This repository is public by design. It serves exactly one thing: the signed release manifest every Claudia installation polls, at https://updates.claudia.my/manifest.json.
The manifest is anonymous and byte-identical for every installation — no query strings, no tenant identity on the wire, nothing here identifies who pulls it. Signatures are Ed25519, verified by each installation against keys pinned inside the software; hosting compromise cannot forge a release.
There is no manifest yet. The first one arrives with release #1.
© Blipa Technology · claudia.my