igneum-labs 1b2d01beff jobs: one signed object (igneum-jobs.signed.json) so a file and a signature from two deployments can never pair ... The 13:19:41Z refusal on PC 2: fetch_jobs took igneum-jobs.json and .sig in two requests while the edge was still serving the previous deployment for one of them. The signer wraps the verified pair into one object and reads it back; the app fetches that object (the pair only when none is published); publish-jobs.sh writes and mirrors all three files and verifies every folder after the deploy; tools/jobs.mjs reads the envelope. Tests: jobs.rs signed_envelope_binds_file_and_signature, packaging/ota/test-publish-jobs.sh (24 checks). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>		2026-10-05 15:52:34 +00:00
..
ota-sign.rs	jobs: one signed object (igneum-jobs.signed.json) so a file and a signature from two deployments can never pair	2026-10-05 15:52:34 +00:00
prove-verify.rs	app: every WSL script runs from a file, never inline on the command line (src/wslhost.rs: write_script, bash_line, command)	2026-10-05 08:47:40 +00:00