Repository navigation

encryption: owner-signed key and prefix delete with a deletion ledger - #438

Merged

samgbafa merged 37 commits into

mainfrom

tc1777/n3b-key-delete

Oct 25, 2026

Merged

encryption: owner-signed key and prefix delete with a deletion ledger#438
samgbafa merged 37 commits into
mainfrom
tc1777/n3b-key-delete

Commits on Oct 23, 2026
- encryption: verify owner-signed key-delete requests and add an append-only deletion ledger
  dryrun
  committed
  bbfa840
- encryption: deletion ledger configuration, replay command and delete credential route tests
  dryrun
  committed
  ecba16b
- encryption: apps/ depth rule, key kind from path and app id host binding
  dryrun
  committed
  e8b85ed
- encryption: seeded deletable keys, state guards, reinstall and uniform public GET under apps/
  dryrun
  committed
  9f7378a
- encryption: bind app ids in SIWE roots to the signing domain; route tests for app keys
  dryrun
  committed
  3802af9
- docs: describe named key kinds, path rule and state guards
  dryrun
  committed
  5fe7c1d
- encryption: host-binding vector test skips names a SIWE domain or app id cannot carry
  dryrun
  committed
  6320b14
- encryption: format delete credential route tests
  dryrun
  committed
  65e103f
- encryption: zeroed-seed row test uses a 32-byte seed
  dryrun
  committed
  c1d99a8
- encryption: test that an app id extending another does not count towards its prefix cap
  dryrun
  committed
  1029492
Commits on Oct 24, 2026
- Merge origin/tc1777/n2b-deletable-keys into tc1777/n3b-key-delete
  dryrun
  committed
  33a437b
- Merge remote-tracking branch 'origin/tc1777/n2b-deletable-keys' into tc1777/n3b-key-delete
  dryrun
  committed
  3956524
- encryption: document key delete and the deletion ledger; bind test app ids to the signing domain
  dryrun
  committed
  aeb54b2
- Merge remote-tracking branch 'origin/main' into tc1777/n3b-key-delete
  dryrun
  committed
  02fa1d7
- encryption: settle deletion ledger operations, require nbf on delete invocations, and fail closed on a moved ledger
  dryrun
  committed
  7a5b1db
- docs: describe delete invocation lifetime and the deletion ledger operations
  dryrun
  committed
  e1f2e71
- encryption: count the delete route among the named-key routes in the mount test
  dryrun
  committed
  13f3148
- encryption: test the commit-failure path of a delete through the commit it uses
  dryrun
  committed
  acd0ad6
- encryption: SIWE app id binding requires an absent or https scheme and no empty port
  dryrun
  committed
  a9a0d2c
- encryption: tests for keys and prefixes under apps/ in key ids, invocation and containment
  dryrun
  committed
  f554bcf
- encryption: tests for app keys through the release guard, network row lock waits and startup refusal
  dryrun
  committed
  e2a9c51
- Merge remote-tracking branch 'origin/tc1777/n2b-deletable-keys' into tc1777/n3b-key-delete
  dryrun
  committed
  05fef54
- Merge remote-tracking branch 'origin/main' into tc1777/n3b-key-delete
  dryrun
  committed
  6544bbb
- encryption: format the delete commit helper
  dryrun
  committed
  2508c94
- build: record the idna dependency of tinycloud-core in the secondary lockfiles
  dryrun
  committed
  4b1cc83
- encryption: compare the SIWE scheme ignoring case; server test for the scheme rule
  dryrun
  committed
  6a94e39
- encryption: select a prefix with a portable substr comparison, settle a failed commit from the rows, and replay the ledger at start
  dryrun
  committed
  4af596b
- encryption: replay the deletion ledger before serving the key routes, and keep them off when it cannot be used
  dryrun
  committed
  dc90af3
- encryption: test when a delete operation counts as committed
  dryrun
  committed
  2d9110e
- Merge remote-tracking branch 'origin/tc1777/n2b-deletable-keys' into tc1777/n3b-key-delete
  dryrun
  committed
  426cc3e
- encryption: give two named-keys start tests a ledger path
  dryrun
  committed
  0a354b8
- encryption: settle a failed delete commit under the network row lock
  dryrun
  committed
  e863ee0
- encryption: cut a failed ledger append back to its prior length, and create the ledger directory in the image
  dryrun
  committed
  3d3838e
- encryption: hold an exclusive lock on the deletion ledger while the node runs
  dryrun
  committed
  4adf38f
- encryption: document the deletion ledger lock
  dryrun
  committed
  4644aaf
Commits on Oct 25, 2026
- Merge remote-tracking branch 'origin/main' into tc1777/n3b-key-delete
  dryrun
  committed
  26c19c7
- Merge remote-tracking branch 'origin/main' into mergeup/tc1777-n3b-pr438
  dryrun
  committed
  ee907b4

Commits

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 25, 2026