punktfunk-plugin-index

5 Commits 1 Branch 0 Tags

3 Commits

Author	SHA1	Message	Date
enricobuehlerandClaude Fable 5	05e772fedd	chore(index): repin to the signing key held in this repo's secret publish / publish (push) Successful in 26s Details The previous key was pasted into unom/punktfunk's secret store rather than this one. Gitea secrets don't cross repos and can't be read back, so that key was unusable here and is abandoned; INDEX_SIGNING_KEY on THIS repo now holds the private half of the key pinned below. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-20 23:05:39 +02:00
enricobuehlerandClaude Fable 5	575ea1a371	chore(index): repin to the operator-held signing key publish / publish (push) Failing after 18s Details The bootstrap key generated during implementation was lost with its scratch directory. Nothing shipped pinning it, so this is a straight replacement of slot 0 rather than a rotation — the second slot stays reserved for a real one. The private half now lives only in the INDEX_SIGNING_KEY secret, so CI is the only thing that can sign. This push is what makes it do so: the committed signature is still the old key's, and the verify self-check will fail loudly if the secret does not match the public key pinned here. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-20 22:57:38 +02:00
enricobuehlerandClaude Fable 5	ce8b13c52b	chore(index): bootstrap signature for the seed catalog Signed locally with the key whose public half the host pins. ed25519 is deterministic, so the publish workflow re-signing this exact document with the same key produces byte-identical output — this is the bootstrap for a repo whose CI secret is not yet configured, not a parallel signing path. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-20 20:28:08 +02:00

Author

SHA1

Message

Date

enricobuehlerandClaude Fable 5

05e772fedd

chore(index): repin to the signing key held in this repo's secret

publish / publish (push) Successful in 26s

Details

The previous key was pasted into unom/punktfunk's secret store rather than
this one. Gitea secrets don't cross repos and can't be read back, so that
key was unusable here and is abandoned; INDEX_SIGNING_KEY on THIS repo now
holds the private half of the key pinned below.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 23:05:39 +02:00

enricobuehlerandClaude Fable 5

575ea1a371

chore(index): repin to the operator-held signing key

publish / publish (push) Failing after 18s

Details

The bootstrap key generated during implementation was lost with its scratch
directory. Nothing shipped pinning it, so this is a straight replacement of
slot 0 rather than a rotation — the second slot stays reserved for a real one.

The private half now lives only in the INDEX_SIGNING_KEY secret, so CI is the
only thing that can sign. This push is what makes it do so: the committed
signature is still the old key's, and the verify self-check will fail loudly
if the secret does not match the public key pinned here.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 22:57:38 +02:00

enricobuehlerandClaude Fable 5

ce8b13c52b

chore(index): bootstrap signature for the seed catalog

Signed locally with the key whose public half the host pins. ed25519 is
deterministic, so the publish workflow re-signing this exact document with
the same key produces byte-identical output — this is the bootstrap for a
repo whose CI secret is not yet configured, not a parallel signing path.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 20:28:08 +02:00