SatoshiQaziMuhammed c84494c22f Sign the served config files (#76) ...

* feat(config): sign the served config files

signed/targets.json gives the sha256 of every JSON file the wallet may
fetch, signed with an Ed25519 targets key. signed/root.json names that
key and three sr25519 root keys (wallet accounts), two of which can
replace it; the wallet will ship this first root.

scripts/signed_config.py writes the root, signs the targets list and
checks it. Code Quality now refuses a tree whose served files do not
match the signed list, and runs weekly so an expiring signature shows a
month ahead.

* fix(config): sign the test fixtures and follow published roots

The wallet refuses any JSON file from this repository that the signed
list does not give, and its instrumented tests read tests/, so those
files are signed too.

A root after the first is written to signed/root.N.json, where the
wallet looks for it; sign and check use the newest published root.

2026-11-01 04:41:22 +04:00

..

check_pezkuwi_integrity.py

fix(chains): drop node URLs that embed Nova's provider keys (#72)

2026-10-17 20:55:00 +04:00

merge-chains.py

fix(chains): drop node URLs that embed Nova's provider keys (#72)

2026-10-17 20:55:00 +04:00

signed_config.py

Sign the served config files (#76)

2026-11-01 04:41:22 +04:00

sync_from_nova.py

fix(chains): drop node URLs that embed Nova's provider keys (#72)

2026-10-17 20:55:00 +04:00

update-all.sh

feat: implement Nova Base + Pezkuwi Overlay architecture

2026-02-06 07:37:57 +03:00