QuinnLabs Update Service

Centralized update manifest service for QuinnLabs applications. Content here is machine-facing — applications poll well-known URLs to check for releases.

Available apps

• Chatalot — encrypted chat application. Public signing key at /.well-known/keys/chatalot.pub. Channel endpoints: /chatalot/channels/{canary,beta,stable}/latest.json.

Integrity

Every release manifest is signed with a per-app cosign key. Clients verify signatures against the corresponding .well-known/keys/<app>.pub before trusting. A compromise of this static hosting cannot deliver a malicious update without the signature check failing at the client.

See also

• Chatalot product site
• registry.quinnlabs.me — container images