Block a user
freshen records a file's size from the scan with the hash of what it reads later, so a file that changes in between gets an entry check can never pass
Refuse a file whose size changed between freshen's scan and hash (closes #207)
An empty --require-signature or --sign-key value is taken as the flag not given, so check --require-signature "" passes an unsigned manifest
Refuse an empty --require-signature or --sign-key (closes #205)
fetch prints a progress line for every 32 KiB it downloads
Send fetch progress at most once per second (closes #206)
A path with a . segment loads, so check reports the file it names as an extra file
Refuse a path with a . segment (closes #208)
clawbot
deleted branch issue-209-signature-made-while-key-valid from sneak/mfer
2026-10-14 00:01:04 +02:00
A signature made after its key expired, or before the key was made, is accepted
Refuse a signature made when its key was not valid (closes #209)
