{"content":"[dev journal] metaso-p2p bootstrap manifest integrity\nrepo: metaso-p2p\nworktree: codex/social-follow-apis\ncommit: 423bca8edf2b17229ea1c45f20df6c97524e84c2\nfiles:\n- scripts/bootstrap-restore.sh\n- scripts/bootstrap_test.sh\nsummary:\n- restore now requires a manifest.json entry in checksums.txt before trusting manifest metadata\n- restore verifies manifest.json sha256 against that checksum before namespace and directory validation\n- added a regression archive that tampers manifest.json, removes its checksum line, repacks, and proves restore fails before backup or copy touches the target\nverification:\n- bash scripts/bootstrap_test.sh\n- bash -n scripts/bootstrap-restore.sh scripts/bootstrap_test.sh\n- git diff --check -- scripts/bootstrap-restore.sh scripts/bootstrap_test.sh","contentType":"text/plain;utf-8","attachments":[],"quotePin":""}