myc

Self-custodial remote signer for Radroots apps
git clone https://radroots.dev/git/myc.git
Log | Files | Refs | README | LICENSE

wrapping_credential_resolution.v1.json (1145B)

      1 {
      2   "schema": "radroots.myc.wrapping-credential-resolution",
      3   "schema_version": 1,
      4   "contract_version": 1,
      5   "artifact_name": {
      6     "shared_type": "ServiceCredentialArtifactName",
      7     "maximum_utf8_bytes": 128
      8   },
      9   "artifact_path": "<canonical_instance_secrets>/<validated_credential_name>",
     10   "artifact": {
     11     "wire": "raw_32_bytes",
     12     "exact_bytes": 32,
     13     "symlink_follow": false,
     14     "regular_file": true,
     15     "single_link": true,
     16     "owner_uid": "effective_uid",
     17     "read_modes_octal": ["0400", "0600"],
     18     "secrets_root_modes_octal": ["0500", "0700"]
     19   },
     20   "profiles": {
     21     "service_host": "existing_injected_or_mounted",
     22     "repo_local": "existing_offline_provisioned",
     23     "interactive": "unsupported"
     24   },
     25   "resolution": {
     26     "read_existing_only": true,
     27     "creates_credential": false,
     28     "creates_parent": false,
     29     "caller_supplies_path": false,
     30     "caller_supplies_bytes": false,
     31     "ordinary_run_generates": false
     32   },
     33   "forbidden_sources": [
     34     "toml_secret",
     35     "environment_secret",
     36     "process_argument_secret",
     37     "adjacent_envelope_sibling",
     38     "implicit_fallback"
     39   ],
     40   "backup_included": false
     41 }