Hare/yoi
1
1
Fork 0
Code Actions Packages Releases Activity

fix: bound Runtime issuer trust surfaces

Browse Source
This commit is contained in:
Hare
2026-09-08 02:31:58 +09:00
parent fba5ecf54c
commit 04924cf796
4 changed files with 365 additions and 116 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/development/server-runtime-auth.md
+3 -1
View File
@@ -125,12 +125,14 @@ The bundle contains `workspace_id`, `backend_url`, `key_id`, `algorithm`, `publi
Inspect the Runtime trust records without exposing private material:
```bash
yoi-runtime trust-workspace list --fs-root /var/lib/yoi-runtime
yoi-runtime trust-workspace list --offset 0 --limit 100 --fs-root /var/lib/yoi-runtime
yoi-runtime trust-workspace show \
--workspace-id '<WORKSPACE_ID>' \
--fs-root /var/lib/yoi-runtime
```
`list` returns a bounded page with `offset`, `limit`, `total`, and `records`; advance `--offset` to inspect later pages. The records contain public trust metadata only.
An exact repeated `add` is idempotent. A different bundle for an existing Workspace is rejected; use the explicit `replace` operation after verifying the new public fingerprint out of band:
```bash