blob: 6929704eec586328ba9bd7b9a92d2b1a637a70f5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
# Monzero reproducible-build signatures
This repository stores signed Gitian build assertions for Monzero releases.
It must not contain release binaries, wallet files, recovery seeds, private
keys, or unsigned claims presented as release verification.
## Layout
- `gitian-pubkeys/`: reviewed public keys belonging to independent builders.
- `<release>-<platform>/<builder>/`: assertions produced by Gitian `gsign`.
- `POLICY.md`: acceptance and release-signing policy.
At least two independent builders must reproduce a release before its hashes
are published as verified. A builder signs only artifacts built from the exact
reviewed source commit or annotated release tag.
This repository is initially empty by design. Create release assertions only
after the public Monzero source repository exists and builders have exchanged
and verified their public-key fingerprints out of band.
|
