root/Jyotisha
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Record staging SSH host key rotation guard #13

Merged
jesse merged 1 commits from docs/record-staging-host-key-rotation into main 2026-08-06 14:27:14 +08:00
Conversation 0 Commits 1 Files Changed 1
+6
jesse commented 2026-08-06 14:24:28 +08:00
Owner
Copy Link
Copy Source

Summary

  • record the staging SSH host-key rotation encountered before personal-report release inspection
  • require exact comparison with the independently administered STAGING_KNOWN_HOSTS key
  • prohibit ssh-keyscan-only trust, disabled strict checking, unrelated known-host rewrites, or deployment-tree permission changes

Evidence

  • Gitea trusted ED25519 fingerprint and observed server ED25519 fingerprint matched exactly: SHA256:Ef6yauN4w70dbXG/SlhwB16HMw8/UeTlbQKOb64TtuA
  • strict SSH succeeded after scoped known_hosts replacement
  • governance focused tests passed

No runtime code, secrets, production configuration, or production deployment is changed.

## Summary - record the staging SSH host-key rotation encountered before personal-report release inspection - require exact comparison with the independently administered `STAGING_KNOWN_HOSTS` key - prohibit `ssh-keyscan`-only trust, disabled strict checking, unrelated known-host rewrites, or deployment-tree permission changes ## Evidence - Gitea trusted ED25519 fingerprint and observed server ED25519 fingerprint matched exactly: `SHA256:Ef6yauN4w70dbXG/SlhwB16HMw8/UeTlbQKOb64TtuA` - strict SSH succeeded after scoped known_hosts replacement - governance focused tests passed No runtime code, secrets, production configuration, or production deployment is changed.
jesse added 1 commit 2026-08-06 14:24:29 +08:00
docs(ops): record staging host key rotation guard eb4ebf7c73
jesse merged commit 8d636fc5ac into main 2026-08-06 14:27:14 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
ready-for-agent
Fully specified, ready for an agent
 wayfinder:map
Wayfinder map issue holding the notes and child tickets
 wayfinder:task
Wayfinder child ticket
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
jesse root
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: root/Jyotisha#13