Add peer card discovery scaffold
This commit is contained in:
parent
cf5a405276
commit
81149605bc
11 changed files with 271 additions and 15 deletions
|
|
@ -38,6 +38,12 @@ connectivity and mDNS/LAN discovery for local networks. These are connectivity
|
|||
and candidate-discovery mechanisms only. They do not grant trust, mutate
|
||||
authorization state, or make EndpointID knowledge sufficient for access.
|
||||
|
||||
Peer cards are the discovery payload. A peer card carries node ID, agent ID,
|
||||
endpoint candidates, timestamp, and signature metadata. The current scaffold
|
||||
stores peer cards as untrusted metadata in `peer_cards`; signature verification
|
||||
and trust reduction are future work. `auth explain` reports when a subject is
|
||||
only a discovered peer candidate and denies access.
|
||||
|
||||
The daemon starts this endpoint during `geth daemon run` and keeps it alive for
|
||||
the daemon lifetime. When endpoint startup succeeds, the Iroh EndpointID is
|
||||
recorded as a transport binding for the stable geth node identity. If local UDP
|
||||
|
|
|
|||
Loading…
Reference in a new issue