From 42698f42eec18d24a7378fcbe1ede73add902b71 Mon Sep 17 00:00:00 2001 From: tv Date: Sat, 7 Nov 2026 22:35:21 +0100 Subject: access: values sealed for their readers cs1.: a value encrypted with age to its readers' SSH keys, which no node decrypts. _continuum/access/sealed declares paths whose values must be sealed, for named readers or anyone; nodes check the recipients by age's key tags, at the API and on receipt. Auth plan M8, reworked: sealed values instead of containers, readers as users only (nodes hold no keys). --- src/access/mod.rs | 1 + 1 file changed, 1 insertion(+) (limited to 'src/access/mod.rs') diff --git a/src/access/mod.rs b/src/access/mod.rs index 73ae7c9..2a0077e 100644 --- a/src/access/mod.rs +++ b/src/access/mod.rs @@ -20,6 +20,7 @@ pub(crate) mod policy; pub(crate) mod registry; pub(crate) mod rules; pub(crate) mod screen; +pub(crate) mod sealed; pub(crate) mod sshsig; pub(crate) mod token; -- cgit v1.3.1