Repository navigation
Conversation
Add read-only hanzo doctor checks and strict provenance verification. Reserve hanzo-node for the network node and use hanzo-cli for control delegation. Release 8.5.754. Testing: 387 Rust unit tests and three cloud parser tests passed; strict clippy passed; installer fixtures passed under sh and bash; real Gen strict provenance verified with GitHub CLI 2.102.1. Risk: installer alias migration removes only the known legacy hanzo-node symlink. Strict mode requires authenticated compatible gh and available release attestations; normal mode continues to require checksums and reports unavailable provenance. How to revert: revert this commit and republish the previous installer; install CLI v8.5.753 if necessary.
Testing: all 13 existing installer tests and strict sh/bash fixtures pass. Risk: output-only correction for verified artifacts. How to revert: revert this commit.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fix native installer naming and verification diagnostics, and add
hanzo doctorfor executable paths, versions, authentication, GPU and optional release-integrity checks.The shared installer supports strict provenance verification, preserves existing binaries when verification fails, and uses
hanzo-clifor control delegation. It removes only known legacy CLI symlinks namedhanzo-node, preserving real node binaries. Gen is included in upgrades.Release 8.5.754. This is the installer and diagnostics release only; cloud steering remains in draft PR #9 until its API deploy passes production acceptance.
Validation: strict sh/bash fixtures and all 13 existing installer tests pass; clippy and doctor live authentication/GPU checks passed. The full isolated
make testsuite passed, including command-surface derivation and reachability checks. Production login, local coding and cloud coding checks passed on the same installer/doctor changes. The hanzo.sh coordinator PR depends on this shared installer landing first.