eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Report keychain signature status

Browse source
This commit is contained in:
Eric Wendland 2026-05-19 16:05:57 +02:00
commit 788522404d
7 changed files with 20 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/architecture.md
View file

@ -238,8 +238,9 @@ daemon persists local keychain init/admin-key operations and `keychain status`
reports the reduced local view. `keychain init --signing-key <path>` writes the
canonical keychain signing payloads, runs `ssh-keygen -Y sign` with the explicit
`geth.keychain.v1@geth.local` namespace, and stores the resulting OpenSSH
signatures in local SQLite. Verification and rejection of unsigned replicated
keychain operations are still future work.
signatures in local SQLite. `keychain status` reports the stored signature
count. Verification and rejection of unsigned replicated keychain operations are
still future work.
The authorization plane is `geth-auth`: resource-local signed operation logs,
grants, revocations, groups, and `auth explain`. Auth operations reduce into a