docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
docs: add Release signature verification guide
Add a new wiki page 验证Release签名.md covering:
- Asset inventory (binaries, scripts, SHA256SUMS, cosign .pem/.sig)
- Layer 1: integrity verification via SHA256SUMS (default, fail-closed)
- Layer 2: authenticity verification via cosign keyless OIDC (opt-in)
- Three verification modes: installer auto, manual, end-to-end example
- v1.0.0 back-fill note (uses refs/heads/main identity)
- FAQ (legacy releases, THREE_M_UI_INSECURE, keyless model, cosign trust)
Cross-reference from:
- 安装与升级.md: new '验证安装包签名（推荐）' section with cosign
install + THREE_M_UI_VERIFY_COSIGN=1 usage for both install and update.
- 安全建议.md: new item #10 '供应链验证' summarizing the two layers
and warning against THREE_M_UI_INSECURE=1.
- _Sidebar.md: add 验证Release签名 entry above 安全建议.
風雪
b81f91cb58