Skip to content

v1.1.0

Choose a tag to compare

View all tags
@FaysilAlshareef FaysilAlshareef released this 07 Oct 09:57
· 16 commits to main since this release
v1.1.0
064fc2d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.1.0 — Anis now signs only the answers that move money, deliver card codes or establish your key, and this version verifies exactly those.

  • Verified, as before, every answer and every refusal: place an order, read an order, reveal a card, reveal an invoice's cards, the four enrollment calls, the signature self-test. A missing or invalid signature on these still fails.
  • No longer verified: the information reads — profile, wallets, the catalogue, your owned cards (list and read). Anis does not sign them; TLS protects them. They no longer fetch Anis's key document, so they keep working while it cannot be reached.
  • Every request is still signed exactly as before.
  • CI: the lowest-dependency type check passes again with opentelemetry-api 1.45.1.

Upgrade: earlier versions verify every answer and fail on the information reads against Anis's current API. Use 1.1.0 or later.

Proven live on 2026-10-07 against a complete Anis stack: enrollment, the eight information reads, an order and its replay, both reveals, a signed and an unsigned refusal.

Assets 2
Loading