mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-09 05:24:49 +09:00
Juan Denis
02bb7666e2
The registry index (schema v3) can now carry a review object per entry (reviewer, date, sha256, optional commit/notes) asserting that someone inspected the exact artifact being listed. The stamp is bound to the artifact hash: review.sha256 must equal the entry sha256, so any change to the released zip invalidates the review. - registry_service: keep review through normalization (validated), derive trust per entry: first_party, reviewed (stamp matches the pinned hash), or unreviewed - marketplace install route: unreviewed (or sha256-less) entries return 409 requires_acknowledgment unless the admin posts acknowledge_risk: true; acknowledged installs record trust in the audit log. Consent gate, consistent with ADR 0002 - Marketplace UI: Reviewed badge (reviewer + date tooltip) and Unreviewed warning badge on registry cards, plus a risk confirmation modal that retries the install with acknowledge_risk - tests: trust derivation and the install gate (409 + acknowledge path) - docs: EXTENSIONS_REGISTRY.md documents the field and the flow