Skip to main content

TideCloak 0.14.20

Summary​

TideCloak 0.14.20 continues the IGA multiAdmin signing correctness work from 0.14.19. Mapper owner sets and the mappers themselves are now covered by the batch-scoped signing pattern, the remaining derived owner-set families are in scope, pending lookups now see derived owner-set change requests, and unsignable carriers are refused with the offending change request named instead of failing anonymously.

Key Features​

IGA multiAdmin Signing Correctness (continued) : Extends the batch-scoped owner-set signing pattern introduced in 0.14.19. Mapper owner sets are now signed once per batch alongside the mappers themselves. The three remaining derived owner-set families are covered. Pending lookups now see derived owner-set change requests. A carrier the ORK could never sign is refused with the offending change request named, instead of failing anonymously.

Enclave SRI : sha256-ErqmfdYYaLof+z2EMEMO1ne0MSYR9OZDeA68+gUkBzk=

Upgrade Notes (0.14.19 → 0.14.20)​

  • No breaking changes. Continuation of the 0.14.19 IGA correctness cluster.

Detailed changelog​

For a granular per-repository breakdown of changes, see the detailed changelog.