Massu Adapter Registry

This is the public signed-allowlist endpoint for @massu/core third-party adapters.

The canonical signed manifest is available at /adapters/manifest.json.

Consumer code does not interact with this page directly — it fetches the manifest, verifies the Ed25519 signature against a public key bundled in @massu/core, and uses it to validate adapter package SHA-256 hashes before loading.

For the full adapter authoring guide, signing protocol, and key-rotation procedure, see SECURITY.md.