Development record
The install one-liner the site serves (/install.sh, built from site-src/install.sh.tmpl) installs a release without recording the newest-release mark that the bootstrap and abcd update now keep (the fix for iss-2609151847117977 on branch fix/sec-pub-b2-261011), so a machine installed only that way has no mark until the bootstrap or update next runs, and a stale cached release is not refused in that window. Found by lane B2 on 2026-10-12.
issueresolvedminoriss-2610120601505029
The install one-liner the site serves (/install.sh, built from site-src/install.sh.tmpl) installs a release without recording the newest-release mark that the bootstrap and abcd update now keep (the fix for iss-2609151847117977 on branch fix/sec-pub-b2-261011), so a machine installed only that way has no mark until the bootstrap or update next runs, and a stale cached release is not refused in that window. Found by lane B2 on 2026-10-12.
Frontmatter
| id | iss-2610120601505029 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | minor |
.abcd/work/issues/resolved/iss-2610120601505029-install-sh-does-not-record-release-mark.md
open on GitHub ↗ · commit history ↗
mentions1
- iss-2609151847117977The home-scoped cache attestation (GHSA-4q78-ccfv-f374) binds exactly two