cayce-ops

Files

T

cayce 40453aadb4 audit-1 (critical 1): mandatory operator signatures bound to content+deployment

- signing module: canonical content hashes + approval_message
  sha256(cayce-ops:<type>:<deployment_id>:<id>:<content_hash>)
- approve/approve-draft/publisher-approve REQUIRE signature; without
  CAYCE_OPS_OPERATOR_PUBKEY+DEPLOYMENT_ID the daemons refuse to
  execute/send/publish (no degraded mode)
- run-time re-verification at execute/send/publish: unsigned rows (raw SQL
  approval) or edited content revert to pre-approval state, audited as error
- FULL signatures stored on rows (operator_signature, migration 0003) and
  in audit detail — never truncated
- signature failures audited from CLI wrappers too (1f)
- AUTONOMOUS_MODE approval path removed (D13): no non-human approvals

tests: SQL-approved row refused at execute/send/publish; to_addr change
blocks send; foreign deployment/content signatures refused; full-signature
persistence. 65 tests green.

2026-10-20 02:20:09 +00:00

components

audit-1 (critical 1): mandatory operator signatures bound to content+deployment

2026-10-20 02:20:09 +00:00

__init__.py

skeleton: package, schema, config, CLI, alembic, CI, deploy, docs

2026-10-19 21:35:50 +00:00

cli.py

audit-1 (critical 1): mandatory operator signatures bound to content+deployment

2026-10-20 02:20:09 +00:00

config.py

audit-1 (critical 1): mandatory operator signatures bound to content+deployment