fix(store): rebase onto origin/dev — CI fix for #2026#2039

Closed

hognek wants to merge 11 commits into

hognek:fix/cr-bot-2023

Commits on Jul 19, 2026

feat(store): add Ed25519 manifest signing and verification for install-v2
hognek
committed
fix(store): address Kilo bot review (round 2)
hognek
committed
fix(store): resolve Ed25519 signing review issues (Kilo CRITICAL + nits)
hognek
committed
fix(store): unique retry tmp path in signing keypair creation + remove redundant os import
hognek
committed
fix(store): address 5 security findings from jaylfc review of #1924
hognek
committed
fix(store): resolve Kilo WARNING — remove tmp.unlink race in keygen recovery
hognek
committed
fix(security): address Kilo SUGGESTIONS — fail-closed verify_manifest_signature + second signature re-verify TOCTOU guard
hognek
committed
fix(security): address CodeRabbit findings — aliasing, permissions, race, snapshot, signing failures, 422 test
hognek
committed
fix(store): add TOCTOU re-verify guard for backend manifest and guard keyfile.stat() OSErrors
hognek
committed
fix(store): remove redundant secondary TOCTOU re-verify for backend manifest
hognek
committed
fix(store): add os.replace fallback when os.link fails on unsupported filesystems
hognek
committed