Improve the ACI proving tools and simplify the mechanism - #86
Draft
h4x3rotab wants to merge 2 commits into
Draft
Conversation
A single, self-contained change to the proving surface (no Privatemode upstream — that lives on its own branch): - Simplify the ACI mechanism: the keyset is the identity (no identity key, endorsement, revocation, or epoch), artifacts verify as served bytes (JCS is a producer-side convenience, never a verifier step), one signature suite (ed25519) and one E2EE suite (sealed-body X25519 v3), content-addressed sessions, and a six-check verification procedure. - Verify the compose measurement: the report publishes app_compose and L2.4 replays the event log to the quote's RTMR3, checking sha256(app_compose). - Ship the `aci` CLI (verify / audit / chat / serve) reusing the gateway's own verification code, and fold the browser verifier into the importable @phala/aci-verifier library with one-call verifyService and hardware-quote verification via @phala/dcap-qvl. - Regenerate the byte-exact test vectors, pinned in both Rust and TypeScript. - Re-layer the docs around a five-minute path and an executable quickstart. 358 Rust + 56 TypeScript tests green; fmt and clippy clean. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Plain present-tense wording for the channel-binding, verifier-profile, and serialization sections; no normative changes. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A self-contained rework of the ACI proving surface, focused on usability.
(No Privatemode upstream — that lives on its own branch.)
What changes
endorsement, revocation, or epoch. Artifacts verify as served bytes (JCS
is a producer-side convenience, never a verifier step). One signature
suite (ed25519) and one E2EE suite (sealed-body X25519 v3),
content-addressed sessions, and a six-check verification procedure.
app_compose,and verification replays the event log to the quote's RTMR3 and checks
sha256(app_compose).aciCLI (verify/audit/chat/serve) reusing thegateway's own verification code.
@phala/aci-verifierlibrary — the browser verifier folded into animportable package with one-call
verifyServiceand hardware-quoteverification via
@phala/dcap-qvl.TypeScript.
quickstart; spec prose tightened to plain present tense (no normative
changes).
Tests
358 Rust + 56 TypeScript tests green;
fmtandclippyclean.🤖 Generated with Claude Code