OXYGENHUB

Remote setup: spectra init --owner KEYID and the owner's claim from the client issue #22 closed: completed andymccall opened this · 0 comments

andymccall

Spec §8.6 "Remote setup".

  • spectra init --owner KEYID on the server: instance key and ledger without the owner's secret key; the ledger starts with identity.instance.
  • Until claimed, the daemon serves /api/v1/instance only and refuses the rest with "this Spectra has no owner yet".
  • spectra connect sends identity.owner, signed over its payload, when the server has no owner; accepted only from the key --owner named.
  • Principals, verify and rebuild accept an owner recorded after the instance.

Done when: a test sets a server up with --owner, is refused before the claim, refuses a claim by another key, accepts the owner's, and verifies.

andymccall set labels feature, security ·

andymccall set milestone Sprint 2 ·

andymccall referenced by change 77df591d5a2f on main ·

andymccall closed ·