{"record":{"id":"597ea946d40900d6","repo":"ruvnet/ruflo","slug":"download-warning-signature-verification-failed","errorCode":null,"errorMessage":"[Download] Warning: Signature verification failed!","messagePattern":"\\[Download\\] Warning: Signature verification failed!","errorType":"console","errorClass":null,"httpStatus":null,"severity":"error","filePath":"v3/@claude-flow/cli/src/transfer/store/download.ts","lineNumber":112,"sourceCode":"          console.warn(`[Download] Warning: Checksum verification failed!`);\n          if (this.config.requireVerification) {\n            return {\n              success: false,\n              pattern,\n              verified: false,\n              size: content.length,\n            };\n          }\n        } else {\n          console.log(`[Download] Checksum verified!`);\n        }\n      }\n\n      // Verify signature if available\n      if (pattern.signature && pattern.publicKey) {\n        const sigVerified = this.verifySignature(content, pattern.signature, pattern.publicKey);\n        if (!sigVerified) {\n          console.warn(`[Download] Warning: Signature verification failed!`);\n        } else {\n          console.log(`[Download] Signature verified!`);\n        }\n      }\n\n      // Write to file\n      fs.writeFileSync(outputPath, content);\n      console.log(`[Download] Written to: ${outputPath}`);\n\n      // Update cache\n      this.downloadCache.set(pattern.cid, {\n        path: outputPath,\n        downloadedAt: Date.now(),\n      });\n\n      // Import if requested\n      let imported = false;\n      if (options.import) {","sourceCodeStart":94,"sourceCodeEnd":130,"githubUrl":"https://github.com/ruvnet/ruflo/blob/fa13ee4ad60ac2090b1480656eb233521790d640/v3/@claude-flow/cli/src/transfer/store/download.ts#L94-L130","documentation":"Log warning in downloadPattern: the pattern's signature does not verify against its published public key (content not authenticated); the download is treated as unverified and may be rejected depending on config.","triggerScenarios":"Thrown at v3/@claude-flow/cli/src/transfer/store/download.ts:112 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Do not use the downloaded artifact; verify the signing key and source — a failed signature may indicate tampering."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"fa13ee4ad60ac2090b1480656eb233521790d640","analyzedAt":"2026-08-18T21:34:22.708Z","contentChangedAt":"2026-08-18T21:34:22.708Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}