efegokdemir opened a new pull request, #2162:
URL: https://github.com/apache/maven-resolver/pull/2162

   ## Summary
   
   Clarify the distinction between transport-provided checksums, which verify 
integrity, and trusted checksums, which can detect changes to a local 
repository when independently protected.
   
   ## Changes
   
   - Refine the checksum overview to scope its integrity and trust statements 
to transport-provided checksums.
   - Explain the independent provenance and protection assumptions for trusted 
checksums.
   
   ## Testing
   
   - `git diff --check` — passed
   - Compared the branch against `master` — only the two intended documentation 
files changed.
   
   No overlapping open pull request was found for #2042 or the checksum trust 
documentation. AI assistance was used to prepare this patch; the changes were 
reviewed for accuracy and scope.
   
   Fixes #2042


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to