clawdie/colibri
Watch
1
0
Fork
You've already forked colibri
 0
Code Issues 1 Pull requests Projects Releases 1 Packages Activity Actions

docs(credentials): pin the Jev no-authority rule to §7.1 and record node≠process #185

Merged
clawdie merged 1 commit from docs/credentials-attestation-pin-and-node-process into main 2026-10-17 07:36:09 +02:00
Conversation 0 Commits 1 Files changed 1 +11 -1
clawdie commented 2026-10-17 07:36:04 +02:00
Owner
Copy link
  • Cite the rule at JEV-DECISION-GATE.md §7.1 (was §7) and pin blob
    593b3ab13d at commit 52087cb.
  • Add "a verified node is not a verified process": a local socket peer check
    (SO_PEERCRED/getpeereid) proves the local OS process UID; mesh transport
    (tsnet + WhoIs) proves the remote node and account but not which process or
    UID originated the connection; payload attestation (deferred, Issue #125)
    is required for non-repudiation.

Gate: ./scripts/ci-checks.sh passes (wiki-lint 876/0, format, dates, okf, evidence).

- Cite the rule at JEV-DECISION-GATE.md §7.1 (was §7) and pin blob 593b3ab13d6c at commit 52087cb. - Add "a verified node is not a verified process": a local socket peer check (SO_PEERCRED/getpeereid) proves the local OS process UID; mesh transport (tsnet + WhoIs) proves the remote node and account but not which process or UID originated the connection; payload attestation (deferred, Issue #125) is required for non-repudiation. Gate: ./scripts/ci-checks.sh passes (wiki-lint 876/0, format, dates, okf, evidence).
docs(credentials): pin the Jev no-authority rule to §7.1 and record node≠process
All checks were successful
CI / markdown (pull_request) Successful in 10s
Details
CI / packaging (pull_request) Successful in 2s
Details
CI / python-tests (pull_request) Successful in 16s
Details
CI / go (pull_request) Successful in 14s
Details
leak-guard / guard (pull_request) Successful in 3s
Details
da6c8cb7c0 
- Cite the rule at JEV-DECISION-GATE.md §7.1 (was §7) and pin blob
  593b3ab13d at commit 52087cb.
- Add "a verified node is not a verified process": a local socket peer check
  (SO_PEERCRED/getpeereid) proves the local OS process UID; mesh transport
  (tsnet + WhoIs) proves the remote node and account but not which process or
  UID originated the connection; payload attestation (deferred, Issue #125)
  is required for non-repudiation.

Gate: ./scripts/ci-checks.sh passes (wiki-lint 876/0, format, dates, okf, evidence).
clawdie deleted branch docs/credentials-attestation-pin-and-node-process 2026-10-17 07:36:09 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawdie/colibri!185
No description provided.