archipelagoandClaude Fable 5 cfd1b4c731 chore(trust): flip the signing checks to the new release root ...

v1.7.122-alpha was the last release signed with the old root — it is the
release that installed the new pin on every node. From v1.7.123 the new
root signs, and a node running .122+ rejects an old-key signature. The
ARCHY_RELEASE_ROOT_PUBKEY override is no longer needed either: the signer
built from this tree pins the same key we now sign with.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-05 09:31:28 -04:00

..

archy-dev

feat: add archy-dev CLI scaffold for app developers

2026-03-14 05:47:29 +00:00

lib

app-platform: remove revoked onlyoffice app

2026-06-11 01:03:45 -04:00

resilience

test(resilience): gate host-reboot batch on os-audit (L3 per-boot health)

2026-06-14 08:01:30 -04:00

security

feat(security): add LND macaroon rotation for the /lnd-connect-info leak

2026-08-02 16:28:09 -04:00

tor

chore(release): stage v1.7.54-alpha

2026-05-06 09:23:57 -04:00

app-catalog-image-smoke-test.py

chore: baseline codex hardening before lifecycle refactor

2026-05-01 08:52:29 -04:00

app-surface-smoke-test.sh

chore: release v1.7.49-alpha

2026-04-30 16:37:54 -04:00

archipelago-tailscale.service

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

archipelago-wg

feat: ISO networking stack — relay + nvpn v0.3.7 + WireGuard

2026-04-08 15:06:27 +02:00

audit-secrets.sh

chore: prepare repository for public launch

2026-07-27 17:51:43 +01:00

bitcoin-stack-lifecycle-test.sh

chore: release v1.7.49-alpha

2026-04-30 16:37:54 -04:00

bootstrap-switchover.sh

chore: purge retired git.tx1138.com registry host from the codebase

2026-07-10 18:55:32 +01:00

build-bitcoin-image.sh

fix(bitcoin): bulletproof multi-version switching (Knots & Core)

2026-06-29 05:46:04 -04:00

build-iso-release.sh

feat(release): gated ISO build pipeline

2026-07-25 16:34:54 -04:00

check-app-catalog-drift.py

feat(pine): 1.3.0 manifests — openwakeword member + live node status on the launcher page

2026-07-22 02:59:34 -04:00

check-release-manifest.sh

chore(release): require curated release notes

2026-05-17 18:59:12 -04:00

configure-tailscale-nginx.sh

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

container-doctor.sh

fix(01-20): stop doctor from fighting Tor over the setgid bit

2026-07-31 09:45:55 -04:00

container-specs.sh

fix(lnd-ui,bitcoin-ui): OTA-breaking lnd-ui spec, 404 channels link, iframe copy, node URI

2026-08-02 19:33:21 -04:00

create-release-manifest.sh

fix(10-04): ship the host-secrets audit unit in the OTA runtime payload

2026-08-02 15:04:14 -04:00

create-release.sh

chore(trust): flip the signing checks to the new release root

2026-08-05 09:31:28 -04:00

debug-frontend.sh

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

deploy-bitcoin-knots.sh

chore: purge retired git.tx1138.com registry host from the codebase

2026-07-10 18:55:32 +01:00

deploy-config-defaults.sh

fix: deploy error visibility, trap cleanup, variable quoting, frontend resilience

2026-03-21 02:06:08 +00:00

deploy-config.example

backend: harden rootless app lifecycle orchestration

2026-06-11 00:24:32 -04:00

deploy-tailscale.sh

fix(01-11): remove every shipped Fedimint gateway credential (FED-07)

2026-08-01 05:46:02 -04:00

deploy-to-target.sh

fix(01-11): remove every shipped Fedimint gateway credential (FED-07)

2026-08-01 05:46:02 -04:00

dev-container-test.sh

chore: purge retired git.tx1138.com registry host from the codebase

2026-07-10 18:55:32 +01:00

dev-start.sh

fix: ISO boot, container installs, VPN, nginx, companion input

2026-04-10 03:10:49 -04:00

first-boot-containers.sh

fix(lnd-ui): pin the image and host-network it so OTA actually updates it

2026-08-03 10:31:39 -04:00

fix-indeedhub-containers.sh

backend: harden rootless app lifecycle orchestration

2026-06-11 00:24:32 -04:00

fleet-fips-pair.sh

ops(fips): fleet LAN fast-path pairing script (dev nodes only)

2026-04-19 01:50:20 -04:00

fleet-fips-unpair.sh

fix(ui,ops): TransportPrefsCard import path + fleet unpair script

2026-04-19 02:08:32 -04:00

generate-app-catalog.py

fix(fips): app launch ports allowed through the mesh firewall

2026-07-26 22:23:46 +01:00

generate-app-catalog.sh

docs+catalog: bitcoin multi-version rollout handoff + reproducible generator

2026-06-29 06:02:24 -04:00

image-versions.sh

fix(security): publish the loopback-pinned UI images and pin the new tags

2026-08-05 09:07:05 -04:00

install-tui-demo.sh

chore: Debian 12 → 13 (Trixie) migration, service hardening

2026-04-09 21:32:08 +02:00

iso-smoke-test.sh

feat(release): gated ISO build pipeline

2026-07-25 16:34:54 -04:00

nginx-app-iframe-patch.conf

Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support

2026-02-25 18:04:41 +00:00

nginx-archipelago-patch.conf

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

nginx-https-app-proxies.conf

app-platform: remove revoked onlyoffice app

2026-06-11 01:03:45 -04:00

nginx-penpot-iframe-patch.conf

Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support

2026-02-25 18:04:41 +00:00

nginx-pwa-snippet.conf

Enhance PWA support with new install prompt and configuration updates

2026-02-18 13:48:45 +00:00

node-profile.sh

fix: companion indicator shows relay state, add node-profile script

2026-04-02 11:14:34 +01:00

optimize-debian.sh

feat: rootless podman, session hardening, boot stability, sidebar fix

2026-03-18 13:53:27 +00:00

ota-crash-guard.sh

feat(update): auto-rollback OTA binaries that crash-loop before they can self-verify

2026-07-18 19:42:54 -04:00

publish-companion-apk.sh

fix(android): force v1+v2+v3 signing & clean-build guards in companion publish

2026-06-26 11:53:25 +01:00

publish-release-assets.sh

chore(trust): flip the signing checks to the new release root

2026-08-05 09:31:28 -04:00

reconcile-containers.sh

fix(security): publish the loopback-pinned UI images and pin the new tags

2026-08-05 09:07:05 -04:00

run-e2e-tests.sh

fix: zero-amount invoices, identity.verify DID extraction, tor service permissions

2026-03-09 09:53:36 +00:00

run-post-install-tests.sh

fix(iso): fail builds on missing VPN binaries, skip units cleanly, invalidate stale rootfs cache

2026-07-20 06:08:04 +01:00

run-tests.sh

chore: prepare repository for public launch

2026-07-27 17:51:43 +01:00

self-update.sh

fix(security): close the five host-networked app UIs the audit could not see

2026-08-05 08:46:09 -04:00

setup-aiui-server.sh

chore: prepare repository for public launch

2026-07-27 17:51:43 +01:00

setup-https-dev.sh

chore(release): stage v1.7.52-alpha

2026-05-05 11:29:18 -04:00

setup-target-dev.sh

Refactor configuration and scripts for Archipelago backend and ISO build

2026-02-01 05:42:05 +00:00

sign-catalog.sh

chore(trust): rotate the release root to z6Mkfu5LT…DLWT

2026-08-04 15:10:32 -04:00

sign-iso-checksums.sh

feat(iso): per-device secrets on first boot + checksum emission and signing

2026-07-13 13:41:16 +01:00

sign-manifest.sh

chore(trust): flip the signing checks to the new release root

2026-08-05 09:31:28 -04:00

smoke-test.sh

feat: add E2E smoke test script and CI/CD pipeline plan

2026-03-21 03:08:00 +00:00

sync-npm-public-hosts.sh

app-platform: remove unsupported saleor release surface

2026-06-11 01:16:21 -04:00

sync-whats-new.py

feat(release): gate that Settings 'What's New' modal stays in sync with CHANGELOG

2026-06-14 08:31:43 -04:00

tor-helper.sh

fix: systemd resource limits, Tor rotation transition, unwrap elimination, RPC timeouts

2026-03-21 01:46:40 +00:00

trust-archipelago-cert.sh

fix: deploy locking, safe eval replacement, first-boot error handling, script hardening

2026-03-21 01:39:22 +00:00

uptime-monitor.sh

fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks

2026-03-21 01:11:05 +00:00

validate-app-manifest.sh

chore: prepare repository for public launch

2026-07-27 17:51:43 +01:00

verify-seed-derivation.py

feat(identity): seed-derivation verifier + KAT; rename "Your DID"→"Node DID"

2026-06-16 10:17:29 -04:00