open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-22 19:29:13 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(ql3): verify cluster evidence offline

Browse Source
This commit is contained in:
whyour
2026-08-16 07:40:55 +08:00
parent 4f62a86d15
commit 33b9eb2f5e
16 changed files with 1422 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/ql3-cluster-admin/README.md
+13
View File
@@ -27,6 +27,19 @@ outputs, environment, errors, credentials, unknown fields and Copilot model
text are omitted. Per-fact and top-level SHA-256 values provide self-integrity,
not a server signature, durable audit or action authority.
The same package provides an independently implemented offline verifier:
```sh
ql3-cluster-admin evidence-verify \
--bundle=/absolute/qinglong-cluster-evidence.json
```
It performs one read-only, no-follow file read, revalidates the complete fixed
schema/redaction/alias contract and recomputes the top-level digest without a
network request or file write. A verified result does not prove the server
origin, attestation or durable audit, and cannot recompute the per-fact hashes
because the deliberately omitted raw facts are not present.
The reviewed operator-workstation setup, private-file ceremony, release
verification, preflight and session lifecycle are documented in
`deploy/console/ql3-cluster-copilot/README.md`. Native execution binds host