Add integrity verification documentation

Document how content-addressable storage and integrity verification works:
- SHA256 hashing and content-addressable storage overview
- Client-side verification steps (before upload, after download)
- Server-side consistency check endpoint and scheduling
- Recovery procedures for corrupted, missing, or orphaned artifacts
- CI/CD integration examples
This commit is contained in:
Mondo Diaz
2026-01-16 18:39:31 +00:00
parent bce27c43f3
commit 5cd92ad89a
2 changed files with 295 additions and 0 deletions

View File

@@ -23,6 +23,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- Added consistency check endpoint tests with response format validation
- Added corruption detection tests: bit flip, truncation, appended content, size mismatch, missing S3 objects
- Added Digest header tests (RFC 3230) and verification mode tests
- Added integrity verification documentation (`docs/integrity-verification.md`)
- Added `package_versions` table for immutable version tracking separate from mutable tags (#56)
- Versions are set at upload time via explicit `version` parameter or auto-detected from filename/metadata
- Version detection priority: explicit parameter > package metadata > filename pattern