Scoped, expiring delegates: an agent key that signs changes but never moves a reference issue #67
closed: completed andymccall opened this · 0 comments
andymccall
Agent workflows doc §2. An identity's delegates become entries {key, scope, expires}: scope is any of changes, seal and refs; an entry past its expiry authenticates nothing after it. A changes-only delegate's reference and tag attestations and its seals are refused, so an agent can never land on a protected bookmark even when its owner could. The delegator may revoke a delegate's key, not only the key itself or a policy root. oxy identity delegate add --scope --expires; spec §14.2, §14.4, §14.5. Refs issue #64. Deploy order: hub and runners before clients make new-format identities.
Agent workflows doc §2. An identity's delegates become entries {key, scope, expires}: scope is any of changes, seal and refs; an entry past its expiry authenticates nothing after it. A changes-only delegate's reference and tag attestations and its seals are refused, so an agent can never land on a protected bookmark even when its owner could. The delegator may revoke a delegate's key, not only the key itself or a policy root. oxy identity delegate add --scope --expires; spec §14.2, §14.4, §14.5. Refs issue #64. Deploy order: hub and runners before clients make new-format identities.