lukaszraczylo 11ee9a4f1f fix(update): fail-closed release signature verification ...

When a signature bundle is present, abort the self-update before replacing binaries if cosign verification fails or is unavailable, instead of logging a warning and proceeding. Prevents a malicious/MITM'd release from achieving binary replacement.

2026-06-19 14:26:34 +01:00

..

chunking

mnemonic ralphised (#24)

2026-01-11 12:41:28 +00:00

config

fix: bound SQLite WAL growth and prevent worker hangs (#49)

2026-06-01 16:40:27 +01:00

db

fix: bound SQLite WAL growth and prevent worker hangs (#49)

2026-06-01 16:40:27 +01:00

embedding

refactor: replace Git LFS with runtime model download from Hugging Face

2026-05-26 17:53:30 +01:00

graph

fix: plugin no longer vanishes after Claude Code updates

2026-05-24 01:56:54 +01:00

maintenance

fix: bound SQLite WAL growth and prevent worker hangs (#49)

2026-06-01 16:40:27 +01:00

mcp

refactor(mcp): reduce exposed tools 42->4 via action dispatch

2026-06-19 14:26:33 +01:00

models

refactor: replace Git LFS with runtime model download from Hugging Face

2026-05-26 17:53:30 +01:00

pattern

mnemonic ralphised (#24)

2026-01-11 12:41:28 +00:00

privacy

Make things 'betterer' across the board (#23)

2026-01-11 01:51:20 +00:00

reranking

refactor: replace Git LFS with runtime model download from Hugging Face

2026-05-26 17:53:30 +01:00

scoring

Make things 'betterer' across the board (#23)

2026-01-11 01:51:20 +00:00

search

fix: address 15 additional hang vectors found during deep audit (#45)

2026-05-26 14:29:34 +01:00

update

fix(update): fail-closed release signature verification

2026-06-19 14:26:34 +01:00

vector

fix: address 15 additional hang vectors found during deep audit (#45)

2026-05-26 14:29:34 +01:00

watcher

fix: plugin no longer vanishes after Claude Code updates

2026-05-24 01:56:54 +01:00

worker

refactor(worker): lazy-init embedded static assets via sync.OnceValues

2026-06-19 14:26:34 +01:00