gabriel / muse public
feat minor security task/restore-hub-trust #1 / 1
gabriel · 68 days ago · Apr 9, 2026 · Diff

feat(security): restore hub_trust TOFU pinning module

hub_trust.py was stashed on feat/security-controls and never committed, leaving transport.py's lazy import permanently failing with: ⚠️ Hub trust check failed: No module named 'muse.core.hub_trust'

Restores the module so TOFU certificate pinning works on push/pull. The CLI trust command and its tests remain in the stash for a separate PR.

sha256:11db926a2524e20789897959cc59aed3b80f29771861232ed76db1153f1d5124 sha
sha256:8b64d67dbdc1e0e48d702672a2f702e36b5a832c620fa4cd6215ba82bb57c6a5 snapshot
← Older Oldest on task/restore-hub-trust
All commits
Newer → Latest on task/restore-hub-trust

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:11db926a2524e20789897959cc59aed3b80f29771861232ed76db1153f1d5124 --body "your comment"