hermes fea1a0e906 fix(ownership): bound snapshot download by manifest size; clean refused builds ... Addresses review on #31: - the snapshot download limit is the manifest's size_bytes (+1, since ureq fails once a body reaches its limit), capped at 1 GiB; a body larger than advertised fails during download. New CLI test; the >10 MiB test also caught the off-by-one. - a refused (oversized) standalone build removes its sqlite and manifest from --output-dir. - docs: downloads are buffered, not streamed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017a5Cv5Z1NzdYKgKnTiAF4E		2026-09-25 22:31:40 +00:00
..
ARCHITECTURE.md	feat(ownership): discover above-1% XLSX on the IDX data page	2026-09-24 21:09:05 +00:00
CONVENTIONS.md	feat(ownership): complete ownership intelligence module	2026-03-07 21:10:58 +00:00
INSTALL.md	feat: add curl | sh install script	2026-09-24 19:29:52 +00:00
NPM_DISTRIBUTION.md	fix: harden npm distribution release and installer	2026-09-24 18:57:53 +00:00
OWNERSHIP_PUBLISH.md	fix(ownership): verify snapshot assets before publishing manifests	2026-09-25 10:37:32 +00:00
OWNERSHIP_SELF_HOSTED.md	fix(ownership): bound snapshot download by manifest size; clean refused builds	2026-09-25 22:31:40 +00:00
OWNERSHIP_SYNC.md	fix(ownership): verify snapshot assets before publishing manifests	2026-09-25 10:37:32 +00:00
SMOKE.md	feat: support explicit MSN chart history	2026-04-15 13:48:27 +07:00