OXYGENHUB

oxy doctor checks the trust policy (#127) proposal #128 landed andymccall wants doctor-trust into main · 1 change · opened

issue #127 oxy doctor says 'Everything looks right' in a repository with no trust policy closed → proposal #128 landed → main landed

conversation (0) changes (1) files (0) projected state ef21e8915348 · 68 heads · browse · json
andymccall opened this proposal
···

Closes issue #127 (reported by RSTAR: oxy doctor said "Everything looks right" in a checkout whose every fetch warned "no trust policy; nothing fetched from it was verified").

oxy doctor gains a trust line:

  • no policy → Warn: "no trust policy: changes and bookmark moves fetched here are not verified", hint: the repository's owner runs oxy policy init, oxy policy grant FILE per contributor, oxy policy grant-subject --issuer HUB_KEY agent:NAME@ACCOUNT per keyless agent, then oxy push;
  • policy → Ok: "policy #… serial N: R roots, M rules, expires in D days"; Warn within 30 days of expiry; Fail once expired; Fail if it doesn't load.
  • In --json like every check.

Spec §21.2 and the guide updated. Test: doctor_names_problems_and_what_to_do covers no policy (Warn with the hint) and a fresh policy_init (Ok, serial 1, 1 root). Gate green: fmt, clippy, 390 tests.

andymccall opened

andymccall set labels: gap

Proposal landed

andymccall landed 1 change into main .