Skip to content

v1.4.0 — Verifiable Provenance

Latest
Latest

Choose a tag to compare

View all tags
@Wolfe-Jam Wolfe-Jam released this 27 Jul 17:14
v1.4.0
9c50354

Verifiable Provenance — with signatures

1.3 proved a packet travels intact; 1.4 lets it prove which key sealed it.

Optional Ed25519 signatures over the same SPK1 payload CRC covers. Integrity (CRC) and provenance (signature) stay separate. Opt-in via [sign] → cryptography. Base SDK + receipt stay zero-crypto.

Highlights

  • Fixed 64-byte trailer (no key_id); flags bit 0 = SIGNED
  • CLI: keygen · seal --sign · verify -k
  • Strict open/merge — signed packets never CRC-open
  • uvx claude-fafm-sdk receipt still GREEN
pip install 'claude-fafm-sdk[sign]'
claude-fafm-sdk keygen
claude-fafm-sdk seal -f soul.fafm -o soul.fafmp --sign --key sign.pem
claude-fafm-sdk verify -k sign.pub.pem soul.fafmp

Not a PKI. Key ≠ person. SPK1 ≠ FAFB. Strip-downgrade is possible (N1).

Assets 2
Loading