Ilker ManapandClaude Opus 5.5 623cdb5ba3 Sign releases, and install only signed ones once a key is trusted ...

ed25519 over checksums.txt: llmgw release keygen makes the pair, CI signs
with the RELEASE_SIGNING_KEY secret when it is set, and release.Install
refuses an unsigned or wrongly signed release when the build embeds a
trusted key (internal/release/trusted.pub, empty for now) or
LLMGW_RELEASE_KEY names one.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-30 23:03:48 +02:00

..

release_test.go

Upgrade the cluster with one command, over the agents' own streams

2026-09-30 02:54:36 +02:00

release.go

Sign releases, and install only signed ones once a key is trusted

2026-09-30 23:03:48 +02:00

sign_test.go

Sign releases, and install only signed ones once a key is trusted

2026-09-30 23:03:48 +02:00

sign.go

Sign releases, and install only signed ones once a key is trusted

2026-09-30 23:03:48 +02:00

trusted.pub

Sign releases, and install only signed ones once a key is trusted

2026-09-30 23:03:48 +02:00