Skip to content

Revert "rotate publisher key: io.pilot.wallet (#528)" - #530

Merged
TeoSlayer merged 1 commit into
mainfrom
revert/wallet-publisher-rotation
Oct 8, 2026
Merged

TeoSlayer merged 1 commit into
mainfrom
revert/wallet-publisher-rotation

Conversation

@TeoSlayer

Copy link
Copy Markdown
Collaborator

Restores the catalogue and its signature byte for byte to their state before #528.

#528 re-pinned io.pilot.wallet to a new publisher key, to be followed straight away by the 0.4.0 entry signed with that key (#529). #529 is on hold: pilotctl v1.13.0–v1.13.9 delete an app's state on upgrade (state carry-forward arrived in v1.13.10, #467), so the hourly upgrade --all on those nodes would delete 0.3.3 wallets' EVM keys. That is tested, not inferred.

With the new pin and no 0.4.0 entry, every daemon refuses the installed 0.3.3 wallets (signed with the old key) at its next pin refresh, and new installs fail. This puts the old pin back.

🤖 Generated with Claude Code

The rotated pin only works once the wallet 0.4.0 entry (signed with the
new key) is live. That entry is on hold: pilotctl v1.13.0-v1.13.9 delete
an app's state on upgrade, so the hourly upgrade --all would delete
0.3.3 wallets' EVM keys. Until then the new pin makes every daemon
refuse the installed 0.3.3 wallets (signed with the old key) and fails
new installs. This restores the previous catalogue and signature byte
for byte.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@TeoSlayer
TeoSlayer merged commit 3868262 into main Oct 8, 2026
14 of 15 checks passed
@TeoSlayer
TeoSlayer deleted the revert/wallet-publisher-rotation branch October 8, 2026 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant