WIP: feat(manifest): git-gate.signing opt-in (PRD chunk 2) #485

Closed

didericis-claude wants to merge 1 commits from signed-commits-manifest into prd-forge-subroles

Author	SHA1	Message	Date
didericis-claude	e16efc86ad	feat(manifest): git-gate.signing opt-in (PRD chunk 2) test / integration-docker (pull_request) Successful in 38s Details lint / lint (push) Successful in 56s Details test / unit (pull_request) Successful in 52s Details test / integration-firecracker (pull_request) Successful in 3m48s Details test / coverage (pull_request) Successful in 15s Details test / publish-infra (pull_request) Has been skipped Details tracker-policy-pr / check-pr (pull_request) Failing after 24s Details Implements the manifest surface for the signed-commits & audit-attribution PRD (#423, PR #480): a bottle opts into per-activation commit signing with git-gate: signing: enabled: true - New ManifestGitSigning value type (frozen, enabled: bool = False) parsed under git-gate.signing; unknown sub-keys and non-bool `enabled` die with targeted errors. parse_git_gate_config now returns (repos, user, signing). - ManifestBottle gains git_signing; defaults to off, so bottles that omit the block are unchanged. - Bottle-only: git-gate.signing on an agent is rejected by the existing agent-level non-`user` guard (like git-gate.repos). - extends/runtime merges thread git_signing with an enable-wins overlay (a child enabling signing wins; omitting inherits the parent), mirroring the git_user non-empty-wins overlay. - Facade exports ManifestGitSigning. Tests: tests/unit/test_manifest_git_signing.py (parse, validation, agent-level rejection, extends overlay). Full unit suite green. This is the first stacked chunk; signing pipeline, gate signature check, and control-plane verification + audit tables follow per the PRD. Issue: #423 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-26 02:52:47 +00:00

Author

SHA1

Message

Date

didericis-claude

e16efc86ad

feat(manifest): git-gate.signing opt-in (PRD chunk 2)

test / integration-docker (pull_request) Successful in 38s

Details

lint / lint (push) Successful in 56s

Details

test / unit (pull_request) Successful in 52s

Details

test / integration-firecracker (pull_request) Successful in 3m48s

Details

test / coverage (pull_request) Successful in 15s

Details

test / publish-infra (pull_request) Has been skipped

Details

tracker-policy-pr / check-pr (pull_request) Failing after 24s

Details

Implements the manifest surface for the signed-commits & audit-attribution
PRD (#423, PR #480): a bottle opts into per-activation commit signing with

    git-gate:
      signing:
        enabled: true

- New ManifestGitSigning value type (frozen, enabled: bool = False) parsed
  under git-gate.signing; unknown sub-keys and non-bool `enabled` die with
  targeted errors. parse_git_gate_config now returns (repos, user, signing).
- ManifestBottle gains git_signing; defaults to off, so bottles that omit
  the block are unchanged.
- Bottle-only: git-gate.signing on an agent is rejected by the existing
  agent-level non-`user` guard (like git-gate.repos).
- extends/runtime merges thread git_signing with an enable-wins overlay
  (a child enabling signing wins; omitting inherits the parent), mirroring
  the git_user non-empty-wins overlay.
- Facade exports ManifestGitSigning.

Tests: tests/unit/test_manifest_git_signing.py (parse, validation,
agent-level rejection, extends overlay). Full unit suite green.

This is the first stacked chunk; signing pipeline, gate signature check,
and control-plane verification + audit tables follow per the PRD.

Issue: #423

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-26 02:52:47 +00:00

WIP: feat(manifest): git-gate.signing opt-in (PRD chunk 2) #485

1 Commits