Skip to content

Fix verifier fail-open and harden CI/release toolchain#4

Merged
davidahmann merged 1 commit intomainfrom
codex/fix-proof-review-gaps
Feb 18, 2026
Merged

Fix verifier fail-open and harden CI/release toolchain#4
davidahmann merged 1 commit intomainfrom
codex/fix-proof-review-gaps

Conversation

@davidahmann
Copy link
Contributor

@davidahmann davidahmann commented Feb 18, 2026

Summary

  • fail closed when chain directory verification sees malformed *.json record files
  • add regression tests for malformed chain JSON via loadChain and CLI verify
  • pin CI/release tool versions (gosec, govulncheck, goreleaser)
  • upload checksums.txt.sig and checksums.txt.pem as GitHub release assets

Validation

  • go test ./cmd/proof/...
  • make prepush-full
  • manual repro: malformed chain directory now returns parse error and non-zero status

@davidahmann davidahmann merged commit 2ba1eb6 into main Feb 18, 2026
11 checks passed
@davidahmann davidahmann deleted the codex/fix-proof-review-gaps branch February 18, 2026 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments