enricobuehlerandClaude Fable 5 575ea1a371 chore(index): repin to the operator-held signing key ...

The bootstrap key generated during implementation was lost with its scratch
directory. Nothing shipped pinning it, so this is a straight replacement of
slot 0 rather than a rotation — the second slot stays reserved for a real one.

The private half now lives only in the INDEX_SIGNING_KEY secret, so CI is the
only thing that can sign. This push is what makes it do so: the committed
signature is still the old key's, and the verify self-check will fail loudly
if the secret does not match the public key pinned here.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 22:57:38 +02:00

..

workflows

chore(index): repin to the operator-held signing key

2026-07-20 22:57:38 +02:00

pull_request_template.md

feat: signed plugin index with validation and publish pipeline

2026-07-20 20:25:16 +02:00