blob: f205c12e1ccc711c437f29e42aa88e51dfe26ba2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
# Monzero build assertion policy
1. Every assertion identifies an immutable source commit and release tag.
2. Release tags are annotated and their target commits are reviewed.
3. Builder keys are generated and retained by their individual owners.
4. Private signing keys are never copied into this repository or a build VM.
5. Public-key fingerprints are verified through a second communication path.
6. At least two independently administered builders must produce matching
results for each supported platform.
7. A mismatch stops publication until its cause is understood and documented.
8. Revoked or compromised keys are removed from the active builder set and
affected assertions are clearly marked.
9. Experimental asset/NFT functionality is not represented as production-safe
until its consensus and cryptographic review gates are complete.
|
