-- Signed receipts (Oxygen spec §14.6): the receipt attestation a job's

-- receipt is kept in the repository as, the runner that signed it, and why a

-- signed receipt was not kept.

ALTER TABLE flow_jobs ADD COLUMN receipt_attest TEXT NOT NULL DEFAULT '';

ALTER TABLE flow_jobs ADD COLUMN receipt_signer TEXT NOT NULL DEFAULT '';

ALTER TABLE flow_jobs ADD COLUMN receipt_note TEXT NOT NULL DEFAULT '';

-- The key each runner token signs with, learned from its first signed

-- receipt; later receipts under that token must carry the same key.

CREATE TABLE flow_runner_keys (

    token_hash TEXT PRIMARY KEY,

    key TEXT NOT NULL,

    name TEXT NOT NULL,

    first_ms INTEGER NOT NULL

);