Trust workflow in v0.9.1
Signed claims and approval gates
Authenticate repository attestations and evaluate an approval gate against a selected signer and claim.
Current core · repository v3
Signing is opt-in. Existing unsigned attestations keep their identities. Signature presence in search requires trusted-key verification before accepting a claim.
- HMAC-SHA256 and Ed25519 bind target, claim, signer, and evidence.
- Signer/claim selection prevents unrelated attestations from satisfying or blocking a scoped gate.
- 523 conformance vectors provide executable evidence for independent format implementations.
tine repo-verify heads/main --repo . --signer release-team --claim '{"approved":true}' --key-env OPENTINE_SIGNING_KEY --json
tine repo-search --repo . --signed-only --json