Files
git.stella-ops.org/docs/modules/signer/implementation_plan.md

1.3 KiB

Signer Implementation Plan

Purpose

Define a concise, living plan for Signer DSSE signing, predicate registry, and attestor alignment.

Active work

  • docs/implplan/SPRINT_20260112_015_SIGNER_path_witness_predicate.md

Near-term deliverables

  • Register canonical path-witness predicate https://stella.ops/predicates/path-witness/v1 with alias support.
  • Update predicate classification helpers and allowlists for reachability types.
  • Expand predicate allowlist tests and integration coverage for DSSE signing.
  • Maintain cosign-compatible DSSE outputs with deterministic canonical JSON.

Dependencies

  • Authority for OpTok and Proof-of-Entitlement checks.
  • Crypto provider registry and keyless or KMS backends.
  • Attestor and Policy verification rules for accepted predicate types.
  • Path witness contract updates in docs/contracts/witness-v1.md.

Evidence of completion

  • Predicate catalog updates in src/Signer/StellaOps.Signer/StellaOps.Signer.Core/PredicateTypes.cs.
  • Tests updated under src/Signer/__Tests.
  • DSSE bundles for path witness validate under Signer allowlist rules.

Reference docs

  • docs/modules/signer/README.md
  • docs/modules/signer/architecture.md
  • docs/modules/platform/architecture-overview.md
  • docs/contracts/witness-v1.md