horizon-airdef

Files

T

Ludovic Marie 846f681b9a Signed updates: releases from before signing stay installable with pinned files; tests need a release key

- crates/horizon-release-sign/legacy-releases.txt pins the SHA-256 of every archive of the 131 releases published
  before signing (GitHub's upload digests, written by tools/ci/legacy_releases.py). The launcher and
  horizon-server update install those releases only with exactly those files, so rolling back to one works and
  nobody can swap its files later; every other release needs its signed SHA256SUMS.
- the_launcher_ships_with_a_release_key and horizon_server_ships_with_a_release_key fail while
  release-keys.txt lists no key, so this can't ship refusing everything.
- Test tags moved to v2099.* so they never collide with a pinned release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-21 12:20:36 +02:00

legacy_releases.py

Signed updates: releases from before signing stay installable with pinned files; tests need a release key

2026-10-21 12:20:36 +02:00

new_release_key.sh

Releases: signed checksums (SHA256SUMS, SHA256SUMS.sig) for game and launcher releases

2026-10-19 14:03:03 +02:00

parity_issues.py

Nightly parity audit on the Mac mini, with an issue per regressed harness

2026-10-14 22:18:31 +02:00

protect_pipeline.sh

CODEOWNERS: the launcher's downloader, links.json and the Cargo.toml files; Ludovic alone may bypass the review