fix(security): pin vendored model-viewer bundle to verified upstream - #2709

Open

superm1 wants to merge 3 commits into

mainfrom

fix/model-viewer-integrity

Commits on Aug 17, 2026

fix(security): pin vendored model-viewer bundle to verified upstream
superm1
committed
4750d5c
fix(security): address PR review feedback - fail-closed update script and drift guard comment

Hermes Agent
authored and
superm1
committed
1f9784f
fix(security): use mktemp -d for extraction dir and note existing hash in README
superm1
committed
34e848a