feat(companion): add release bundle verification mode

2026-02-26 19:31:24 -08:00
parent 5618ca1fc5
commit 995166fbbc
12 changed files with 483 additions and 9 deletions
@@ -68,6 +68,16 @@ Expected result:

 If signature is present, verify `CHECKSUMS.sha256.sig` with your org signing key policy before launch.

+Automated CLI verification mode:
+
+```bash
+flynn companion \
+  --verify-release-bundle ./dist/companion-macos \
+  --verify-signing-key ./keys/release-public.pem \
+  --verify-signing-key-id team-k1 \
+  --require-signature
+```
+
 ## Launch

 ```bash