ilaandClaude Fable 5
1bc4504913
Concede two errors in the original review: it cited 01-vision.md for a 'perpetual offline use' promise the vision never makes (only 'offline verifiable'), and it described the clock-rollback check too broadly - that check only covers same-list rollback, not an older list paired with a correspondingly rolled-back clock. Accept Codex's O5 (verified: StoreRevocations replaces the cache after signature check with no cross-list monotonicity, so signed revocation lists can be replayed) and O6, plus four precision refinements. Add the threat-boundary rationale for O5: monotonicity does not stop a local attacker but does stop distribution-channel replay, a ~38-day revocation rollback window is exploitable without any clock control, and benign CDN staleness alone silently rolls back revocation state - making the 'reject older list' check a correctness requirement, not just hardening. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
SoftBox 软件盒子
使用 Go + Gio 开发的 Windows 软件盒子:远程软件目录 + 安全下载器 + 便携安装器 + 更新器 + 启动器 + 授权入口。
- 现代版:Win10/Win11 x64,当前受支持 Go 工具链 + 当前 Gio。
- Win7 遗留版:Win7 SP1,锁定 Go 1.20 + Gio v0.6.0,仅兼容与严重修复。
- 单仓库单主分支:共享
core+app-modern+app-win7两个构建模块 + 两个签名 manifest 更新通道。
快速开始
./init.sh # WSL / Git Bash / Linux
./init.ps1 # Windows 原生 PowerShell
统一完成依赖安装、基础验证并打印启动命令。脚本顶部命令未配置时会主动失败(由任务 T-001 落地真实命令)。
文档
- AI coding agent 入口:
AGENTS.md→docs/00-ai-start-here.md - 文档导航:
docs/README.md - 需求与验收:
docs/02-requirements.md - 架构与协议:
docs/04-architecture.md、docs/api.md - 任务路线图:
docs/06-tasks.md;任务文件在docs/tasks/
本项目采用 harness coding 工作方式:文档是给 agent 执行时用的约束、事实来源和验收标准,需求变化先改文档再改代码。