From 839947601d67bfed4408052108a0f719cf91585c Mon Sep 17 00:00:00 2001 From: Alex Godoroja Date: Tue, 23 Jun 2026 14:06:55 -0700 Subject: [PATCH] catalogue: pin io.telepat.ideon-free publisher (v1.12.3 anchor fix) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v1.12.3's catalogue anchor fail-closes any entry without a publisher pin. io.telepat.ideon-free was the only unpinned app (the four io.pilot.* are pinned) → it would be refused on hosts updating to v1.12.3. Add publisher: ed25519:5cqj+... (== the bundle's store.publisher signing key, verified) and re-sign catalogue.json. New .sig verifies against the embedded catalogtrust pubkey. Co-Authored-By: Claude Opus 4.8 (1M context) --- catalogue/catalogue.json | 3 ++- catalogue/catalogue.json.sig | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/catalogue/catalogue.json b/catalogue/catalogue.json index a3e09f14..0a6ba8bf 100644 --- a/catalogue/catalogue.json +++ b/catalogue/catalogue.json @@ -117,7 +117,8 @@ "version": "0.3.1", "description": "Free article generation for agents: ideon-free.generate(idea) returns a jobId; ideon-free.poll(jobId) returns the finished markdown article. Thin adapter over Ideon's ideon_write — no payment.", "bundle_url": "https://github.com/pilot-protocol/catalog/releases/download/ideon-free-v0.3.1/io.telepat.ideon-free-0.3.1.tar.gz", - "bundle_sha256": "dd8e37057f33eadefff6b7ff5fc99130667076ea398c10a154c345fd87dd1ad6" + "bundle_sha256": "dd8e37057f33eadefff6b7ff5fc99130667076ea398c10a154c345fd87dd1ad6", + "publisher": "ed25519:5cqj+zTVecj8r0YRUShpgFi/g7TxDg1lkDKQzfNyDyc=" } ] } diff --git a/catalogue/catalogue.json.sig b/catalogue/catalogue.json.sig index 10a8c31d..0927bb94 100644 --- a/catalogue/catalogue.json.sig +++ b/catalogue/catalogue.json.sig @@ -1 +1 @@ -7bQgHV+ENB1G3zl13+rfyoe8XCwncxEwDcol+Uqq6KjXgnjT6eBGYUJ2yo5F5l1AelylDa6kX8fZQWASCbsOAQ== +8DN2+0oxrOTH/Z67t6MHvhphJYnMh5xQdIvchyhnyKER4ze5h5rU0HgqIWnxSavuj/ggbBwAPENROapndXkoBg==