Represent SSH distribution sync as a resource log

This commit is contained in:
Eric Wendland 2026-05-22 16:51:30 +02:00
commit 42d7301bdb
6 changed files with 247 additions and 52 deletions

View file

@ -593,7 +593,7 @@ Goal: add authorized stream-oriented management workflows over Iroh.
only after authorization.
- `[x]` Future completion adds a restricted built-in geth admin shell option.
- `[~]` SSH certificate and revocation distribution.
- `[x]` SSH certificate and revocation distribution.
Acceptance criteria:
- `[x]` Cert request and imported certificate records can be pulled from an
imported peer over Iroh.
@ -607,7 +607,10 @@ Goal: add authorized stream-oriented management workflows over Iroh.
offline after sync.
- `[x]` Background live-sync uses the same protected Iroh path and cursor
state as manual sync.
- `[ ]` Replace pull-only metadata sync with a resource log or CRDT model.
- `[x]` Replace pull-only metadata sync with a resource log or CRDT model.
- `[x]` Sync responses carry ordered SSH distribution log entries derived
from signed cert requests, signed certificate imports, and signed
revocation records.
- `[x]` Conflicting records with already-known ids are rejected during import
rather than replacing local metadata.
- `[x]` Unsigned records are rejected during sync import once signed