docs(distribution): publish the real agent signing recipient #67

Merged

nrupard merged 1 commit from docs/fill-signing-recipient into main

2026-06-19 18:03:17 +02:00

nrupard commented

2026-06-19 17:34:56 +02:00

Owner

Fills the age1... signing recipient placeholder in docs/agent-package-distribution.md with the provisioned key (age13w47...), now that the keypair has been generated and its secret loaded into the CI secret VERVAIN_AGENT_SIGNING_SECRET_KEY.

The recipient is the public half of the signing key and is safe to commit; it is the value operators paste into the server's agent-fetch publickey / VERVAIN_AGENT_FETCHER_PUBLIC_KEY. Follow-up to VA-62 (the age + XEdDSA signing scheme).

Fills the `age1...` signing recipient placeholder in `docs/agent-package-distribution.md` with the provisioned key (`age13w47...`), now that the keypair has been generated and its secret loaded into the CI secret `VERVAIN_AGENT_SIGNING_SECRET_KEY`. The recipient is the public half of the signing key and is safe to commit; it is the value operators paste into the server's agent-fetch `publickey` / `VERVAIN_AGENT_FETCHER_PUBLIC_KEY`. Follow-up to VA-62 (the age + XEdDSA signing scheme).

nrupard added 1 commit

2026-06-19 17:34:57 +02:00

docs(distribution): publish the real agent signing recipient

Check / clippy + fmt + tests (pull_request) Failing after 1m5s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

592747d010

Replace the `age1placeholder...` stand-in with the provisioned distribution signing recipient (`age13w47...`), the public half of the key loaded into the CI secret VERVAIN_AGENT_SIGNING_SECRET_KEY. The recipient is public and safe to commit; operators paste it into the server agent-fetch `publickey` (or VERVAIN_AGENT_FETCHER_PUBLIC_KEY).

#VA-62

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>