Connect documents what can be verified: direct connectivity, signed update metadata, file hashes and a private vulnerability-reporting channel.
The coordinator helps participants meet. When the network allows it, the session is established directly between devices. Connect does not currently provide a relay route, so restrictive networks can prevent a session from connecting.
How it works →The update manifest is signed with Ed25519 and published installers receive a SHA-256 hash, allowing the client to verify update metadata and the downloaded artifact.
Update verification →If you find a security issue, report it privately and allow time for verification and remediation.
Report a vulnerability →