Skip to content

docs: Signer state reference and integrity in the security model - #745

Merged
cdecker merged 2 commits into
mainfrom
2026m09-signer-state-integrity-docs
Oct 14, 2026
Merged

cdecker merged 2 commits into
mainfrom
2026m09-signer-state-integrity-docs

Conversation

@cdecker

@cdecker cdecker commented Sep 15, 2026

Copy link
Copy Markdown
Collaborator

Adds documentation on how the signer handles the state it receives from the node.

  • New page Reference > Signer State: what the signer state is, how the node and signers keep it in sync (heartbeat snapshot, diffs, pipelining, multiple signers), the state signature modes (off/soft/hard) with configuration examples, and the operator-assisted override.
  • Planned state anchor (marked as planned, names may change): a small device-side record of the latest version of every key a signer has seen, which lets a signer refuse rolled-back, incomplete or resurrected state on start. Covers signers without an anchor (pairing, recovery), storage via an interface in gl-client with file-backed implementations in the higher-level libraries, the report/enforce option, clearing the anchor, and its limits.
  • Security page: new "Signer State Integrity" section with the trust split between node infrastructure, signer and embedding application.

mkdocs build passes locally.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Ji71TQF9Mzmw65zDR1juzH

@cdecker
cdecker force-pushed the 2026m09-signer-state-integrity-docs branch from 72c4cf1 to 1049d60 Compare October 13, 2026 11:27
@cdecker
cdecker enabled auto-merge (rebase) October 13, 2026 11:28
@cdecker
cdecker force-pushed the 2026m09-signer-state-integrity-docs branch 2 times, most recently from 5b0c278 to 877ef7d Compare October 14, 2026 11:03
cdecker and others added 2 commits October 14, 2026 13:53
Describe what the signer state is, how it is synchronized between node
and signers, the state signature modes and override, and the planned
state anchor for freshness and completeness, including its storage,
enforcement option and recovery.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ji71TQF9Mzmw65zDR1juzH
Add the trust split for the signer state stored by the node, and how
state signatures and the planned state anchor protect it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ji71TQF9Mzmw65zDR1juzH
@cdecker
cdecker force-pushed the 2026m09-signer-state-integrity-docs branch from 877ef7d to 4215837 Compare October 14, 2026 11:53
@cdecker
cdecker merged commit 33934be into main Oct 14, 2026
16 of 17 checks passed
@cdecker
cdecker deleted the 2026m09-signer-state-integrity-docs branch October 14, 2026 13:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant