Skip to content

Fix production release verification - #46

Closed
Alex Weininger (alexweininger) wants to merge 1 commit into
mainfrom
fix/canvas-authoring-full-receipt-verifier-3b4d7fc
Closed

Alex Weininger (alexweininger) wants to merge 1 commit into
mainfrom
fix/canvas-authoring-full-receipt-verifier-3b4d7fc

Conversation

@alexweininger

@alexweininger Alex Weininger (alexweininger) commented Oct 29, 2026 •

Copy link
Copy Markdown
Member

Canvas Authoring 0.1.3 links from its skill to its readme just for the telemetry notice. This is flagging our production check that normally says no skills can link to mutable files. But in this case it's fine because that file is shipped with the plugin and isn't mutable.

This change allows a skill to link to documentation only when that file is protected by the full receipt. Tampered or missing receipt entries still fail, and the existing rules for other canvas packages stay unchanged.

#43 depends on this fix

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant