diff options
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/README.md b/README.md new file mode 100644 index 0000000..6929704 --- /dev/null +++ b/README.md @@ -0,0 +1,20 @@ +# Monzero reproducible-build signatures + +This repository stores signed Gitian build assertions for Monzero releases. +It must not contain release binaries, wallet files, recovery seeds, private +keys, or unsigned claims presented as release verification. + +## Layout + +- `gitian-pubkeys/`: reviewed public keys belonging to independent builders. +- `<release>-<platform>/<builder>/`: assertions produced by Gitian `gsign`. +- `POLICY.md`: acceptance and release-signing policy. + +At least two independent builders must reproduce a release before its hashes +are published as verified. A builder signs only artifacts built from the exact +reviewed source commit or annotated release tag. + +This repository is initially empty by design. Create release assertions only +after the public Monzero source repository exists and builders have exchanged +and verified their public-key fingerprints out of band. + |