Skip to content

docs: Signer state reference and integrity in the security model - #745

Open
cdecker wants to merge 2 commits into
mainfrom
2026m09-signer-state-integrity-docs
Open

cdecker wants to merge 2 commits into
mainfrom
2026m09-signer-state-integrity-docs

Conversation

@cdecker

@cdecker cdecker commented Sep 15, 2026

Copy link
Copy Markdown
Collaborator

Adds documentation on how the signer handles the state it receives from the node.

  • New page Reference > Signer State: what the signer state is, how the node and signers keep it in sync (heartbeat snapshot, diffs, pipelining, multiple signers), the state signature modes (off/soft/hard) with configuration examples, and the operator-assisted override.
  • Planned state anchor (marked as planned, names may change): a small device-side record of the latest version of every key a signer has seen, which lets a signer refuse rolled-back, incomplete or resurrected state on start. Covers signers without an anchor (pairing, recovery), storage via an interface in gl-client with file-backed implementations in the higher-level libraries, the report/enforce option, clearing the anchor, and its limits.
  • Security page: new "Signer State Integrity" section with the trust split between node infrastructure, signer and embedding application.

mkdocs build passes locally.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Ji71TQF9Mzmw65zDR1juzH

cdecker and others added 2 commits September 15, 2026 13:56
Describe what the signer state is, how it is synchronized between node
and signers, the state signature modes and override, and the planned
state anchor for freshness and completeness, including its storage,
enforcement option and recovery.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ji71TQF9Mzmw65zDR1juzH
Add the trust split for the signer state stored by the node, and how
state signatures and the planned state anchor protect it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ji71TQF9Mzmw65zDR1juzH
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant