintainer-only review + signing tool (no manual scripts)
Adversarial review (Fable) — amendments to the Console
🔴 Review/sign TOCTOU
The Console reviews PR diffs but signs a file. Between "maintainer acknowledged every entry in PR…
Signed catalog: Ed25519 verification, remote refresh, anti-rollback
Adversarial review (Fable) — design amended, one real hole found
🔴 BLOCKER: the headline property was only half-true
**"A blindly-merged malicious PR reaches no users" holds for the…
Catalog Console: maintainer-only review + signing tool (no manual scripts)
Signed catalog: Ed25519 verification, remote refresh, anti-rollback