the_og

the_og pushed to feat/10-catalog-core at the_og/better-claude-config

2026-07-12 17:35:52 -04:00

88e93edc6c catalog: pin exact package versions, drop firecrawl, add last_release

the_og created pull request the_og/better-claude-config#65

2026-07-12 17:33:26 -04:00

feat: MCP server catalog core -- signed, validated, resolvable (#10, #61)

the_og created branch feat/10-catalog-core in the_og/better-claude-config

2026-07-12 17:32:54 -04:00

the_og pushed to feat/10-catalog-core at the_og/better-claude-config

2026-07-12 17:32:54 -04:00

48904c7787 feat: MCP server catalog core -- signed, validated, resolvable (#10, #61)

the_og created pull request the_og/better-claude-config#64

2026-07-12 17:30:34 -04:00

Sign release checksums with Ed25519 (#63)

the_og pushed to feat/63-signed-checksums at the_og/better-claude-config

2026-07-12 17:30:13 -04:00

cd38fd0c78 Sign release checksums with Ed25519 (#63)

the_og created branch feat/63-signed-checksums in the_og/better-claude-config

2026-07-12 17:30:13 -04:00

the_og commented on issue the_og/better-claude-config#63

2026-07-12 17:21:54 -04:00

Binary distribution is the root of trust — code signing / notarization story

Decision (AJ, 2026-07-12): no paid certificates. Do the free half, document the limit honestly.

Investigated, all dead ends for a zero-budget project:

macOS — Gatekeeper trusts…

the_og opened issue the_og/better-claude-config#63

2026-07-12 17:16:16 -04:00

Binary distribution is the root of trust — code signing / notarization story

the_og commented on issue the_og/better-claude-config#62

2026-07-12 17:16:01 -04:00

Catalog Console: maintainer-only review + signing tool (no manual scripts)

Adversarial review (Fable) — amendments to the Console

🔴 Review/sign TOCTOU

The Console reviews PR diffs but signs a file. Between "maintainer acknowledged every entry in PR…

the_og commented on issue the_og/better-claude-config#61

2026-07-12 17:15:44 -04:00

Signed catalog: Ed25519 verification, remote refresh, anti-rollback

Adversarial review (Fable) — design amended, one real hole found

🔴 BLOCKER: the headline property was only half-true

**"A blindly-merged malicious PR reaches no users" holds for the…

the_og opened issue the_og/better-claude-config#62

2026-07-12 17:11:49 -04:00

Catalog Console: maintainer-only review + signing tool (no manual scripts)

the_og opened issue the_og/better-claude-config#61

2026-07-12 17:11:25 -04:00

Signed catalog: Ed25519 verification, remote refresh, anti-rollback

the_og commented on issue the_og/better-claude-config#10

2026-07-12 17:11:01 -04:00

[#10] Server catalog / one-click add — design pass first

Decision + final design (2026-07-12) — signed remote catalog

Decisions taken with AJ after the research pass above.

1. Distribution: bundle and refresh (not either/or)

Pure-bundled…

the_og commented on issue the_og/better-claude-config#10

2026-07-12 16:04:11 -04:00

[#10] Server catalog / one-click add — design pass first

Catalog research pass (2026-07-12) — 112 servers surveyed

Ran a 4-way parallel research fan-out (official/dev tooling · business SaaS · cloud/infra/data · personal/homelab/search), verifying…

the_og pushed tag v1.3.0 to the_og/better-claude-config

2026-07-12 14:04:34 -04:00

the_og pushed to main at the_og/better-claude-config

2026-07-12 14:03:51 -04:00

e6b60e94e7 Merge pull request 'release: v1.3.0 — named server sets, project config discovery, schema lint, UX polish' (#60) from release/v1.3.0 into main

4afe21666d release: bump version to 1.3.0

Compare 2 commits »

the_og deleted branch release/v1.3.0 from the_og/better-claude-config

2026-07-12 14:03:51 -04:00

the_og merged pull request the_og/better-claude-config#60

2026-07-12 14:03:50 -04:00

release: v1.3.0 — named server sets, project config discovery, schema lint, UX polish

the_og created pull request the_og/better-claude-config#60

2026-07-12 14:02:49 -04:00

release: v1.3.0 — named server sets, project config discovery, schema lint, UX polish