code/cl8y-wallet-security
Watch
4
0
Fork
You've already forked cl8y-wallet-security
 0
Code Issues 6 Pull requests 1 Projects Releases Packages 3 Wiki Activity

Record independently verified isolated sealer runtime evidence #17

Merged
PlasticDigits merged 1 commit from ops/sealer-runtime-evidence into main 2026-10-31 06:13:30 +00:00
Conversation 0 Commits 1 Files changed 1 +49
PlasticDigits commented 2026-10-31 06:11:39 +00:00
Owner

Publishes one sanitized receipt for the isolated public-key sealer: reviewed producer/source and immutable image binding, actual daemon/inside UID and resource limits, read-only/raw and writable/cipher mounts, no network/private credentials, and a successful bounded completed-pair pause followed by resume.

The 49-line file is byte-identical to independently reviewed factual receipt 3e90d98fed5f2c1e94dffc0dddacb4c1800f3730. No app, operator, migration, deployment or schedule changes. The pause is explicitly resumed and is not a standing upload fence. Actual WG binding/export controller, S3 upload/retention and fenced off-host restore remain open; full production acceptance is not claimed.

Publishes one sanitized receipt for the isolated public-key sealer: reviewed producer/source and immutable image binding, actual daemon/inside UID and resource limits, read-only/raw and writable/cipher mounts, no network/private credentials, and a successful bounded completed-pair pause followed by resume. The 49-line file is byte-identical to independently reviewed factual receipt `3e90d98fed5f2c1e94dffc0dddacb4c1800f3730`. No app, operator, migration, deployment or schedule changes. The pause is explicitly resumed and is not a standing upload fence. Actual WG binding/export controller, S3 upload/retention and fenced off-host restore remain open; full production acceptance is not claimed.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
code/cl8y-wallet-security!17
No description provided.