Skip to content

v1.1.0

Choose a tag to compare

View all tags
@VirtualMachinist VirtualMachinist released this 01 Oct 03:49
v1.1.0
76546b5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Compatible 1.x minor on the 1.0 contract. geode sign pub and geode sign blob are the Ed25519 cosign verb. The key stays in Geode. Custody verbs, exit codes, MCP tools geode_list / geode_read / geode_write, and GDE1 suite 0x01 are unchanged. GDE1 objects written by 1.0.0 and 1.0.1 remain readable.

Added

  • geode sign pub writes the Ed25519 identity public key as SPKI PEM (BEGIN PUBLIC KEY).
  • geode sign blob PATH signs the raw file bytes (RFC 8032, no prehash). The signature file is standard base64 plus one trailing newline.
  • The seed is blake3::derive_key("geode/v1/ed25519-identity", ISK). A second identity file is a second key on the same verb. Verify with cosign v2.6.5: verify-blob --key pub.pem --signature sig --insecure-ignore-tlog --offline payload.
  • geode key pub and .gpub stay X25519.

Not in this tag

  • The machine hook is a later verb. UKI and PCR signing stay on the LE13 interim.

Identity lock: git tag v1.1.0 = Cargo 1.1.0 = crates.io geode-grotto → geode-tui → geode-cli.

Assets 2
Loading