Skip to content

Validator enrollment tools 1.4.0

Choose a tag to compare

View all tags
@jmagly jmagly released this 14 Sep 14:33
· 74 commits to main since this release
v1.4.0
This tag was signed with the committer’s verified signature.
jmagly Joseph Magly
GPG key ID: 0117DAAA677A5BF2
Verified
Learn about vigilant mode.
370b9a6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Validator enrollment tooling 1.4.0 fixes the guarded RPC policy probe and portable offline archive checksum. It does not contain a node binary.

The probe now sends a valid author_hasKey request. Exact Safe-policy denials are distinguished from malformed requests, missing methods, proxy failures, and malformed JSON-RPC responses. The temporary RPC window restores the original policy file exactly on success and failure.

Qualification covers Linux amd64 node builds 086baf26c0e0db666526b8f649269facd1c37da7 (nightly-086baf26-20260913) and be8920f47d282da73297c17875791c4e3d444625 (testnet-v1.1.0), each with the public runtime 286 code in an isolated development genesis. Real three-authority generation and restart-failure, interruption, and RPC-loss cases passed. This does not require downgrading to v1.1.0. See the qualification and exact binary digests.

The offline checksum sidecar contains only the archive basename. After downloading the archive and its sidecar into the same directory, run:

sha256sum --strict -c roko-validator-enroll-offline-1.4.0.tar.gz.sha256

Extract the offline archive and run its installer with --bundle-dir pointing to the extracted directory. The installer authenticates the signed manifest and metadata against fingerprint 62297562B1C7053088F405DB0117DAAA677A5BF2; a checksum alone is not authentication.

Signed source tag: v1.4.0, commit 370b9a65b5880368801341a290c4491bab0c3c73. The attached metadata binds the payload to this source revision. Full smoke tests and an installation of the signed production bundle passed.

Custom PHC configuration, owner-wallet registration, election, public temporal relay health, disabled-validator liveness, and database catch-up remain separate qualification work tracked in #13, #12, and #18.

Assets 12
Loading