From 7e14f4dde523aa1c44467cba24e0349154d64682 Mon Sep 17 00:00:00 2001 From: Alex Godoroja Date: Tue, 23 Jun 2026 12:34:24 -0700 Subject: [PATCH 1/2] publishers: seed registry.json with the four published apps MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Create publishers/registry.json (SPEC §5.6) — the publisher identity map that ties each app's bundle-signing key to a known party for RC1 review. Seeds the four already-published apps: wallet, cosift, sixtyfour, smolmachines. Keys are the actual bundle store.publisher signing keys (pulled from the released manifests), NOT the metadata.json pubkeys — cosift's metadata pubkey is an all-zeros placeholder and sixtyfour's metadata pubkey does not match its signing key, so those metadata entries should be reconciled separately. Co-Authored-By: Claude Opus 4.8 (1M context) --- publishers/registry.json | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 publishers/registry.json diff --git a/publishers/registry.json b/publishers/registry.json new file mode 100644 index 0000000..2b2e412 --- /dev/null +++ b/publishers/registry.json @@ -0,0 +1,30 @@ +{ + "publishers": [ + { + "pubkey": "ed25519:VF8fdEP/Oe2aWN3ozQ7Ar22137tHb7dkSw0hlzlk/os=", + "name": "Pilot Protocol", + "contact": "apps@pilotprotocol.network", + "url": "https://pilotprotocol.network", + "apps": ["io.pilot.wallet"] + }, + { + "pubkey": "ed25519:EjoZEiV+j6oNZLRWNEEf8lEnC8XBkrvBAk4fxuZLLyU=", + "name": "Pilot Protocol", + "contact": "apps@pilotprotocol.network", + "url": "https://pilotprotocol.network", + "apps": ["io.pilot.cosift"] + }, + { + "pubkey": "ed25519:VoVCiQKPr73di2MlUd091a2Y6TCj/edSbCwRDtnYquI=", + "name": "Sixtyfour", + "url": "https://sixtyfour.ai", + "apps": ["io.pilot.sixtyfour"] + }, + { + "pubkey": "ed25519:3QJm6H6OdjtfrF+Es1lrRjfFmdtq2tGvVSWxia63vcI=", + "name": "smol machines", + "url": "https://smolmachines.com", + "apps": ["io.pilot.smolmachines"] + } + ] +} From 38c46f48d12d84c36ed88a67d95558e9c7e0b6a2 Mon Sep 17 00:00:00 2001 From: Alex Godoroja Date: Tue, 23 Jun 2026 13:27:18 -0700 Subject: [PATCH 2/2] =?UTF-8?q?publishers:=20add=20Telepat=20(io.telepat.i?= =?UTF-8?q?deon-free)=20=E2=80=94=20paired=20with=20app-template#16?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fold the Telepat publisher entry into the registry seed so identity for the five apps lands in one PR, paired with the Telepat submission (app-template#16). Telepat's pubkey matches its bundle store.publisher signing key (verified). Co-Authored-By: Claude Opus 4.8 (1M context) --- publishers/registry.json | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/publishers/registry.json b/publishers/registry.json index 2b2e412..8526519 100644 --- a/publishers/registry.json +++ b/publishers/registry.json @@ -25,6 +25,13 @@ "name": "smol machines", "url": "https://smolmachines.com", "apps": ["io.pilot.smolmachines"] + }, + { + "pubkey": "ed25519:5cqj+zTVecj8r0YRUShpgFi/g7TxDg1lkDKQzfNyDyc=", + "name": "Telepat", + "contact": "andrei@telepat.io", + "url": "https://telepat.io", + "apps": ["io.telepat.ideon-free"] } ] }