release: publish verified signed 1.8.22 OTA and app catalog

This commit is contained in:
archipelago
2026-10-01 06:15:32 -04:00
parent 0be7aee49d
commit 2e72b38778
5 changed files with 523 additions and 52 deletions
+10 -4
View File
@@ -76,8 +76,14 @@ cold boot above is the successful acceptance run.
The dev native Bitcoin/LND identity/start-time baseline also remained unchanged
after the ISO build and VM acceptance.
## Publication pending
## Publication verification
Artifacts are staged in a draft release. Upload/readback verification and the
operator's offline signatures must complete before promoting the fleet manifest
and signed app catalog or publishing the Git/ngit releases.
All three operator signatures verify against the pinned release root. The five
Gitea assets match independent server-side SHA-256 checks. Both OTA components
also passed complete public HTTPS downloads with exact hashes and sizes; the
raw ISO passed public size/range checks and both checksum sidecars read back
exactly. Only after these checks were the signed OTA manifest and compatible
app catalog promoted. The release tag identifies the tested source above.
Git/ngit publication and final update-discovery readback are recorded in the
release tracker after their completion.