astrid-runtime/astrid · error

signed channel release metadata asset is invalid

Error message

signed channel release metadata asset is invalid

What it means

Signature check in validate_pointer: the release metadata asset name does not match the required 'astrid-{version}-release.toml' pattern, so the pointer's asset reference is malformed or was tampered with.

Solutions

1. Regenerate the signed channel pointer with the correctly named metadata asset
2. Check the release workflow that publishes the asset name
3. Refuse the update; keep using the previously pinned channel state

When it happens

Trigger: Thrown at crates/astrid-cli/src/commands/update_channel.rs:527 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of astrid-runtime/astrid@affd8760f4 (2026-09-09). Data as JSON: /api/errors/d619620509e534e0. Report an issue: GitHub.

Appendix: source

Thrown at crates/astrid-cli/src/commands/update_channel.rs:527

            version.pre.is_empty() && version.build.is_empty(),
            "stable and dev channels must point to canonical releases"
        ),
    }
    ensure!(
        pointer.release.tag == format!("v{version}"),
        "signed channel release tag does not match its version"
    );
    ensure!(
        is_commit(&pointer.release.source_commit),
        "signed channel source commit is invalid"
    );
    if let Some(commit) = nightly_commit {
        ensure!(
            commit == pointer.release.source_commit,
            "nightly channel version does not embed its source commit"
        );
    }
    ensure!(
        pointer.release.metadata_asset == format!("astrid-{version}-release.toml"),
        "signed channel release metadata asset is invalid"
    );
    ensure!(
        is_lower_hex_64(&pointer.release.metadata_blake3),
        "signed channel release metadata BLAKE3 is invalid"
    );
    ensure!(
        pointer.release.release_workflow_identity
            == format!(
                "https://github.com/{REPOSITORY}/.github/workflows/release.yml@refs/tags/v{version}"
            ),
        "signed channel release workflow identity is invalid"
    );
    validate_targets(&pointer.targets, &pointer.release.version)?;
    Ok(())
}

View on GitHub (pinned to affd8760f4)