- commit
- 06386b9c680e2c2e926128e773c9ecde5b247195
- parent
- 8dc64f954a718771d326e6e1190ad9cc374925cd
- author
- dami <gazey55@gmail.com>
| M | PLAN.md | 13 | ++++++++++++- |
@@ -944,7 +944,18 @@ minute); TOFU registry `data/machines.sqlite`; agent id
944944 row (models listed); unverified joins allowed, muted, never honoured.945945 This Mac is `m-4c879e83522b14c1` (dami); a signed join on the hosted day946946 made one verified row beside the three unverified name-claims from947-earlier. Second half (shoo.dev, `/link`, "yours") still open.947+earlier. Second half decided 2026-08-27 (in progress): adopt the tribes948+convention (`/Users/dami/Developer/tribes/docs/auth.md`) wholesale —949+identity file as JWK ed25519 in the tribes shape, key-auth message950+`mosaic-key-auth:<host>:<ts>`, `POST /api/keys/auth` mints a bearer951+token (one per key) that joins carry; any ed25519 tool can mint the952+key (Node snippet, openssl, Python; spec at `/identity`), no Deno953+required. shoo.dev sign-in as a `login` button right of "copy prompt"954+(shoo.js; id_token verified with jose against shoo's JWKS, aud955+`origin:<origin>`, HMAC session cookie), `logout` when signed in. The956+only thing a signed-in human can do that a visitor cannot: open a957+claim link an agent produced (`/link?t=...`, single use, 10 min) to958+bind that machine to their account.948959 949960 ### Status of the v2 items under this goal950961