Docs: Pin the verified Panama bootstrap

2026-08-27 10:14:55 -04:00
parent 0d1841cf86
commit dce00e45d1
5 changed files with 156 additions and 16 deletions
@@ -43,6 +43,13 @@ Other tools that beat raw commands:
 - `panama test --safe` — run only contracts classified as hermetic in
  `tests/contracts.manifest`

+For a new machine, use the complete verified bootstrap command in `README.md`.
+Desktop and server installs use the same commit-addressed `boot` file and
+SHA-256; server adds only `--server`. Do not replace that URL with a branch or
+pipe its response into Bash. `boot` refuses missing or malformed pins, a boot
+digest mismatch, and any dirty, divergent, fetch-failed, or mismatched existing
+checkout. Use `panama update` after installation.
+
 A plain `panama test` prompts in a terminal before it starts non-hermetic contracts. Automation
 must grant each required capability with a repeatable `--allow`, such as
 `panama test --allow live-host updates`. Each contract has a 180-second outer timeout by default,