fix(security): address 8 CodeRabbit findings — aliasing, permissions, race, snapshot, signing-failure gate, 422 test - #2026

Closed

hognek wants to merge 10 commits into

hognek:fix/cr-bot-2023

Commits on Jul 17, 2026

feat(store): add Ed25519 manifest signing and verification for install-v2
hognek
committed
5ec192d
fix(store): address Kilo bot review (round 2)
hognek
committed
ac135b6

Commits on Jul 18, 2026

fix(store): resolve Ed25519 signing review issues (Kilo CRITICAL + nits)
hognek
committed
18524fd
fix(store): unique retry tmp path in signing keypair creation + remove redundant os import
hognek
committed
147d6be
fix(store): address 5 security findings from jaylfc review of #1924
hognek
committed
52fc402
fix(store): resolve Kilo WARNING — remove tmp.unlink race in keygen recovery
hognek
committed
60eefc2
fix(security): address Kilo SUGGESTIONS — fail-closed verify_manifest_signature + second signature re-verify TOCTOU guard
hognek
committed
ba9e17f
fix(security): address CodeRabbit findings — aliasing, permissions, race, snapshot, signing failures, 422 test
hognek
committed
dc3cbc2
fix(store): add TOCTOU re-verify guard for backend manifest and guard keyfile.stat() OSErrors
hognek
committed
7346261
fix(store): remove redundant secondary TOCTOU re-verify for backend manifest
hognek
committed
ad81361