root/Jyotisha
2
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Record staging SSH host key rotation guard #13

Merged
jesse merged 1 commits from docs/record-staging-host-key-rotation into main 2026-08-06 14:27:14 +08:00
Conversation 0 Commits 1 Files Changed 1
+6
jesse commented 2026-08-06 14:24:28 +08:00
Owner
Copy Link
Copy Source

Summary

  • record the staging SSH host-key rotation encountered before personal-report release inspection
  • require exact comparison with the independently administered STAGING_KNOWN_HOSTS key
  • prohibit ssh-keyscan-only trust, disabled strict checking, unrelated known-host rewrites, or deployment-tree permission changes

Evidence

  • Gitea trusted ED25519 fingerprint and observed server ED25519 fingerprint matched exactly: SHA256:Ef6yauN4w70dbXG/SlhwB16HMw8/UeTlbQKOb64TtuA
  • strict SSH succeeded after scoped known_hosts replacement
  • governance focused tests passed

No runtime code, secrets, production configuration, or production deployment is changed.

## Summary - record the staging SSH host-key rotation encountered before personal-report release inspection - require exact comparison with the independently administered `STAGING_KNOWN_HOSTS` key - prohibit `ssh-keyscan`-only trust, disabled strict checking, unrelated known-host rewrites, or deployment-tree permission changes ## Evidence - Gitea trusted ED25519 fingerprint and observed server ED25519 fingerprint matched exactly: `SHA256:Ef6yauN4w70dbXG/SlhwB16HMw8/UeTlbQKOb64TtuA` - strict SSH succeeded after scoped known_hosts replacement - governance focused tests passed No runtime code, secrets, production configuration, or production deployment is changed.
jesse added 1 commit 2026-08-06 14:24:29 +08:00
docs(ops): record staging host key rotation guard eb4ebf7c73
jesse merged commit 8d636fc5ac into main 2026-08-06 14:27:14 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jesse root
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: root/Jyotisha#13
Delete Branch "docs/record-staging-host-key-rotation"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?