Paul BakausandClaude Code b9902222d9 Launcher: fail closed on a missing download checksum (engine triage C1) ...

Byte-identical sync of the engine repo's launchers: a freshly downloaded
engine binary now runs only after verifying against its .sha256 sidecar.
A sidecar that cannot be fetched, or a machine with no sha256 tool,
refuses the download instead of exec'ing an unverified binary; the
wget-only path fetches the sidecar too. Binaries already on PATH or in
the cache that pass engine-probe are unaffected.

Prepared with AI assistance (Claude Code).

Co-Authored-By: Claude Code <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WaJv2c4oN8wS7Ttq4XRqyx

2026-08-31 20:00:04 -07:00

..

agents

Skill text: invoke the impeccable launcher instead of node scripts

2026-08-31 19:57:29 -07:00

reference

Rebase reconciliation: fold main's post-freeze work into the swapped tree

2026-08-31 20:00:04 -07:00

scripts

Launcher: fail closed on a missing download checksum (engine triage C1)

2026-08-31 20:00:04 -07:00

SKILL.src.md

Skill text: invoke the impeccable launcher instead of node scripts

2026-08-31 19:57:29 -07:00