coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Verify normalized task approval facts and preserve signed source types
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
This commit is contained in:
tegwick 2026-10-16 17:28:03 +02:00
parent 5a2099f400
commit 4dd004a225
18 changed files with 756 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

8
verifier/main.go
View file

@ -2,13 +2,11 @@
package main
import (
"bytes"
"crypto/ed25519"
"encoding/base64"
"encoding/json"
"fmt"
"github.com/netkingdom/access-engine/internal/sign"
"github.com/netkingdom/access-engine/pkg/api"
"io"
"os"
)
@ -23,10 +21,8 @@ func run() error {
if err := json.NewDecoder(io.LimitReader(os.Stdin, 1048577)).Decode(&in); err != nil {
return err
}
var envelope api.DecisionEnvelope
decoder := json.NewDecoder(bytes.NewReader(in.Envelope))
decoder.DisallowUnknownFields()
if err := decoder.Decode(&envelope); err != nil {
envelope, err := sign.DecodeEnvelope(in.Envelope)
if err != nil {
return err
}
keys := map[string]ed25519.PublicKey{}