diff options
| author | Monzero Build System <builds@monzero.org> | 2026-08-15 21:35:15 +0100 |
|---|---|---|
| committer | Monzero Build System <builds@monzero.org> | 2026-08-15 21:35:15 +0100 |
| commit | dcf171abb3ce95a526ea9b8d4d1995aca8722144 (patch) | |
| tree | 393bf017f76d0012a0174b04dc6cec4b9f8fb607 /POLICY.md | |
| download | monzero-gitian-sigs-dcf171abb3ce95a526ea9b8d4d1995aca8722144.tar.gz monzero-gitian-sigs-dcf171abb3ce95a526ea9b8d4d1995aca8722144.tar.xz monzero-gitian-sigs-dcf171abb3ce95a526ea9b8d4d1995aca8722144.zip | |
Diffstat (limited to 'POLICY.md')
| -rw-r--r-- | POLICY.md | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/POLICY.md b/POLICY.md new file mode 100644 index 0000000..f205c12 --- /dev/null +++ b/POLICY.md @@ -0,0 +1,15 @@ +# Monzero build assertion policy + +1. Every assertion identifies an immutable source commit and release tag. +2. Release tags are annotated and their target commits are reviewed. +3. Builder keys are generated and retained by their individual owners. +4. Private signing keys are never copied into this repository or a build VM. +5. Public-key fingerprints are verified through a second communication path. +6. At least two independently administered builders must produce matching + results for each supported platform. +7. A mismatch stops publication until its cause is understood and documented. +8. Revoked or compromised keys are removed from the active builder set and + affected assertions are clearly marked. +9. Experimental asset/NFT functionality is not represented as production-safe + until its consensus and cryptographic review gates are complete. + |