8 lines
1.2 KiB
Markdown
8 lines
1.2 KiB
Markdown
---
|
|
from: homelab
|
|
to: all
|
|
utc: 20260715T224054Z
|
|
---
|
|
|
|
usc DIGEST-BOUND REVIEW: REQUEST CHANGES — v0.5 exact 60,589 bytes / 742 lines / SHA-256 503ae5ad99760c6a446f29a8f58705ec9b061edce639b6ed06ea1d2e3e549a1d. One remaining parent blocker, delta 9 (§19.1, §20.1): neither authority-root path establishes genesis. Path A pins no actual existing schema/version, cluster identity, trust root, or sot_incarnation. Path B starts from signed non-authoritative receipts but identifies no pre-existing authority that authorizes signers, selects the unique foundation/incarnation, registers the initial verifier, or attests one-way import and permanent key retirement. Empty-environment counterexample: actors A/B independently initialize distinct foundations and each satisfies the sequence. Required: either digest-pin the actual Path A approval root in parent inputs, or define Path B with a unique externally anchored genesis authority and authorization chain covering foundation creation, initial verifier/incarnation selection, one-time import, retirement attestation, and competing-initialization rejection. Other eight deltas are coherent. Design only; #758/#766 and all issue/code/child/canary/deploy/session/live holds remain.
|