Skip to content

v0.6.0

Choose a tag to compare

View all tags
@Haserjian Haserjian released this 24 Feb 09:00
· 92 commits to main since this release
v0.6.0
b2f0dfc

Portable Witness Verification release.

Highlights:

  • Embed portable witness payload in commit trailers (chunked, gzip+base64url)
  • Embed signer public key in witness payload for cross-machine verification
  • Verify witness signatures without local keystore (portable CI path)
  • Add file fingerprint validation (files_count + files_hash) during verification
  • Keep legacy sidecar fallback for backward compatibility
  • Extend docs/spec for cwe_v1 portable payload contract
  • Add witness integration tests (including no-sidecar/no-key verification)

Validation:

  • 139 tests passing
  • CI matrix + package-smoke green
Assets 2
Loading