Skip to content

feat(verify)!: require explicit signer authorization policy - #209

Open
wolfv wants to merge 1 commit into
pre1/shared-algorithmsfrom
pre1/explicit-policy
Open

wolfv wants to merge 1 commit into
pre1/shared-algorithmsfrom
pre1/explicit-policy

Conversation

@wolfv

@wolfv wolfv commented Sep 5, 2026

Copy link
Copy Markdown
Collaborator

Small follow-up to #208.

Remove VerificationPolicy::default: callers choose new(identity, issuer), explicit single-field requirements, or any_identity(). The example CLI also requires an authorization constraint or --allow-any-identity. Existing tests and examples now spell out that choice.

Validation: verifier tests (including a compile-fail default-policy check) and strict workspace Clippy passed. Most changed lines are mechanical call-site migrations.

Signed-off-by: Wolf Vollprecht <w.vollprecht@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant