Skip to content

LispM Auth client 0.2.1 — Verified service pins

Choose a tag to compare

View all tags
@RyanKung RyanKung released this 04 Nov 05:41
client-v0.2.1
7f56c31
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

LispM Auth client 0.2.1

The first tagged client containing independently verified SHA256 pins for all three published standalone service v0.2.0 archives.

  • Client version: 0.2.1
  • Client tag: client-v0.2.1
  • Commit: 7f56c31
  • Service version pinned by this client: v0.2.0, unchanged.
  • Merged update: #4

Install

Extract lispm-auth-client-0.2.1.tar.gz, add its directory to Emacs load-path, and load lispm-auth. With Emacs 30.1 or later built with zlib support, invoke M-x lispm-auth-install-service and confirm the explicit download. The client selects the supported platform, verifies its pinned SHA256 before extraction, probes the service, and activates the versioned installation without overwriting an existing one. Merely loading the package does not download anything.

For Desktop packaging, pin tag client-v0.2.1 (or the exact commit above). The service assets remain at https://github.com/LispMachineLab/lispm-auth/releases/tag/v0.2.0. A distributor may bundle the full verified service tree in prebuilt/PLATFORM/ alongside lispm-auth.el instead of using the explicit downloader. Preserve lib/ and license files, and distribute the corresponding source materials from the service release as required.

Supported service platforms and hashes

Platform Baseline Published service archive SHA256
darwin-arm64 macOS 14 ARM64 f5e5a8308f3ab745bef0654ce07ffaebb9ee1b503f8c83c4bd558224349968bf
darwin-x86_64 macOS 15 Intel 231924ec7573a575aa51fde23be9318ab198146c51962c16275cb3106589f7bc
linux-x86_64 Ubuntu 22.04/glibc 77364fa76e1a2ae5f7a5a13b43d3ed6f45479ca84fc844f612481e1fd9e0be33

End users do not install ECL, SBCL, ASDF, CFFI, GnuPG, libsodium or Homebrew. macOS service bundles are ad-hoc signed, not Developer ID signed or notarized. Unsupported systems and old OpenPGP stores are rejected without an automatic migration.

Validation

All six latest PR checks passed before merge. Local headless GNU Emacs 30.1 passed all 77 tests and strict warning-as-error byte compilation. Installing the actual publicly downloaded ARM64 service using the production default pin passed. The merged source tree was checked identical to the validated PR head before packaging. This client release does not rebuild or replace service binaries.

Client source is licensed AGPL-3.0-or-later; the archive includes LICENSE. Third-party service dependencies retain their own licenses and source/relinking materials in the separate service release.

Assets 4
Loading