punktfunk-plugin-index

3 Commits 1 Branch 0 Tags

2 Commits

Author	SHA1	Message	Date
enricobuehlerandClaude Fable 5	575ea1a371	chore(index): repin to the operator-held signing key publish / publish (push) Failing after 18s Details The bootstrap key generated during implementation was lost with its scratch directory. Nothing shipped pinning it, so this is a straight replacement of slot 0 rather than a rotation — the second slot stays reserved for a real one. The private half now lives only in the INDEX_SIGNING_KEY secret, so CI is the only thing that can sign. This push is what makes it do so: the committed signature is still the old key's, and the verify self-check will fail loudly if the secret does not match the public key pinned here. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-20 22:57:38 +02:00
enricobuehlerandClaude Fable 5	ce8b13c52b	chore(index): bootstrap signature for the seed catalog Signed locally with the key whose public half the host pins. ed25519 is deterministic, so the publish workflow re-signing this exact document with the same key produces byte-identical output — this is the bootstrap for a repo whose CI secret is not yet configured, not a parallel signing path. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-20 20:28:08 +02:00

Author

SHA1

Message

Date

enricobuehlerandClaude Fable 5

575ea1a371

chore(index): repin to the operator-held signing key

publish / publish (push) Failing after 18s

Details

The bootstrap key generated during implementation was lost with its scratch
directory. Nothing shipped pinning it, so this is a straight replacement of
slot 0 rather than a rotation — the second slot stays reserved for a real one.

The private half now lives only in the INDEX_SIGNING_KEY secret, so CI is the
only thing that can sign. This push is what makes it do so: the committed
signature is still the old key's, and the verify self-check will fail loudly
if the secret does not match the public key pinned here.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 22:57:38 +02:00

enricobuehlerandClaude Fable 5

ce8b13c52b

chore(index): bootstrap signature for the seed catalog

Signed locally with the key whose public half the host pins. ed25519 is
deterministic, so the publish workflow re-signing this exact document with
the same key produces byte-identical output — this is the bootstrap for a
repo whose CI secret is not yet configured, not a parallel signing path.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 20:28:08 +02:00