fix(prime): verify signed publications in Electron

[rynfar]

Installed Nightly reports that no managed Prime publication exists because Electron/BoringSSL rejects the implicit digest used by TUF and Sigstore (NO_DEFAULT_DIGEST). The same packaged verifier succeeds under regular Node.

Patch the pinned verification dependencies to specify Node/OpenSSL's existing SHA-256 default for EC/RSA keys. Preserve explicit algorithms, Ed25519/Ed448 behavior, signature thresholds, provenance policy and rejection of invalid signatures. This enables the existing supported managed installation flow; it does not change a user's selected runtime or clear ownership quarantine.

Validation: 48 focused tests pass, including real cryptographic signatures and tampering checks with Electron's missing-default behavior simulated; targeted lint and formatting pass. Executed the patched source with the installed Electron 44.1.0 / Node 24.19.0 binary against the actual immutable publications: stable sequence 3 and preview sequence 22 both verify source 3694cfef31d29a38757678cafe74e4705ae95662. The unpatched packaged code fails in that same executable. A standalone process in the actual Electron runtime also passed 12 valid/tampered ECDSA, RSA and Ed25519 signature/metadata assertions against the patched installed dependencies.

Refs #557. Model: GPT-6; harness: Codex in Pylon Nightly.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
pylon-marketing	Ready	Preview	Sep 18, 2026 5:41pm UTC

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	14.0 KiB	13.9 KiB	−57 B (−0.4%)	15.1 KiB	✅
Codex	Thread snapshot wire	7.2 KiB	7.2 KiB	−12 B (−0.2%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	6.7 KiB	6.7 KiB	−45 B (−0.7%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	58.0 KiB	58.0 KiB	−44 B (−0.1%)	66.4 KiB	✅
Codex	Live turn messages	9	8	−1 (−11.1%)	21	✅
Claude	Total thread wire	14.0 KiB	14.0 KiB	+11 B (+0.1%)	15.1 KiB	✅
Claude	Thread snapshot wire	7.2 KiB	7.2 KiB	+1 B (+0.0%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	6.7 KiB	6.8 KiB	+10 B (+0.1%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	58.9 KiB	58.9 KiB	0 B (0.0%)	66.4 KiB	✅
Claude	Live turn messages	9	9	0 (0.0%)	21	✅

Baseline: 6468f56 · PR result: 80a6a7b · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 115.6 KiB
• Claude decoded thread snapshot: 116.3 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.