provide CA bundle to Supermemory runtime

2026-09-07 21:18:32 -07:00
parent 5b6554aa1a
commit 700f3f2cbd
2 changed files with 14 additions and 1 deletions
@@ -34,7 +34,9 @@ directory and re-ingest when comparing a different embedding plan.

 The `supermemory-fetch` init service downloads the exact release asset once,
 checks its SHA-256, and stores it in the POC appdata directory. Subsequent
-starts only verify the existing binary. No custom image build is required.
+starts only verify the existing binary. It also copies the CA bundle from the
+pinned fetch image so the slim runtime can download local embedding model
+artifacts over verified HTTPS. No custom image build is required.

 ## First boot and authentication