OXYGENHUB

Changes up to # 835ceb9b3ea7 touching crates/oxy-core/src/repo/policy.rs · 5

See as swimlanes (independent work side by side)

Certified keys may push under a subject grant (keyless step 4b)
Andy McCall via Claude Code agent ·
✔ f0a517d28237
Policies grant subjects an issuer certifies (keyless step 4a)
Andy McCall via Claude Code agent ·
✔ 3a6effc74835
Unbound hosted repositories adopt the first pusher's id
Andy McCall ·
✔ 75167672ebcd
Identity lifecycle: rotate, renew, delegates, revoke; expiry checks; policy roots, thresholds, proposals and oxy policy sign; policy chains served on refs and carried in push bundles (spec 0.6n)
Andy McCall ·
✔ 28fc23d7706a
Trust policy: policy objects, init/grant/revoke, enforcement on push and fetch, propagation with downgrade protection (spec 0.6)
Andy McCall ·
✔ 83e0677b07fe