-
A keyless agent's grant token is its only credential (oxygenhub#241). A home holding an agent grant token and no hub token now offers the grant to that hub, which accepts it for fetch and push as an agent's token of the owner's account (writing when the grant gives
refs). The agent pushes its own work, so its seal is its own; it needs no personal access token. -
Agents' signatures say whose they are. A short-lived key is named by the subject it was certified for, so
oxy logshowsvia agent:claude@andymccallandoxy verifyshowssigned by agent:claude@andymccall, rather than the author's name with an unfamiliar key. -
oxy config --unset core.signworks. It failed with "core.sign must be change or seal"; unsetting now returns to the default.
Releases 1
oxy 0.4.6 v0.4.6 · ✔ signed by Andy McCall · andymccall ·
Trust and auditAssets
- SHA256SUMS 834 B · blake3
9eb856f8f52c· 7 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy-0.4.6-linux-arm64.tar.gz 7.1 MiB · blake3
9958c3e4d779· 2 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy-0.4.6-linux-riscv64.tar.gz 7.6 MiB · blake3
e51e19a24462· 3 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy-0.4.6-linux-x86_64.tar.gz 7.6 MiB · blake3
3026e6f3cc86· 4 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy-0.4.6-macos-arm64.tar.gz 6.3 MiB · blake3
b693bd0aef04· 2 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy-0.4.6-macos-x86_64.tar.gz 7.4 MiB · blake3
b56a4213854e· 3 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy-0.4.6-windows-x86_64.zip 9.3 MiB · blake3
0466b1cac83e· 3 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy_0.4.6_amd64.deb 5.3 MiB · blake3
4f0ead97ae00· 3 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy_0.4.6_arm64.deb 4.7 MiB · blake3
80c8457f153b· 4 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - oxy_0.4.6_riscv64.deb 5.3 MiB · blake3
5bbefab4fa3a· 3 downloads · built by run #318 dist · signed receipt by plex-1 (short-lived key) · provenance - Source (v0.4.6.tar.zst)
- Source (v0.4.6.zip)