Publish first signed Site Registry catalog trust
Some checks failed
Standalone registry checks / check (push) Has been cancelled

This commit is contained in:
Nic Weyand 2026-09-20 11:57:47 -04:00
commit 16c740a98f
Signed by: nicweyand
SSH key fingerprint: SHA256:2te+ycJIQON/Wo/dH6+ZkFSQ4HnHWpetV2azx9E65dQ
8 changed files with 121 additions and 13 deletions

View file

@ -12,10 +12,12 @@ facebook -> Facebook (Wikidata Q355) -> https://www.facebook.com/
public suffix: com
```
The repository contains the library, CLI, schemas, migrations, and synthetic
fixtures. It does not contain a preapproved production dataset. A publisher must
import source evidence, collect signed reviews, and distribute a signed registry
generation.
The repository contains the library, CLI, schemas, migrations, synthetic
fixtures, and independently authenticated public trust roots. It does not place a
mutable production database in Git. Publishers import source evidence, collect
signed reviews, and distribute immutable signed registry generations. The first
public catalog generation is available as a release asset; see
[Public catalog](docs/PUBLIC_CATALOG.md).
## The basic idea