add canonical sigchain bundle format

This commit is contained in:
Eric Wendland 2026-07-19 03:16:14 +02:00
commit decff4b995
14 changed files with 1515 additions and 42 deletions

View file

@ -62,6 +62,7 @@ settles:
- `geth cas add-private`
- `geth cas get-private`
- `geth keychain verify-sigchain`
- `geth keychain bundle-create|bundle-extract`
Migration expectation: overlay membership records and authorization resources
should remain readable, but packet runtime flags, platform activation details,
@ -72,10 +73,10 @@ properties are explicitly out of scope. Prototype BLAKE3-XOR envelopes from
earlier pre-deployment builds are rejected with a clear error and should be
recreated from plaintext.
The SSHSIGCHAIN verifier is experimental while SSHSIGCHAIN signing, storage,
publication, import, head persistence, and independently generated wire vectors
are completed. The prior test-only static commands were removed and are not a
compatibility path.
The SSHSIGCHAIN verifier and canonical bundle conversion are experimental while
SSHSIGCHAIN signing, append storage, automatic distribution, import, head
persistence, and independently generated wire vectors are completed. The prior
test-only static commands were removed and are not a compatibility path.
## Adding Commands