lib · ocaml-warrant · Tangled

Short-lived signing certificates for Git, issued down a chain of authority

ocaml-warrant lib

19 files

Thomas Gazagnaire · warrant: the agent establishes its socket's and log's custody before any output · 1w ago

warrant: the delegation narrows the Git operation, repository and ref

warrant: the delegation narrows the Git operation, repository and ref

warrant: the issuance log is a transparency log with receipts

warrant: the agent establishes its socket's and log's custody before any output

warrant: the agent establishes its socket's and log's custody before any output

warrant: issue and key name the agent, and issue names a pinned signing key

warrant: issue and key name the agent, and issue names a pinned signing key

warrant: rotation is promote, then retire

warrant: rotation is promote, then retire

warrant: a root may be P-256, as a Mac's Secure Enclave holds one

warrant: a root may be P-256, as a Mac's Secure Enclave holds one

warrant: issue, verify and revoke short-lived signing certificates for Git

warrant: issue, verify and revoke short-lived signing certificates for Git

warrant: a fleet agent at a fixed socket, kept by launchd

warrant: a fleet agent at a fixed socket, kept by launchd

warrant: honor signed revocations before the derived KRL

warrant: honor signed revocations before the derived KRL

warrant: rotation is promote, then retire

warrant: rotation is promote, then retire