experiments/unbundled
Watch
1
0
Fork
You've already forked unbundled
 0
Code Issues 31 Pull requests Projects Releases 1 Packages Wiki Activity Actions

Signed manifests and code provenance #12

New issue
Open
opened 2026-09-25 15:31:14 +02:00 by morten-olsen · 0 comments
morten-olsen commented 2026-09-25 15:31:14 +02:00
Owner
Copy link

Integrity hashes protect chunks, but the manifest itself is unauthenticated beyond TLS.

Done when: manifests are signed, runtimes verify them, and pinning to a known key is possible.

Integrity hashes protect chunks, but the manifest itself is unauthenticated beyond TLS. **Done when:** manifests are signed, runtimes verify them, and pinning to a known key is possible.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
v0.1.0
Labels
Clear labels   
area:apple
iOS and macOS runtimes

  
area:ci
Build and publish pipeline, project tooling

  
area:compatibility
Runtime versions, native module contract, conformance

  
area:delivery
Build output, caching, updates, developer tooling

  
area:distribution
Shipping the runtime itself (stores, notarization)

  
area:engineering
Tests, telemetry, operations

  
area:platform
Links, launcher, notifications, OS integration

  
area:security
Isolation, capabilities, provenance, trust UI

  
type:gap
Known shortcoming of the prototype

  
type:spike
Time-boxed investigation that turns an assumption into a finding

No labels
area:apple
area:ci
area:compatibility
area:delivery
area:distribution
area:engineering
area:platform
area:security
type:gap
type:spike
Milestone
Clear milestone
No items
No milestone
Foundations
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
experiments/unbundled#12
No description provided.