{"record":{"id":"d619620509e534e0","repo":"astrid-runtime/astrid","slug":"signed-channel-release-metadata-asset-is-invalid","errorCode":null,"errorMessage":"signed channel release metadata asset is invalid","messagePattern":"signed channel release metadata asset is invalid","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"crates/astrid-cli/src/commands/update_channel.rs","lineNumber":527,"sourceCode":"            version.pre.is_empty() && version.build.is_empty(),\n            \"stable and dev channels must point to canonical releases\"\n        ),\n    }\n    ensure!(\n        pointer.release.tag == format!(\"v{version}\"),\n        \"signed channel release tag does not match its version\"\n    );\n    ensure!(\n        is_commit(&pointer.release.source_commit),\n        \"signed channel source commit is invalid\"\n    );\n    if let Some(commit) = nightly_commit {\n        ensure!(\n            commit == pointer.release.source_commit,\n            \"nightly channel version does not embed its source commit\"\n        );\n    }\n    ensure!(\n        pointer.release.metadata_asset == format!(\"astrid-{version}-release.toml\"),\n        \"signed channel release metadata asset is invalid\"\n    );\n    ensure!(\n        is_lower_hex_64(&pointer.release.metadata_blake3),\n        \"signed channel release metadata BLAKE3 is invalid\"\n    );\n    ensure!(\n        pointer.release.release_workflow_identity\n            == format!(\n                \"https://github.com/{REPOSITORY}/.github/workflows/release.yml@refs/tags/v{version}\"\n            ),\n        \"signed channel release workflow identity is invalid\"\n    );\n    validate_targets(&pointer.targets, &pointer.release.version)?;\n    Ok(())\n}\n","sourceCodeStart":509,"sourceCodeEnd":545,"githubUrl":"https://github.com/astrid-runtime/astrid/blob/affd8760f44190dbdfbec23403f4c4b642c33112/crates/astrid-cli/src/commands/update_channel.rs#L509-L545","documentation":"Signature check in validate_pointer: the release metadata asset name does not match the required 'astrid-{version}-release.toml' pattern, so the pointer's asset reference is malformed or was tampered with.","triggerScenarios":"Thrown at crates/astrid-cli/src/commands/update_channel.rs:527 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Regenerate the signed channel pointer with the correctly named metadata asset","Check the release workflow that publishes the asset name","Refuse the update; keep using the previously pinned channel state"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"affd8760f44190dbdfbec23403f4c4b642c33112","analyzedAt":"2026-09-09T21:28:12.402Z","contentChangedAt":"2026-09-09T21:28:12.402Z","schemaVersion":2},"datasetVersion":"2026-09-17T15:17:12.973Z"}