tmk241/hemx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(workout): record runtime asset integrity

Browse Source 
Write and verify asset-integrity.tsv for the Workout mobile release kit using the actual hemx runtime path and SHA-256 digest, so mobile shell review has inspectable runtime integrity evidence.

req: examples/006
This commit is contained in:
slhx agent
2026-06-12 12:52:26 +02:00
parent f8f1a9aee5
commit 815392b232
4 changed files with 43 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/recipes/mobile-release.md
+2 -1
View File
@@ -56,7 +56,8 @@ The generated manifest records:
- app identity and version;
- the production HTTPS origin used by Android and iOS shells;
- `target/release/hemx-workout-example` as the server artifact;
- runtime assets served by the same release through `hemx_axum::runtime_js_path()`;
- the exact runtime asset path and SHA-256 digest served by the same release;
- `asset-integrity.tsv` as a plain-text integrity receipt for mobile shell review;
- cache policy: release-scoped HTML/CSS/runtime assets only;
- offline truth policy: app-owned command/event/projection records, never DOM
patches or UI effect payloads;