sneak 213364bab5 Add UUID to manifest and verify integrity before decompression ...

- Add UUID field to both inner and outer manifest messages
- Generate random v4 UUID when creating manifest
- Hash compressed data (not uncompressed) for integrity check
- Verify hash before decompression to prevent malicious payloads
- Validate UUIDs are proper format and match between inner/outer
- Sign string format: MAGIC-UUID-MULTIHASH

2025-12-18 02:20:51 -08:00

1.6 KiB

Raw Blame History

View Raw