Dɔnniya basigilen Kapu jukɔrɔ

Ka jɔli sɛgɛsɛgɛ

Open source bɛ dɛmɛ dɔrɔn ni i bɛ kode min kɛ, o ye kode ye min tun bɛ yen bɔra kɛnɛ kan. Nymchat jɔlen bɛ deterministically walasa i yɛrɛ ka se k’o lajɛ, ka bɔ kɔnɔna na app walima ka bɔ terminal dɔ la.

Nin ɲɛ in bamanankanna ni masin ye walasa ka nɔgɔya. Angilɛkan original ye version ye min bɛ tali kɛ.

Sow minnu bɛ se ka lasegin

Application in jɔli bɛ a build-manifest.json min kɔnɔ, source commit bɛ sɔrɔ, a SHA-256 hash min bɛ HTML, JavaScript ani CSS nafolo baaralen bɛɛ la, ani kelen bundleHash o nafolo sigilen bɛɛ kan.

Bɔli bɛ bɔ sɔrɔyɔrɔ kɔnɔkow dɔrɔn de la — hali jɔli waati sɛbɛnnen ye commit ka waati taamasiyɛn sanni ka kɛ waati min na jɔli bolila — o la mɔgɔ o mɔgɔ bɛ o kelen in jɔ kokura commit bɛ byte-identical files sɔrɔ ani o kelenw bundleHash.

O kɔfɛ, GitHub Action dɔ bɛ commit kelen-kelen bɛɛ jɔ kokura a yɛrɛma ani ka bolonɔ bila build-provenance la attestations for the hash and the manifest, o la, sɛbɛn bolonɔbilalen dɔ bɛ yen min bɛ a siri bundleHash ka commit dɔ kɛ marayɔrɔ la, min bɛ bɔ fɛn wɛrɛ fɛ min tɛ baara bilali sen kan.

About dialogue bɛ min sɛgɛsɛgɛ

Kan kuncɛyɔrɔ la, sɛgɛsɛgɛli bɛ boli ɲɛnamaya la, i ka navigatɔrɔ kɔnɔ.

Nymchat About dialogue, min bɛ version jira, build integrity ani warrant canary status. — The About dialogue: version, build integrity, warrant canary ani layini tilennen ka taa a dilabaga ma.

A bɛ segin ka nafolo kelen-kelen bɛɛ Lasegin ɲɛ min bɛ baara Kɛ tiɲɛ na, k’a Hash ni Web Crypto API ye, ani bɛ tali kɛ fɛn jiralenw na. O kɔfɛ — wa nin ye yɔrɔ ye min nafa ka bon — a a bɛ jatebɔ kɛ kokura bundleHash ka bɔ hakɛw la a jatebɔ dɔrɔn de kɛra, a tɛ bɔ fɛn o fɛn bɛ manifeste fɛ, ka o lajɛ fɛnmarayɔrɔ ka seereyaw bolonɔbilalenw kɔnɔ GitHub API sababu fɛ.

O de bɛ deployiment dɔ bali ka a yɛrɛ garanti: ka baara kɛ ni dosiye sɛmɛntiyalenw ye ɲɔgɔn fɛ ni manifeste matching dɔ bɛ dɛsɛ hali bi, bawo hash jatebɔlen kura tɛ ni seereya ye.

Sigisariyaw	Fɛɛrɛw
&waritasɛbɛn; Application officielle verifiée (n/n) Bamako, Mali.	Nafolo bɛɛ bɛ bɛn, bundle hash jatebɔlen kura bɛ seereya marayɔrɔ fɛ, ani ɲɛ in bɛ baara kɛ ka bɔ domani ofisiyali la.
⚠ Verified build · a tɛ app ofisiyali ye	Kode ye tiɲɛ ye wa a seereyalen don, nka nin ye filɛlikɛlan ye domani wɛrɛ kan. Miirili tɛ se ka o lasɔmini in bɔ ni a ma se ka sɛgɛsɛgɛli kɛ.
✗ Bɛnbaliya	Nafolo tɛ hash ka manifeste bɛ min fɔ.
✗ So jɔli min tɛ ofisi ye	Bundle hash min jatebɔra kokura, o tɛ seereya si sɔrɔ ka bɔ marayɔrɔ la — a yɛrɛ ka manifeste.
⚠ Bɔyɔrɔ min tɛ Se ka Sɔrɔ	GitHub API ma Se ka Sɔrɔ, o la, seereya ma Se ka Lajɛ cogo si la.

K’a sɛgɛsɛgɛ i yɛrɛ ye

Segin ka commit the About dialogue tɔgɔw jɔ ani ka ɲɔgɔn sanga:

git clone https://github.com/Spl0itable/NYM
cd NYM
git checkout <commit shown in the About dialog>
npm ci
npm run build   # prints "Build hash: <bundleHash>"

Hash sɛbɛnnen ka kan ka Bɛn ni min bɛ About dialogue kɔnɔ ani min bɛ o commit ta kɔnɔ build-provenance bolicogo kuncɛlen. Aw bɛ se fana ka bolonɔbila lajɛ k’a ɲɛsin GitHub CLI ma:

gh attestation verify dist/build-manifest.json --repo Spl0itable/NYM

Android ni iOS porogaramuw

Sɛgɛsɛgɛli min bɛ sanfɛ, o ye ɛntɛrinɛti-application (web-app) sɛgɛsɛgɛli ye, wa a kun ka kan k’a fɔ k’a jɛya: app native tɛ se ka o ɲɔgɔn kɛ a yɛrɛ la. Fɛn min bɛ baara kɛ i ka telefɔni na, o ye masin kode compilé ye, a tɛ... source in the repository, ani foyi tɛ app bɛ se ka jatebɔ kɛ minɛn kan min bɛ kelen ni wɛrɛw.

Android bɛ se ka fɛn ɲuman nata kɛ. A sigilen don .apk ye dosiye ye min bɛ se ka kalan appli (application) fɛ ani hash, ani bɔko bɔlen bɛɛ hash ye foroba ye kaban: bɔli ka taa Zapstore bolonɔ bila Nostr ko dɔ la min bɛ APK ka SHA-256 ta ani a bolonɔbilasɛbɛn ka SHA-256. O la, a Android ye Kan dialogue hashes APK a bɛ boli min na, a bɛ minnu bolonɔ bilalen don, a bɛ olu lase ko kɛlenw, a bɛ minnu bolonɔ bilalen don dɔrɔn dabɔbaa ka kilisi fɛ, a bɛ olu dɔrɔn mara, ka ɲɔgɔn sanga. A bɛ o fila jira hashes fana, walasa i ka se ka segin check off minɛn kan: telesarse APK bɔlen, boli sha256sum o kan, ka o ko kelen in lajɛ i yɛrɛ ye.

Application min sigilen don ka bɔ Google Play la, o tɛ se ka lajɛ nin cogo in na, n tɛ kɛ kɛlɛ ye ye. Google bɛ sɔrɔ bɛɛ siri kɛ a ka siri kɛ ye, a bɛ APK dɔdɔ dɔdɔ bɛɛ kɛ dɔn dɔn ye, ninnu bɛ tɛ i ka telefoni la kɛlɛ ye dɔn-dɔn-dɔn kɛlɛ ye, a ka hash tɛ dɔ ye kɛ. App bɛ a dɔn ko Play Store la ka deesi, a bɛ a fɔ, a tɛ kɛ kɛlɛ fɔ ye. I ka i ye i dɔn, APK de sɔrɔ kɛ a kɛ ninnu ye.

iOS tɛ se ka lajɛ hali dɔɔnin. Apple bɛ telesarse kelen-kelen bɛɛ siri ani k’a bolonɔ bila a la kokura kelen-kelen, o la hash min jatebɔlen don i ka iPhone kan, o ye fɛn ye min ɲɔgɔn tɛ i ka iPhone ta la, wa a tɛ bɛn foyi ma bɛ bɔ yɔrɔ o yɔrɔ. About dialogue bɛ o fɔ k’a jɛya sanni a ka hakilisigi dɔ jira status min kɔrɔ tɛ foyi ye. N’i b’a fɛ ka Nymchat sɔrɔ i bɛ se ka min sɛgɛsɛgɛ Apple ka minɛnw kan, i ka baara kɛ ni ɛntɛrinɛti ye app, min bɛ a ka dosiye kelen-kelen bɛɛ lajɛ a bɛ baara kɛ ni min ye.

Ninnu si tɛ min jira

Sɛgɛsɛgɛli min bɛ kɛ porogaramu dɔ kan a yɛrɛ kan, o tɛ se k’a jira ko appli ye tiɲɛtigi ye — mɔgɔ o mɔgɔ y’a sɛmɛntiya tun bɛ se ka sɛkɛsɛkɛli fana bɔ yen. A bɛ min Jira o ye ko gansan ye: ko kopi i installé ye kopi ye min bɔra. O nafa ka bon ka kɛ bawo a nafa ka bon compares ye foroba ye, o la mɔgɔ wɛrɛ min tɛ i ye, o bɛ se k’u lajɛ, ka bɛnbaliya don.

Waranti kanari

Waranti kanari ye kuma ye, min bɛ bɔ waati bolodalen dɔ kan, min bɛ a dilabaga fɛ ayi ye gundola gɔfɛrɛnaman ka yamaruya sɔrɔ u dagalen don ka min fɔ — a Jamana lakanani sɛbɛn, FISA ka yamaruya. Developpeur bɛ se ka wajibiya ka to a makun na o yamaruya sugu, nka a tɛ se ka wajibiya ka nkalon tigɛ, o la kanari ka taa stale walima ka tunun o ye a yɛrɛ ye taamasiyɛn ye.

A bɛ balo la canary.json bɛ sɔrɔ marayɔrɔ ju la ani a bɛ na ni a ye k’a ɲɛsin a yɛrɛ ma ka bɔ GitHub fɛ, o la a tariku bɛ se ka lajɛ a yɛrɛma, yɔrɔ min bilala sen kan, o bɛ fɛn o fɛn fɔ. About dialogue bɛ a kulɛri-kodɔn:

Ɲɛ	Fɛɛrɛw
Binkɛnɛ — bɛɛ jɛlen don	Siginiden, sisan, ani bolonɔbila bɛ bɛn developpeur ka key ma. Gundola yamaruya si ma sɔrɔ.
Nɛrɛmuguman — a tɛmɛna, walima a bɛɛ ma jɛya	A ma lafiya a don fɔlen fɛ, walima a `allClear` darapo ye nkalon ye. Cikan min bɛ kɛ ni makun ye, o tɛ se ka ban.
Bilema — bolonɔbila tiɲɛnen, walima a taara	Siginiden tɛ bɛn developpeur ka key ma, walima file in bɔra pewu. Aw bɛ o jate i n’a fɔ lasɔmini jugu.

A ye freshness anchor ye

Kanari bolonɔbilalen bɛ Bitcoin bloki sanfɛla ni hash labanw Dòn a bolonɔbila waati la. O hash tun tɛ Se ka Dɔn sani bloki ka Kɛ, o b’a Jira ko kanari tùn bɛ yen bolonɔ bilala a la kɔfɛ waati kɛrɛnkɛrɛnnen dɔ sanni ka kɔn ka bolonɔ bila kalo caman na ka kɔn o ɲɛ. About dialogue bɛ anchor ni bloc explorer dɔ cɛsiri walasa i ka se k’a lajɛ.