diff options
Diffstat (limited to 'POLICY.md')
| -rw-r--r-- | POLICY.md | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/POLICY.md b/POLICY.md new file mode 100644 index 0000000..f205c12 --- /dev/null +++ b/POLICY.md @@ -0,0 +1,15 @@ +# Monzero build assertion policy + +1. Every assertion identifies an immutable source commit and release tag. +2. Release tags are annotated and their target commits are reviewed. +3. Builder keys are generated and retained by their individual owners. +4. Private signing keys are never copied into this repository or a build VM. +5. Public-key fingerprints are verified through a second communication path. +6. At least two independently administered builders must produce matching + results for each supported platform. +7. A mismatch stops publication until its cause is understood and documented. +8. Revoked or compromised keys are removed from the active builder set and + affected assertions are clearly marked. +9. Experimental asset/NFT functionality is not represented as production-safe + until its consensus and cryptographic review gates are complete. + |