justme 0f8f3f9a54 feat: trusted release keys setting; drop the duplicate release registration route [CI] ...

The panel now lets the deployer decide which release keys it trusts. The
official CI key is built in and always trusted; an own P-256 public key can be
added (off by default, the private key is rejected) so manifests signed with it
are accepted too. Removing it drops the manifests only it signed. Changes are
audited and need update.confirm.

Admin UI: System > Trust > "Trusted release keys" with a collapsible guide on
generating a key pair and signing a manifest with openssl.

Registration now has one path, POST /api/release/offer (no token, signature
verified). The admin POST /releases route, the release.publish capability and
the ci-release preset are removed.

2026-10-08 18:50:16 +08:00

..

access.md

feat: trusted release keys setting; drop the duplicate release registration route [CI]

2026-10-08 18:50:16 +08:00

analysis.md

refactor!: rename the project from Monitor to MoShiro [CI]

2026-10-07 02:03:25 +08:00

api-guidelines.md

refactor!: rename the project from Monitor to MoShiro [CI]

2026-10-07 02:03:25 +08:00

api.md

feat: trusted release keys setting; drop the duplicate release registration route [CI]

2026-10-08 18:50:16 +08:00

architecture.md

feat: declare every protocol method's direction and enforce it in the router; add the zero-trust design [CI]

2026-10-07 16:17:02 +08:00

coding-style.md

docs: merge the Fleet docs into backend/fleet/README.md, add TODO.md, unify the Backend compose, fix stale references [CI SKIP]

2026-10-07 03:36:34 +08:00

deployment.md

feat: trusted release keys setting; drop the duplicate release registration route [CI]

2026-10-08 18:50:16 +08:00

enrollment.md

refactor: remove the runtime binary binding; every release registration path verifies the CI signature [CI]

2026-10-08 18:30:05 +08:00

measurement.md

feat: daily node restart controlled from the admin, connect timings as a default line task [CI]

2026-10-07 14:56:50 +08:00

project-layout.md

docs: merge the Fleet docs into backend/fleet/README.md, add TODO.md, unify the Backend compose, fix stale references [CI SKIP]

2026-10-07 03:36:34 +08:00

protocol.md

feat!: pre-handshake knock on the agent TCP ports; probes get the agent certificate public key [CI]

2026-10-07 18:56:40 +08:00

query.md

chore: initial project import

2026-10-04 21:46:39 +08:00

security.md

feat!: drop the backend-side elevation windows; password and passkey sessions share capabilities, passkeys guard what nodes verify; the trust page lists added and removed passkeys [CI]

2026-10-08 04:57:28 +08:00

storage.md

feat!: pre-handshake knock on the agent TCP ports; probes get the agent certificate public key [CI]

2026-10-07 18:56:40 +08:00