This is the record of an abcd-managed repository

abcdBetav0.16.2 · 2026-11-06

Development record

The documented CLI install one-liner (README and docs/how-to/install.md) is far too complicated to be a one-liner: a single sh -c string of roughly 3,000 characters that unsets proxy variables, refuses a symlinked ~/.abcd.noindex, maps uname output to a release asset, downloads it and checksums.txt, verifies the checksum, probes gh attestation verify for four flags, resolves the latest tag and its commit through the GitHub API, verifies build provenance, prints a long fallback warning, installs to ~/.local/bin and writes ~/.abcd.noindex/path-entry. Nobody can read, audit or safely retype it, and a reader cannot tell what they are agreeing to run.

issueresolvedmajoriss-2610240827243654

The documented CLI install one-liner (README and docs/how-to/install.md) is far too complicated to be a one-liner: a single sh -c string of roughly 3,000 characters that unsets proxy variables, refuses a symlinked ~/.abcd.noindex, maps uname output to a release asset, downloads it and checksums.txt, verifies the checksum, probes gh attestation verify for four flags, resolves the latest tag and its commit through the GitHub API, verifies build provenance, prints a long fallback warning, installs to ~/.local/bin and writes ~/.abcd.noindex/path-entry. Nobody can read, audit or safely retype it, and a reader cannot tell what they are agreeing to run.

Deferral 2026-10-29

Deferred past v0.15.1: The fix is ready in the install-docs pull request, but the short command it documents fetches install.sh from the latest release, and no published release carries that asset until this cut is tagged; merging it first would point every reader at a missing file and a pipe that installs nothing while exiting cleanly. It merges right after the tag, once the asset's URL answers, and resolves this record then.

Frontmatter

idiss-2610240827243654
typeissue
lifecycleresolved
severitymajor

mentions3