CASAN

T

thanhnvandClaude Sonnet 4.6 c31987caa2 fix(tool-audit-lib): always re-export local pubkey to audit-public.pem

Previously the public key was only written on first key generation.
If a CI step (sign-audit-head.sh via Vault KMS) overwrote audit-public.pem
after the key was generated, subsequent calls to append_tool_audit signed
with the local key while audit-public.pem held the Vault key — causing
verify-tool-audit.sh to fail with signature mismatch.

Now the public key is re-exported on every call so audit-public.pem always
matches the private key used to sign tool-calls-head.sig.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-01 21:37:13 +09:00

.gitea/workflows

fix(ci): write DEPLOY_SSH_KEY via env var + strip CR + ensure trailing newline

2026-07-01 19:04:34 +09:00

00_SUBMISSION_PACKAGE

update first - 84

2026-06-30 02:21:39 +09:00

AINative_OKR_CASAN5

fix(tool-audit-lib): always re-export local pubkey to audit-public.pem

2026-07-01 21:37:13 +09:00

casan_harness_assessment.md

update first - 84