fix(mosaic): bind delegated lifecycle evidence
This commit is contained in:
@@ -27,9 +27,11 @@ def refuse(message: str) -> None:
|
||||
raise SystemExit(1)
|
||||
|
||||
|
||||
if len(sys.argv) != 5:
|
||||
refuse("expected path, identity, estate, and host")
|
||||
path, identity, estate, host = sys.argv[1:]
|
||||
if len(sys.argv) != 6:
|
||||
refuse("expected governed root, path, identity, estate, and host")
|
||||
root, path, identity, estate, host = sys.argv[1:]
|
||||
if os.path.abspath(os.path.dirname(path)) != os.path.abspath(root):
|
||||
refuse("credential is not a direct child of the governed root")
|
||||
if not estate:
|
||||
refuse("explicit estate is required")
|
||||
parent = os.path.dirname(path)
|
||||
|
||||
Reference in New Issue
Block a user