ilaandClaude Fable 5
5db6031e4b
Code-level audit of the authorization chain: domain-separated machine hash with no raw identifiers in errors or storage, strict License v1 verification (base64 re-encode round-trip, exact 9-field shape, timestamp round-trip, machine-hash binding), and revocation state with clock-rollback defense and revoked-before-expiry ordering. Snapshots to the UI carry no license ID, signature, path or raw Windows identifiers; defaults fail closed. Catalog/License/Revocation share one canonical JSON implementation. No security defect found. Records two product decisions needed: the revocation list is a hard dependency for any authorization (missing or >38-day-old list blocks all launches, in tension with the offline licensing vision and lacking a distribution plan), and trial is a P0 requirement plus MVP acceptance criterion that is deliberately not implemented, leaving 02-requirements in conflict with the architecture and task docs. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
SoftBox 软件盒子
使用 Go + Gio 开发的 Windows 软件盒子:远程软件目录 + 安全下载器 + 便携安装器 + 更新器 + 启动器 + 授权入口。
- 现代版:Win10/Win11 x64,当前受支持 Go 工具链 + 当前 Gio。
- Win7 遗留版:Win7 SP1,锁定 Go 1.20 + Gio v0.6.0,仅兼容与严重修复。
- 单仓库单主分支:共享
core+app-modern+app-win7两个构建模块 + 两个签名 manifest 更新通道。
快速开始
./init.sh # WSL / Git Bash / Linux
./init.ps1 # Windows 原生 PowerShell
统一完成依赖安装、基础验证并打印启动命令。脚本顶部命令未配置时会主动失败(由任务 T-001 落地真实命令)。
文档
- AI coding agent 入口:
AGENTS.md→docs/00-ai-start-here.md - 文档导航:
docs/README.md - 需求与验收:
docs/02-requirements.md - 架构与协议:
docs/04-architecture.md、docs/api.md - 任务路线图:
docs/06-tasks.md;任务文件在docs/tasks/
本项目采用 harness coding 工作方式:文档是给 agent 执行时用的约束、事实来源和验收标准,需求变化先改文档再改代码。