Plan: slice 024 signer seam, algorithm agility, chain scopes by kind - #10
Merged
Merged
Conversation
…opes by kind Six amendments on top of the existing design, accepted 2026-09-20. The red they answer: on an OTP built with FIPS mode enabled, crypto:sign(eddsa, ...) returns notsup from OTP's own pkey.c, and the validated OpenSSL FIPS provider lists Ed25519 as not approved; 024 as written pins Ed25519 and denies on signing failure, so a FIPS build denies every effect. A Trinity.Receipts.Signer behaviour (algorithm/0, sign/2, verify/3), one custody module implementing it and the MCP core's sign/2; selection once at boot (P-384 with SHA-384 when crypto:info_fips() is enabled, Ed25519 otherwise) recorded in the boot receipt; key_id inside the signed bytes with the registry row binding the algorithm and no alg field in the envelope; a scheme string carrying the family; chain scopes by kind (effect, decision, boot and cap signed per receipt so AC5 stands; query receipts checkpointed every N rows, T seconds and on shutdown, with N and T from measurement); ML-DSA-87 compile-conditional on OpenSSL 3.5 or later at link time, never the default. Two criteria added (AC8 algorithm agility with two mutants, AC9 query checkpoints with the AC5 mutant). AC8's FIPS half runs on the FIPS build leg (slice 003, to be added) and this machine cannot run it: crypto:info_fips() returns not_supported here. docs/05 and docs/07 carry the same statements. plan_check: PASS. Signed-off-by: Ayla Croft <aylacroft@proton.me>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Change 2 of the 2026-09-20 plan. The commit message carries the six amendments and the red they answer.