Deferred from Epic B (plan fn-145; tracks #200).
Epic B's KEL source (B4) is local refs/keri/ plus an optional IdentityBundle.device_kel/root_kel carrier — i.e. a verifier who has the repo or a hand-delivered bundle. A stranger who never saw the identity cannot yet fetch the KEL over the network.
That is Epic C — Native KEL distribution (docs/architecture/keri-only-roadmap.md:250): a git-ref KEL resolver + OOBI-style HTTP resolution; borrow the replay-from-refs logic from auths-radicle/src/identity.rs:538 without its transport (auths-radicle is being deprecated). Also folds in IdentityBundle OOB-verification polish. Related: #183 (unauthenticated trust pinning). Epic: #200; next: Epic C.
Deferred from Epic B (plan
fn-145; tracks #200).Epic B's KEL source (B4) is local
refs/keri/plus an optionalIdentityBundle.device_kel/root_kelcarrier — i.e. a verifier who has the repo or a hand-delivered bundle. A stranger who never saw the identity cannot yet fetch the KEL over the network.That is Epic C — Native KEL distribution (
docs/architecture/keri-only-roadmap.md:250): a git-ref KEL resolver + OOBI-style HTTP resolution; borrow the replay-from-refs logic fromauths-radicle/src/identity.rs:538without its transport (auths-radicle is being deprecated). Also folds inIdentityBundleOOB-verification polish. Related: #183 (unauthenticated trust pinning). Epic: #200; next: Epic C.