eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

simplify sigchain http distribution
Some checks failed
CI / fmt, clippy, docs (push) Failing after 5s
Details
CI / test (ubuntu-latest) (push) Failing after 5s
Details
CI / iroh integration smoke tests (push) Failing after 4s
Details
CodeQL / Analyze Rust (push) Failing after 5s
Details
Security / RustSec cargo-audit (push) Failing after 4s
Details
CI / test (macos-latest) (push) Has been cancelled
Details
CI / test (windows-latest) (push) Has been cancelled
Details

Browse source
This commit is contained in:
Eric Wendland 2026-07-19 03:43:06 +02:00
commit 538b52bdb6
12 changed files with 66 additions and 72 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/architecture.md
View file

@ -496,10 +496,11 @@ SSHSIGCHAIN's canonical `.sscb` bundle is the portable on-disk and full-snapshot
distribution boundary. It deterministically stores signed record objects,
separate disclosures, head claims, and anchor receipts without embedding the
root key. JSONL remains inspection/interchange only. Bundle sources implement a
backend-neutral untrusted fetch interface; the static HTTP profile publishes
the same bytes below `/.well-known/sshsigchain/v1/<chain-id>/chain.sscb`.
Fetching never grants trust or selects a head. Geth may use Iroh rather than
HTTP operationally without changing the format or verification path.
backend-neutral untrusted fetch interface; the static HTTP profile fetches the
same single file from an exact operator-configured URL. It defines no
well-known path or discovery rule. Fetching never grants trust or selects a
head. Geth may use Iroh rather than HTTP operationally without changing the
format or verification path.
New devices can use the node enrollment flow instead of hand-editing keychain
state. `geth node enroll join` explicitly imports an owner admin public key as