Add integrity verification documentation
Document how content-addressable storage and integrity verification works: - SHA256 hashing and content-addressable storage overview - Client-side verification steps (before upload, after download) - Server-side consistency check endpoint and scheduling - Recovery procedures for corrupted, missing, or orphaned artifacts - CI/CD integration examples
This commit is contained in:
@@ -23,6 +23,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
||||
- Added consistency check endpoint tests with response format validation
|
||||
- Added corruption detection tests: bit flip, truncation, appended content, size mismatch, missing S3 objects
|
||||
- Added Digest header tests (RFC 3230) and verification mode tests
|
||||
- Added integrity verification documentation (`docs/integrity-verification.md`)
|
||||
- Added `package_versions` table for immutable version tracking separate from mutable tags (#56)
|
||||
- Versions are set at upload time via explicit `version` parameter or auto-detected from filename/metadata
|
||||
- Version detection priority: explicit parameter > package metadata > filename pattern
|
||||
|
||||
Reference in New Issue
Block a user