OXYGENHUB

Changes up to # 4b9d06778581 touching crates/oxy-core/src/identity.rs · 10

See as swimlanes (independent work side by side)

Certificates for short-lived keys (keyless, step 1)
Andy McCall via Claude Code agent ·
✔ 02e691881a4e
oxy receipt export --format slsa: SLSA provenance cosign can check v0.4.4
Andy McCall via Claude Code agent ·
✔ a39754d02c58
Scoped, expiring delegates, and revocation by the delegator
Andy McCall ·
✔ 7ba155f20aa0
State is Send + Sync; shared lane layout; log_window resolution
Andy McCall ·
✔ 119bbf50cb86
Challenge signatures and a push report for hosts
Andy McCall ·
✔ 7aa2dc9369e3
Unbound hosted repositories adopt the first pusher's id
Andy McCall ·
✔ 75167672ebcd
Identity lifecycle: rotate, renew, delegates, revoke; expiry checks; policy roots, thresholds, proposals and oxy policy sign; policy chains served on refs and carried in push bundles (spec 0.6n)
Andy McCall ·
✔ 28fc23d7706a
Trust policy: policy objects, init/grant/revoke, enforcement on push and fetch, propagation with downgrade protection (spec 0.6)
Andy McCall ·
✔ 83e0677b07fe
Spec §5.5 encoding conventions; SIGPIPE handling in the CLI; clippy fixes
Andy McCall ·
✔ 5b1114a04905
Identities and composite Ed25519 + ML-DSA-65 signatures; oxy identity, verify, config
Andy McCall ·
✔ 1983686fb7a7