Independent build identities, signed releases and corresponding source exports #71

New issue

Open

opened 2026-11-06 14:41:02 +01:00 by Alex · 0 comments

Alex commented 2026-11-06 14:41:02 +01:00

Owner

• Copy link
• Copy Markdown

Problem

• Official-only signing anchors and publication settings prevent independent builds and verifiable fork releases. Public exports lack signed checksums, verification material and corresponding source assets.

Approved scope

• Implement artifacts/tasks/independent-build-signing-20261106/PLAN.md, preserving existing secrets and unrelated changes. No publication, deployment or merge authorization.

Validation

• Identity safety and concurrency; cryptographic rejection and cache separation; mocked release publication and source gates; full make check and make check-build; available QEMU acceptance; independent static review.

## Problem - Official-only signing anchors and publication settings prevent independent builds and verifiable fork releases. Public exports lack signed checksums, verification material and corresponding source assets. ## Approved scope - Implement artifacts/tasks/independent-build-signing-20261106/PLAN.md, preserving existing secrets and unrelated changes. No publication, deployment or merge authorization. ## Validation - Identity safety and concurrency; cryptographic rejection and cache separation; mocked release publication and source gates; full make check and make check-build; available QEMU acceptance; independent static review.

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

134-reply-to-before-routing

119-example-firstboot

No results found.

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Alex/kaido-core#71

No description provided.