feat: close the audit backlog - honest update checks, resumable installs, and a trust chain that reaches the apps - #68

Merged

MotherSphere merged 18 commits into

mainfrom

claude/colony-improvements-598c1e

Aug 27, 2026

Commits on Aug 27, 2026

fix(download): use a read timeout instead of a 300 s total deadline
MotherSphere
committed
0ccdb11
fix(update): never report apps as up to date when the check did not run
MotherSphere
committed
318f8b7
fix(ui): make failures visible - status line everywhere, logs, and retry
MotherSphere
committed
b1d57a4
fix(security): validate remote strings before they reach URLs and paths
MotherSphere
committed
62102a0
feat(github): persist the conditional-request cache across launches
MotherSphere
committed
5cabb5c
feat(download): resume interrupted transfers
MotherSphere
committed
ecef473
fix(platform): replace running binaries safely, and stop overpromising Windows/macOS
MotherSphere
committed
9c4ffca
fix(update): report every failure the user triggered
MotherSphere
committed
e05c224
fix(github): distinguish a broken manifest from a transient failure
MotherSphere
committed
10726a5
docs: correct every path, count and claim the code had outgrown
MotherSphere
committed
cc91fd6
feat(signing): make the key rotatable and bind app assets to their release
MotherSphere
committed
2a1ec0d
feat(store): say what is on offer before the user commits to it
MotherSphere
committed
5ca1def
feat(manifest): validate colony.json, and make browsing tell the truth
MotherSphere
committed
f62fa1a
chore: pay down the debt the audit found, and guard it with tests
MotherSphere
committed
0ee44b2
ci(release): close the unsigned window, smoke-test artefacts, scope secrets
MotherSphere
committed
12ca4d4
docs: point at the one canonical release template instead of a second copy
MotherSphere
committed
c371ffd
fix(ci): repair the three checks the new jobs broke, and patch h2
MotherSphere
committed
a047acd
ci: make the advisory check gate on what is actionable, not report forever
MotherSphere
committed
a99eea0

Navigation Menu

Uh oh!

feat: close the audit backlog - honest update checks, resumable installs, and a trust chain that reaches the apps - #68

feat: close the audit backlog - honest update checks, resumable installs, and a trust chain that reaches the apps#68
MotherSphere merged 18 commits into
mainfrom
claude/colony-improvements-598c1e

Commits on Aug 27, 2026

fix(download): use a read timeout instead of a 300 s total deadline

fix(update): never report apps as up to date when the check did not run

fix(ui): make failures visible - status line everywhere, logs, and retry

fix(security): validate remote strings before they reach URLs and paths

feat(github): persist the conditional-request cache across launches

feat(download): resume interrupted transfers

fix(platform): replace running binaries safely, and stop overpromising Windows/macOS

fix(update): report every failure the user triggered

fix(github): distinguish a broken manifest from a transient failure

docs: correct every path, count and claim the code had outgrown

feat(signing): make the key rotatable and bind app assets to their release

feat(store): say what is on offer before the user commits to it

feat(manifest): validate colony.json, and make browsing tell the truth

chore: pay down the debt the audit found, and guard it with tests

ci(release): close the unsigned window, smoke-test artefacts, scope secrets

docs: point at the one canonical release template instead of a second copy

fix(ci): repair the three checks the new jobs broke, and patch h2

ci: make the advisory check gate on what is actionable, not report forever