Publish the hash list signed - #2

Open

MorningLightMountain713 wants to merge 17 commits into

feature/sign-hashlist

Commits on Aug 14, 2026

feat: publish the hash list signed, alongside the unsigned array

MorningLightMountain713
and
claude
committed
f3d5265
test: shape-check the published list, and the signed copy against it

MorningLightMountain713
and
claude
committed
fad433e
fix: scope the publish commit to the document it signed

MorningLightMountain713
and
claude
committed
ed94395
fix: do not cache the not-yet-published response

MorningLightMountain713
and
claude
committed
8145203
style: satisfy the repository's eslint config

MorningLightMountain713
and
claude
committed
be48408

Commits on Aug 17, 2026

feat: the sequence reads its high-water from the provenance record

MorningLightMountain713
and
claude
committed
9033d0f
fix: validate refuses a sequence that is not the recorded high-water

MorningLightMountain713
and
claude
committed
0025137
fix(ci): retry the publish when it races a push from flux CI

MorningLightMountain713
and
claude
committed
ea0fdd2

Commits on Aug 24, 2026

feat: the signer derives what it signs, as the single writer

MorningLightMountain713
and
claude
committed
20a6cfb
polish from independent review: keep both labels on a dual-ref commit, honest comments

MorningLightMountain713
and
claude
committed
e677ce8
fix: anchor the outputs guard on the merge commit's first parent

MorningLightMountain713
and
claude
committed
2882267
chore: pin the regenerated key 1

MorningLightMountain713
and
claude
committed
9fda0cd

Commits on Aug 25, 2026

fix: refuse the empty-tree hash instead of signing it

MorningLightMountain713
and
claude
committed
d823841
docs: state what a dispatch is actually trusted to name

MorningLightMountain713
and
claude
committed
636fca1
chore(ci): move the actions to the current majors

MorningLightMountain713
and
claude
committed
f2df129
test: land the reconciler harness and run it in CI

MorningLightMountain713
and
claude
committed
1892bdf
docs: say what the signature attests, and log the host-key rotation touchpoint

MorningLightMountain713
and
claude
committed
13732fe