Skip to content

build: take libid-contracts 0.7.0 from crates.io, and follow the notary and libid-rs to their heads - #6

Merged
xgreenx merged 1 commit into
feat/notary-service-rotationfrom
chore/libid-contracts-0.7.0
Sep 8, 2026
Merged

xgreenx merged 1 commit into
feat/notary-service-rotationfrom
chore/libid-contracts-0.7.0

Conversation

@xgreenx

@xgreenx xgreenx commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

Stacked on #5. Two commits, manifests and lock only.

1. libid-contracts 0.7.0 from crates.io. The crate is published as of today (libid-org/libid-contracts v0.7.0), so the lock entry #5 resolved under a local path patch gains its source and checksum. This is what #5's Rust job failed on (failed to select a version for the requirement libid-contracts = "^0.7.0").

2. The notary and libid-rs at their branch heads. notary moves to the head of libid-org/notary#8 (cbf858a, stacked on #7), and libid-crypto/libid-signer move with it to libid-rs cc40b0c, the head of feat/ceremony-constructions that libid-rs#5 merged into, so the keeper and the notary share one copy of every libid-rs type. That head carries the reveal layouts that match what the verifier matches (libid-rs#8) and the refusal of a member that chunk framing runs through (libid-rs#9). The tlsn patch is unchanged. The manifest comments now name the branches the revs sit on.

Verified locally at each commit: cargo +nightly-2026-08-10 fmt --check, cargo build --locked, cargo clippy --locked --all-targets --all-features -- -D warnings, cargo test --locked --all with anvil on PATH: 18 unit tests and 4 integration tests pass, including keeper_rotates_the_roots_then_reaches_steady_state, the end-to-end rotation against a deployed NotaryService and GoogleJwtRoots from the 0.7.0 artifacts.

Merge order: notary#8 into its branch first is not required for this to build (the rev is reachable while notary#8's branch exists), but both pins return to tags only once the notary stack releases.

libid-contracts v0.7.0 is published, so the lock entry that was resolved
under a local path patch gains its registry source and checksum. Nothing
else moves: the manifest already asked for 0.7.0, and the notary and
libid-rs pins stay on their revs until those stacks release.

Verified against the published crate: nightly fmt, cargo build --locked,
clippy -D warnings, cargo test --all (18 unit, 4 integration incl. the
Anvil end-to-end rotation).

Assisted-by: Claude Fable 5.1
Signed-off-by: xgreenx <xgreenx9999@gmail.com>
@xgreenx
xgreenx marked this pull request as ready for review September 8, 2026 18:39
@xgreenx
xgreenx merged commit 0c5d803 into feat/notary-service-rotation Sep 8, 2026
3 checks passed
@xgreenx xgreenx changed the title build: take libid-contracts 0.7.0 from crates.io build: take libid-contracts 0.7.0 from crates.io, and follow the notary and libid-rs to their heads Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant