rbrooks/TeaLeaves

v7: Signed write-path trust chain (AP Create/Update -> entry ops) #10

New issue

Closed

opened 2026-06-22 23:54:47 +00:00 by rbrooks · 0 comments

rbrooks commented

2026-06-22 23:54:47 +00:00

Owner

Accept entry writes from invited remote editors over a signed ActivityPub channel.

Verify the HTTP signature against the remote actor's public key (already cached via the AP actor cache in apDeliveryWorker)
Model contributions as AP Create/Update activities on Note objects; map to entry create/update
Only editors explicitly invited by the project owner can write - no open-inbox acceptance path

Imported from ROADMAP.md.

Accept entry writes from invited remote editors over a signed ActivityPub channel. - [ ] Verify the HTTP signature against the remote actor's public key (already cached via the AP actor cache in `apDeliveryWorker`) - [ ] Model contributions as AP `Create`/`Update` activities on `Note` objects; map to entry create/update - [ ] Only editors explicitly invited by the project owner can write - no open-inbox acceptance path --- _Imported from `ROADMAP.md`._

rbrooks added this to the v7.0.0 - Cross-Instance Collaborative Editing milestone

2026-06-22 23:54:47 +00:00

rbrooks added the

label

2026-06-22 23:54:47 +00:00

claude-bot referenced this issue

2026-06-29 20:28:53 +00:00

v7: Admin defederation kill-switch — sever a malicious/compromised instance #61

claude-bot referenced this issue

2026-06-29 21:28:04 +00:00

v7: Editor-side outbound — send signed writes + remote-project edit UI #62

claude-bot referenced this issue

2026-06-30 01:08:09 +00:00

feat: schema for cross-instance write path (#12) #63

rbrooks referenced this issue from a commit

2026-06-30 01:20:23 +00:00

feat(p9): remote-editor invites by AP actor URL (#9)

claude-bot referenced this issue

2026-06-30 01:24:31 +00:00

feat: remote-editor invites by AP actor URL (#9) #64

rbrooks referenced this issue from a commit

2026-06-30 01:35:03 +00:00

feat(p10): signed cross-instance write path (#10)

rbrooks referenced this issue from a commit

2026-06-30 01:35:03 +00:00

docs(p10): changelog for signed write path (#10)

claude-bot referenced this issue from a pull request that will close it,

2026-06-30 01:38:22 +00:00

feat: signed cross-instance write path (#10) #65

claude-bot closed this issue

2026-06-30 01:41:04 +00:00

claude-bot referenced this issue from a commit

2026-06-30 01:41:06 +00:00

Merge pull request 'feat: signed cross-instance write path (#10)' (#65) from feat/v7-signed-write-path into main

rbrooks referenced this issue from a commit

2026-06-30 01:43:13 +00:00

fix(security): require signed, matching digest on AP inbox (#10)

claude-bot referenced this issue

2026-06-30 01:47:24 +00:00

fix(security): require signed + matching digest on the AP inbox #66

claude-bot referenced this issue

2026-06-30 13:36:06 +00:00

feat: host project read endpoint for remote editors (#62, part 1) #69

Sign in to join this conversation.

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

rbrooks/TeaLeaves#10

No description provided.