mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67dandTyler Longwell
93bec73809
Wren's contract-review blocker: the chart shares one BUZZ_RELAY_PRIVATE_KEY Secret across all pods of a release, and that key is secp256k1 while iroh endpoint ids are ed25519 — so 'runtime id = relay signing pubkey' would give every pod the same runtime id (registry/lease collapse) and doesn't even type-check against iroh. RuntimeId is now the ed25519 pubkey of a mesh keypair generated fresh at process start: boot-unique by construction, and identical to the iroh endpoint id so transport auth and ownership identity stay one value. Deployment-identity binding moves out-of-band: the ready registry record carries a relay-key-signed attestation of the runtime pubkey (membership lane); peers accept connections only from attested endpoint ids. Doc-only change; no wire shape or test change. Co-authored-by: Tyler Longwell <tlongwell@block.xyz> Signed-off-by: Tyler Longwell <tlongwell@block.xyz>