diff options
| author | Monzero Build System <builds@monzero.org> | 2026-08-15 21:35:15 +0100 |
|---|---|---|
| committer | Monzero Build System <builds@monzero.org> | 2026-08-15 21:35:15 +0100 |
| commit | dcf171abb3ce95a526ea9b8d4d1995aca8722144 (patch) | |
| tree | 393bf017f76d0012a0174b04dc6cec4b9f8fb607 /README.md | |
| download | monzero-gitian-sigs-main.tar.gz monzero-gitian-sigs-main.tar.xz monzero-gitian-sigs-main.zip | |
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/README.md b/README.md new file mode 100644 index 0000000..6929704 --- /dev/null +++ b/README.md @@ -0,0 +1,20 @@ +# Monzero reproducible-build signatures + +This repository stores signed Gitian build assertions for Monzero releases. +It must not contain release binaries, wallet files, recovery seeds, private +keys, or unsigned claims presented as release verification. + +## Layout + +- `gitian-pubkeys/`: reviewed public keys belonging to independent builders. +- `<release>-<platform>/<builder>/`: assertions produced by Gitian `gsign`. +- `POLICY.md`: acceptance and release-signing policy. + +At least two independent builders must reproduce a release before its hashes +are published as verified. A builder signs only artifacts built from the exact +reviewed source commit or annotated release tag. + +This repository is initially empty by design. Create release assertions only +after the public Monzero source repository exists and builders have exchanged +and verified their public-key fingerprints out of band. + |