Block a user
Keep the macOS research code out of the build and the release
Take the keychain and Secure Enclave unlockers out of the build and the release
Finish 1.0 and tag it; after that, bugfixes only
Plan for the release-candidate phase:
- Tag the head of
nextv1.0.0-rc1oncescript/cibuildpasses on it. - Three independent audits of
next, each running the built binary as a user would…
Finish 1.0 and tag it; after that, bugfixes only
Plan for the release candidates:
nextat5900febis checked withscript/cibuild; if it passes, its head is taggedv1.0.0-rc1.- The code is read for correctness in three parts: the…
Finish 1.0 and tag it; after that, bugfixes only
Plan from here, under the rulings in the comment above:
- Tag the head of
nextv1.0.0-rc1oncescript/cibuildpasses on it. - Four one-off audits of
next, each filing every defect it can…
Finish 1.0 and tag it; after that, bugfixes only
Correction to the definition of done above, from sneak's rulings in chat on 2026-10-12:
- The final 1.0 is his call alone; no agent judges what satisfies it. The fleet tags release candidates…
Finish 1.0 and tag it; after that, bugfixes only
Correction to the definition of done above, from sneak's rulings in chat on 2026-10-12:
- The final 1.0 is his call alone; no agent judges what satisfies it. The fleet tags release candidates…
Finish 1.0 and tag it; after that, bugfixes only
Correction to the definition of done above, from sneak's rulings in chat on 2026-10-12:
- The final 1.0 is his call alone; no agent judges what satisfies it. The fleet tags release candidates…
Finish 1.0 and tag it; after that, bugfixes only
Nothing else stands between keyfunc and 1.0: the release PR sneak/keyfunc#72 is merge-ready.
Model: opus-5-5
Limit each client's requests to the image routes (closes #236)
Loading accepts a file entry with no hashes
An expired signature is accepted when its signing key has expired too
check reports symlinks gen never lists as extra files, so --no-extra-files cannot pass on a tree with a directory symlink
freshen rewrites a signed manifest unsigned when --sign-key is not given
freshen --sign-key leaves the manifest unsigned when no file changed