0.3.1-preview.1

0.3.1-preview.1

SwiftPM exact version 0.3.1-preview.1, iOS 17+, macOS 14+, Swift 6, no third-party runtime dependencies. Public configurations from the hosted console are unaffected.

• Accepts configurations containing only a pinned key set. The existing non-optional pinnedPublicKey property contains its first member; manifests signed by any member remain trusted.
• Codable encoding preserves the supplied single-pin field's presence, preventing a compatibility fallback from inflating set-only JSON past its byte limit. Explicit non-first single pins and the entire trust set survive round trips.
• Rejects explicit nulls in known configuration fields, keyId without an explicit single pin, and keyIds whose values, count, or order differ from the derived IDs. Duplicate pins, empty or oversized sets, invalid Ed25519 SPKI PEM, pins over 256 UTF-8 bytes, and JSON over 4096 bytes remain rejected. Unknown fields count toward the JSON byte limit.
• Runs the generated shared public-configuration corpus, including signature checks for the second trusted key and an untrusted key.

Validation: on October 9, 2026, swift test passed 52 tests across 5 suites on macOS (the optional hosted test skips without a configuration), including 43 shared public-configuration cases, 39 associated signature expectations, and the 100 existing signed manifest cases. All 4 code-generation tests and swift build -c release passed. No iOS simulator or device run is claimed.