Skip to content

fix(trust): reject unsigned runtime allowlists - #40

Merged
TeoSlayer merged 1 commit into
mainfrom
fix/fail-closed-runtime-trust
Aug 7, 2026
Merged

fix(trust): reject unsigned runtime allowlists#40
TeoSlayer merged 1 commit into
mainfrom
fix/fail-closed-runtime-trust

Conversation

@TeoSlayer

Copy link
Copy Markdown
Contributor

Summary

  • require Ed25519 signatures on every runtime trusted-agent update
  • disable remote refresh when no verifier key is compiled in, retaining the reviewed embedded list
  • make the documented linker-injected verifier key functional
  • cover enabled/disabled builds, signature failures, no-network fallback, race, and fuzz paths

Validation

  • GOWORK=off go test ./...
  • GOWORK=off go test -tags no_trustedagents ./...
  • GOWORK=off go vet ./...
  • GOWORK=off go vet -tags no_trustedagents ./...
  • GOWORK=off go test -race ./...
  • GOWORK=off go test -run=^$ -fuzz=FuzzLoad -fuzztime=5s
  • GOWORK=off go test -run=^$ -fuzz=FuzzDecodePin -fuzztime=5s

@codecov

codecov Bot commented Aug 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@TeoSlayer
TeoSlayer merged commit 5825bbf into main Aug 7, 2026
13 checks passed
@TeoSlayer
TeoSlayer deleted the fix/fail-closed-runtime-trust branch August 7, 2026 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants