Flips website/portal-release.json to the published v0.1.1 build, which is what takes goq.sh's download button out of its disabled state. The runbook asks for the artifact to be verified before this flip rather than after, so the bytes were checked as a stranger receives them: SHA-256 recomputed against the published checksum, `gh attestation verify` clean, and the app inside the mounted DMG reports Signature=adhoc with identifier sh.goq.portal. `spctl --assess` rejects it, which is the documented and expected result for an ad-hoc build that is deliberately not notarized. The Sigil install note also stops calling the signed channel pending, since v0.1.1 published it and install-sigil now pins that tag.
- commit
- 1de232333c472857cef5e848056bcc10203ea24a
- parent
- 6b547ee1bdfe9bf4c78f68d4c2ff432bedbf9176
- author
- Dami <dami.etoile@gmail.com>
| M | website/ | 2 | +- |
| M | website/ | 16 | ++++++++++++++-- |
@@ -87,7 +87,7 @@
8787 <code class="install-cmd"><span class="install-prompt">$</span> <span class="install-text">curl -fsSL https://goq.sh/install-sigil | bash</span></code>8888 <button class="install-copy" type="button" aria-label="Copy Sigil install command">copy</button>8989 </div>90- <p class="release-note">dedicated bazzite machine</p>90+ <p class="release-note">dedicated bazzite machine · signed release channel open</p>9191 </div>9292 </div>9393 <p class="hero-note">Games over QUIC: low-latency SteamOS streaming over iroh <br> Work in progress. Not a finished product.</p>@@ -1,8 +1,20 @@
11 {22 "builds": {33 "macos-arm64": {4- "available": false,5- "reason": "No public Portal release has been promoted yet. Portal is ad-hoc signed and GitHub-attested, never Apple-notarized."4+ "architecture": "arm64",5+ "asset": "Portal-0.1.1-arm64.dmg",6+ "available": true,7+ "checksum_asset": "Portal-0.1.1-arm64.dmg.sha256",8+ "checksum_url": "https://github.com/FelineStateMachine/goq/releases/download/v0.1.1/Portal-0.1.1-arm64.dmg.sha256",9+ "download_url": "https://github.com/FelineStateMachine/goq/releases/download/v0.1.1/Portal-0.1.1-arm64.dmg",10+ "manifest_asset": "Portal-0.1.1-arm64.json",11+ "manifest_url": "https://github.com/FelineStateMachine/goq/releases/download/v0.1.1/Portal-0.1.1-arm64.json",12+ "platform": "macos",13+ "release_tag": "v0.1.1",14+ "release_url": "https://github.com/FelineStateMachine/goq/releases/tag/v0.1.1",15+ "sha256": "d354f4dff9ed96eb7405afd3ac7c4f36507c888de595b6aabcffaa891436afb2",16+ "verification": "adhoc-signed+github-attested+sha256",17+ "version": "0.1.1"618 }719 },820 "format": 1,