Prove the repository URLs with a file in the repository #86

Merged

extant2000git merged 1 commits from fix/funding-wellknown-in-repo into main 2026-10-15 22:43:28 +00:00

Conversation 0 Commits 1 Files Changed 2

+31 -8

extant2000git commented 2026-10-15 22:41:38 +00:00

Owner

Copy Link

Copy Source

The FLOSS/fund directory listed both repository links as unverified: "The funding manifest has not provided proof via wellKnown that this link is associated with it."

Sharing codeberg.org with the manifest proves nothing, because anyone can serve a manifest from codeberg.org. The spec example is a file committed inside the repository it vouches for:

https://github.com/example/zombo-app/blob/main/.well-known/funding-manifest-urls

So .well-known/funding-manifest-urls holds the manifest URL, and each repositoryUrl.wellKnown points at that file in its own repository. The hostname still matches the url beside it, which is what the validator rejected on the first attempt.

flamenet-relay carries the same file for the flamenet-messenger project, in extant2000/flamenet-relay.

🤖 Generated with Claude Code

The FLOSS/fund directory listed both repository links as unverified: "The funding manifest has not provided proof via wellKnown that this link is associated with it." Sharing codeberg.org with the manifest proves nothing, because anyone can serve a manifest from codeberg.org. The spec example is a file committed **inside the repository it vouches for**: https://github.com/example/zombo-app/blob/main/.well-known/funding-manifest-urls So `.well-known/funding-manifest-urls` holds the manifest URL, and each `repositoryUrl.wellKnown` points at that file in its own repository. The hostname still matches the `url` beside it, which is what the validator rejected on the first attempt. flamenet-relay carries the same file for the flamenet-messenger project, in extant2000/flamenet-relay. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

extant2000git added 1 commit 2026-10-15 22:41:39 +00:00

Prove the repository URLs with a file in the repository ... 9d93cc3e04

The directory listed both repository links as "Unverified URL: The funding
manifest has not provided proof via wellKnown that this link is associated with
it."

Sharing codeberg.org with the manifest proves nothing, because anyone can serve
a manifest from codeberg.org. The spec's own example is a file committed inside
the repository it vouches for:

  https://github.com/example/zombo-app/blob/main/.well-known/funding-manifest-urls

So .well-known/funding-manifest-urls holds the manifest URL, and each
repositoryUrl.wellKnown points at that file's raw path in its own repository.
The hostname still matches the url beside it, which is what the validator
checked the first time round.

flamenet-relay needs the same file for the flamenet-messenger project, in its
own repository.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

extant2000git merged commit d254ac2566 into main 2026-10-15 22:43:28 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

accuracy

A public page or doc claims something the code does not do

blocked:apple

Waiting on App Store review

docs

ops

Deploy, CI, infrastructure

parity

One platform has it and the other does not

privacy

Changes what is stored, or what we say is stored

protocol

unwired

Built in the engine, not reachable from the UI

verification

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

extant2000git

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: extant2000/flamenet-e2e#86