@getappz/agentflare-win32-x64 1.4.0 → 1.6.0

package/README.md

@@ -1,5 +1,11 @@
 <div align="center">
 
+<pre>
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+  agentflare  ·  Optimize AI CLI agents for cost & performance
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+</pre>
+
 # agentflare
 
 **Run AI coding agents efficiently, and coordinate more than one of them.**
@@ -126,8 +132,9 @@ cd agentflare
 .\install.ps1
 ```
 
-**Windows, Scoop** (prebuilt binary — unsigned, like most small Rust CLIs;
-Defender/SmartScreen false-positives are possible, report an issue if hit):
+**Windows, Scoop** (prebuilt binary — not Authenticode-signed, so
+Defender/SmartScreen false-positives are possible; verify with cosign/SLSA
+instead, see "Verifying release binaries" below; report an issue if hit):
 ```powershell
 scoop bucket add agentflare https://github.com/getappz/agentflare
 scoop install agentflare
@@ -143,6 +150,70 @@ cargo install --git https://github.com/getappz/agentflare
 curl -fsSL https://raw.githubusercontent.com/getappz/agentflare/master/install.sh | sh -s -- --uninstall
 ```
 
+---
+
+## Verifying release binaries
+
+The install methods above verify SHA-256 checksums by default — enough to
+catch a corrupted download, not a substituted one. For higher-assurance
+environments, verify the cryptographic signature and build provenance before
+running the binary.
+
+### cosign (signing identity)
+
+Every release binary is signed in CI using
+[cosign](https://docs.sigstore.dev/cosign/overview/) keyless signing via the
+GitHub OIDC token — the certificate is issued by Fulcio and bound to this
+repo's `release.yml` workflow, so verifiers pin to the workflow identity
+instead of a long-lived key.
+
+```bash
+VERSION=v0.x.x
+FILE=agentflare-x86_64-unknown-linux-gnu.tar.gz
+curl -fL -o "$FILE" "https://github.com/getappz/agentflare/releases/download/${VERSION}/${FILE}"
+curl -fL -o "${FILE}.cosign.bundle" "https://github.com/getappz/agentflare/releases/download/${VERSION}/${FILE}.cosign.bundle"
+
+cosign verify-blob \
+  --bundle "${FILE}.cosign.bundle" \
+  --certificate-identity-regexp '^https://github\.com/getappz/agentflare/\.github/workflows/release\.yml@refs/tags/v.*' \
+  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
+  "$FILE"
+```
+
+### SLSA L3 provenance (build process)
+
+cosign proves *this repo's CI signed it*; SLSA provenance proves *how it was
+built* — which commit, workflow, and inputs. Releases include a
+`<tag>.intoto.jsonl` attestation generated by the
+[SLSA GitHub generator](https://github.com/slsa-framework/slsa-github-generator).
+Verify with [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier):
+
+```bash
+curl -fL -o "${VERSION}.intoto.jsonl" "https://github.com/getappz/agentflare/releases/download/${VERSION}/${VERSION}.intoto.jsonl"
+
+slsa-verifier verify-artifact \
+  --provenance-path "${VERSION}.intoto.jsonl" \
+  --source-uri github.com/getappz/agentflare \
+  --source-tag "${VERSION}" \
+  "$FILE"
+```
+
+Both print a `Verified`/`PASSED` line and exit 0 on success — do not run the
+binary on failure. `--certificate-identity-regexp`/`--certificate-oidc-issuer`
+and `--source-uri`/`--source-tag` are the load-bearing flags in each command;
+loosening any of them defeats the point.
+
+| Attack | SHA-256 checksums | cosign keyless | SLSA L3 provenance |
+|---|---|---|---|
+| Corrupted download | ✅ caught | ✅ caught | ✅ caught |
+| Substituted binary at release | ❌ SHA256SUMS would also be swapped | ✅ certificate identity ≠ this repo's workflow | ✅ provenance source-uri ≠ this repo |
+| Stolen release-pipeline secret | ❌ | ✅ no long-lived secret to steal | ✅ provenance binds to specific workflow run |
+| Tampered build process | ❌ | ❌ — cosign signs the artifact, not the build | ✅ provenance records the exact workflow, commit, and inputs |
+
+SHA-256 stays the default in the installers above because it needs no extra
+client-side tooling; cosign and SLSA are opt-in for environments that need
+the higher tier.
+
 ## Set up an agent
 
 One command per tool, run once. Running it is the consent — installs happen

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getappz/agentflare-win32-x64",
-  "version": "1.4.0",
+  "version": "1.6.0",
   "description": "Optimize AI CLI agents for cost and performance",
   "bin": {
     "agentflare": "bin/agentflare.exe"