Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
32 commits
Select commit Hold shift + click to select a range
0f040ba
feat(cli): add --print-uri to auths pair — emit the token URI for out…
bordumb Jun 11, 2026
051cd23
feat: ri-burndown cycles 1-7 — close AITFC-1, DOTAK-1, LTL-6b, LTL-R1…
bordumb Jun 12, 2026
8dabb79
fix: complete oidc_binding field in auths-python and auths-node bindings
bordumb Jun 12, 2026
e1162f1
fix(DOTAK-2): multi-capability credentials verify via single-source c…
bordumb Jun 12, 2026
922fee7
feat(signing): capture repository/sha/workflow_ref in signed CI prove…
bordumb Jun 12, 2026
3791a75
feat(org): public authenticated_org_state() for offline key-state res…
bordumb Jun 12, 2026
48b9765
feat(compliance): SOC 2 (TSC) and ISO 27001 Annex-A framework predicates
bordumb Jun 12, 2026
eafdb9d
feat(AITFC-4): offline org-bundle + evidence-pack verification in aut…
bordumb Jun 12, 2026
a65c40d
feat(transparency): local log writer — append/prove with leaf-bound r…
bordumb Jun 12, 2026
7832a2e
feat(AITFC-5b): pinned log-key checkpoint attestation for offline evi…
bordumb Jun 12, 2026
df69939
feat(LTL-5): mobile FFI read-only KEL verify surface over one shared …
bordumb Jun 12, 2026
8b68749
feat(LTL-6): offline auth-challenge verifier — auth verify against th…
bordumb Jun 12, 2026
ef5fb56
feat(LTL-R2): host-side apply of device-authored shared-KEL rotation
bordumb Jun 12, 2026
9c7108a
feat(PWNTS-1b): KEL-anchored OIDC-subject policy — org anchor-oidc-po…
bordumb Jun 12, 2026
96de9d5
feat(PWNTS-4): stateless commit-bundle verification — verifyCommitJso…
bordumb Jun 12, 2026
ee32fa2
feat(agents): record a KEL-anchored delegation attestation on agent add
bordumb Jun 12, 2026
4747df2
feat(rp): registry-sync surface — RegistrySync port, RegistryWatcher …
bordumb Jun 12, 2026
d6c7b35
feat(LTL-8): registry propagation over git remotes — auths registry p…
bordumb Jun 13, 2026
cea89bf
feat(verify): offline transparency anchoring for artifact verify — --…
bordumb Jun 13, 2026
fa24197
feat(auths-mobile-ffi): delegated device-link KEL verification
bordumb Jun 13, 2026
4afcffa
feat(artifact): --curve flag for ephemeral CI signing
bordumb Jun 13, 2026
1bef4d0
feat(artifact): --signature-only self-check for ephemeral verify
bordumb Jun 13, 2026
eb638af
fix(org): resolve org signing key by DID so default-flag lifecycle works
bordumb Jun 13, 2026
ac415e8
feat(auths-mcp-server): configurable tool sandbox root
bordumb Jun 13, 2026
fa42f1f
fix(cli): accept leading-hyphen base64url nonce values
bordumb Jun 13, 2026
768c36d
fix(sign): confirm a signature landed before reporting a commit signed
bordumb Jun 13, 2026
3f747a7
fix(whoami): resolve a paired delegate via the single local-signer re…
bordumb Jun 13, 2026
eee627c
fix(cli): re-signing a commit replaces its Auths-* trailers instead o…
bordumb Jun 13, 2026
0ca88ec
fix(xtask): exclude hidden dirs (incl .worktrees) from AST check file…
bordumb Jun 13, 2026
79d1890
fix(ci): document shared-kel-rot endpoint + allow auths-rp git2 wrapper
bordumb Jun 13, 2026
578f5a9
chore: add CI identity bundle for signer verification
bordumb Jun 13, 2026
0b7e80e
fix: update error docs
bordumb Jun 13, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
69 changes: 23 additions & 46 deletions .auths/ci-bundle.json
Original file line number Diff line number Diff line change
Expand Up @@ -39,55 +39,32 @@
"size": 5
},
"commit_sha": "d4443cd81077f396ec1a1366bc0356cc19b3bbf5"
}
],
"kel": [
{
"v": "KERI10JSON00012f_",
"t": "icp",
"d": "ELv6uW2irGkclnFq8lAsAexmoLwZ-3k-ocwjpFBZsIEG",
"i": "ELv6uW2irGkclnFq8lAsAexmoLwZ-3k-ocwjpFBZsIEG",
"s": "0",
"kt": "1",
"k": [
"1AAJAvfTM0XIQXakgoZTmn50ze8cJm6zjjiXEe2xKfzHk43g"
],
"nt": "1",
"n": [
"EGdbaV-wPaf-_ipeasSHuXwmb0YtEt7FaMk68HLxD4mn"
],
"bt": "0",
"b": [],
"c": [],
"a": []
},
{
"v": "KERI10JSON0000ff_",
"t": "ixn",
"d": "EDxwuXyK6UzdhpDUJOggQGHTdWpc0APpPHihmiUcye6y",
"i": "ELv6uW2irGkclnFq8lAsAexmoLwZ-3k-ocwjpFBZsIEG",
"s": "1",
"p": "ELv6uW2irGkclnFq8lAsAexmoLwZ-3k-ocwjpFBZsIEG",
"a": [
{
"d": "EBZ9C975VziWzzdir1SctdzUDmqZMCKgG7J6zU9m8aES"
}
]
},
{
"v": "KERI10JSON0000ff_",
"t": "ixn",
"d": "EIrQ9Hly1PL1MkNynKgrQ_X9Mjspm5lxupzyOMasbZQu",
"i": "ELv6uW2irGkclnFq8lAsAexmoLwZ-3k-ocwjpFBZsIEG",
"s": "2",
"p": "EDxwuXyK6UzdhpDUJOggQGHTdWpc0APpPHihmiUcye6y",
"a": [
{
"d": "EBSIjdFY0dh2tv8BsfpPIBQ-QkA7Ay8d7G3vG18vrkwS"
}
]
"version": 1,
"rid": "sha256:5cb868032393d2735071912dac899f29191d2d294281f914812241f4565ad104",
"issuer": "did:keri:ELv6uW2irGkclnFq8lAsAexmoLwZ-3k-ocwjpFBZsIEG",
"subject": "did:key:zDnaeh7NXw4vXWstkivGmQaBGZkoG4Fwp6uRAh6Khe5hXmUSj",
"device_public_key": {
"curve": "p256",
"key": "02f7d33345c84176a48286539a7e74cdef1c266eb38e389711edb129fcc7938de0"
},
"identity_signature": "725d554a771f832f75d2be0928e07b00d01bb43d220786daaedee41f885c895d007a5cb8cab9af990513686fabd4aea55d980244aaecc2d63423bef9b1b6fb6a",
"device_signature": "d823437bc8bb5ad3b0e09942b028225fb919ab68a8e108120c2e6baf1230db466f35cc5a43a952fb7763676a3a62a0250a536dfe20a32be474b9ff1a08fb7375",
"timestamp": "2026-06-10T01:10:14.307656Z",
"note": "example-verify-badge v0.1.0",
"payload": {
"artifact_type": "file",
"digest": {
"algorithm": "sha256",
"hex": "5cb868032393d2735071912dac899f29191d2d294281f914812241f4565ad104"
},
"name": "example-verify-badge-v0.1.0.tar.gz",
"size": 5035
},
"commit_sha": "92a3c50319c37d85b7219a9efbc33679b522a4fb"
}
],
"bundle_timestamp": "2026-06-10T00:32:04.746971Z",
"bundle_timestamp": "2026-06-13T16:06:44.921576Z",
"max_valid_for_secs": 31536000
}
4 changes: 4 additions & 0 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion crates/auths-cli/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -84,7 +84,7 @@ tokio-util = { version = "0.7", optional = true }

[features]
default = ["lan-pairing"]
lan-pairing = ["dep:auths-pairing-daemon", "dep:axum", "dep:tokio-util"]
lan-pairing = ["dep:auths-pairing-daemon", "dep:axum", "dep:tokio-util", "auths-sdk/lan-pairing"]

[target.'cfg(unix)'.dependencies]
nix = { version = "0.29", features = ["signal", "process"] }
Expand Down
3 changes: 3 additions & 0 deletions crates/auths-cli/src/cli.rs
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,7 @@ use crate::commands::namespace::NamespaceCommand;
use crate::commands::org::OrgCommand;
use crate::commands::policy::PolicyCommand;
use crate::commands::publish::PublishCommand;
use crate::commands::registry::RegistryCommand;
use crate::commands::reset::ResetCommand;
use crate::commands::scim::ScimCommand;
use crate::commands::sign::SignCommand;
Expand Down Expand Up @@ -137,6 +138,8 @@ pub enum RootCommand {
Audit(AuditCommand),
#[command(hide = true)]
Auth(AuthCommand),
#[command(hide = true)]
Registry(RegistryCommand),

// ── Internal (visible via --help-all) ──
#[command(hide = true)]
Expand Down
Loading
Loading