From e38b148d8e0d15f8453dd40b8abd676f29901524 Mon Sep 17 00:00:00 2001 From: archipelago Date: Thu, 20 Aug 2026 06:27:42 -0400 Subject: [PATCH] fix(release): spell out how the mnemonic prompt actually submits MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The signer reads stdin to EOF, so pressing Enter submits nothing and a second paste simply appends to the first. Step [6b/8] said only "paste the release master mnemonic when prompted", which gives no hint that Ctrl-D is what ends the input — a 24-word phrase arrived today as "invalid word count: 89", about four pastes concatenated by someone reasonably assuming Enter had not worked. sign-manifest.sh already explains this properly; create-release.sh now says the same thing, including that pasting twice is itself a failure mode. Co-Authored-By: Claude Opus 5 (1M context) --- scripts/create-release.sh | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/scripts/create-release.sh b/scripts/create-release.sh index 8ea85e45..fede3cc2 100755 --- a/scripts/create-release.sh +++ b/scripts/create-release.sh @@ -228,7 +228,17 @@ if [ ! -x "$SIGNER" ]; then exit 1 fi if [ -n "${RELEASE_MASTER_MNEMONIC:-}" ] || [ -t 0 ]; then - echo "[6b/8] Signing release manifest (paste the release master mnemonic when prompted)..." + echo "[6b/8] Signing release manifest..." + # The signer reads stdin to EOF, so Enter alone submits NOTHING and a + # second paste just appends to the first. That is how a 24-word phrase + # arrived as "invalid word count: 89" on 2026-08-20 — roughly four + # pastes concatenated, because nothing appeared to happen after Enter. + echo "════════════════════════════════════════════════════════════════" + echo " Paste the release master mnemonic ONCE, press Enter, then" + echo " press Ctrl-D on the new line to submit." + echo " Enter by itself will NOT submit; pasting twice concatenates" + echo " the phrases and fails on word count." + echo "════════════════════════════════════════════════════════════════" "$SIGNER" ceremony sign "$PROJECT_ROOT/releases/manifest.json" "$SIGNER" ceremony verify "$PROJECT_ROOT/releases/manifest.json" else