__ __ __ __ _
/ /__ _ _____ / /____/ /_ ____ _/ /_ (_)___
/ / _ \ | / / _ \/ / ___/ __ \/ __ `/ __/ / / __ \
/ / __/ |/ / __/ / /__/ / / / /_/ / /__ / / /_/ /
/_/\___/|___/\___/_/\___/_/ /_/\__,_/\__(_)_/\____/
Signed release manifests · served immutably · verified by the lc CLI.
Pull an update on a self-hosted box
Run from a host with the lc binary installed (see get.levelchat.io):
lc upgrade
The CLI fetches the channel pointer, validates the Ed25519 signature against the public key embedded in the binary, and rolls the local stack forward only on a verified match.
Fetch a manifest manually
curl -fsSL https://releases.levelchat.io/canary/<sha>/manifest.json
curl -fsSL https://releases.levelchat.io/stable/latest.json
Release channels
stable
Customer default — promoted from canary after a soak window.
canary
Every successful build lands here. The vendor stack tracks this channel.
beta
Pre-release access for early customers — opt-in via
lc channel beta.Wire format
- signatureEd25519 over canonical JSON, embedded as
<path>.sig. - addressingContent-addressed by the full 40-char git SHA — manifests are immutable.
- caching
manifest.json: 1-year immutable.latest.json: 60s. - directory indexDisabled — fetch by exact path only.
- authNone. Trust is gated by the signature, not by the transport.