releasecontract

Aug 7, 2026

Changes in this version

type SigningLedgerLogLeafV1

+ func DecodeSigningLedgerLogLeaf(raw []byte) (SigningLedgerLogLeafV1, error)

Aug 5, 2026

Changes in this version

type RevocationPointerV1

+ func (document RevocationPointerV1) SigningPreimage() ([]byte, error)

type RevocationV2

+ func (document RevocationV2) SigningPreimage() ([]byte, error)

type RootDelegationV1

+ func (document RootDelegationV1) SigningPreimage() ([]byte, error)

type SourcePolicyPointerV1

+ func (document SourcePolicyPointerV1) SigningPreimage() ([]byte, error)

type SourcePolicyV2

+ func (document SourcePolicyV2) SigningPreimage() ([]byte, error)

Aug 2, 2026

Changes in this version

+ const ReleaseMetadataSchemaVersionV8

+ type ReleaseMetadataV8 struct

+ Compatibility ReleaseCompatibility

+ DistributionRef ReleaseDistributionRef

+ Hashes ReleasePackageHashSet

+ HostRequirements []ReleaseHostRequirement

+ Metadata map[string]string

+ PackageSignature PackageReleaseSignatureRef

+ PluginID string

+ PublisherID string

+ ReleaseEvidence *ReleaseEvidence

+ ReleaseMetadataRef string

+ ReleaseMetadataSignature ReleaseMetadataSignatureRef

+ SchemaVersion string

+ SourceID string

+ Version string

Aug 1, 2026

Changes in this version

+ const RevocationPointerSchemaVersionV1

+ const RevocationPointerSchemaVersionV2

+ const RevocationSchemaVersionV2

+ const RevocationSchemaVersionV3

+ const SourcePolicyPointerSchemaVersionV1

+ const SourcePolicyPointerSchemaVersionV2

+ const SourcePolicySchemaVersionV2

+ const SourcePolicySchemaVersionV3

type ReleasePointerInput

+ SchemaVersion string

type RevocationInput

+ SchemaVersion string

type SourcePolicyInput

+ SchemaVersion string

type SourcePolicyLimits

+ func PersonalMaintainerSourcePolicyLimits() SourcePolicyLimits

Jul 27, 2026

Changes in this version

+ const ReleaseMetadataSchemaVersionV7

Jul 26, 2026

Changes in this version

+ const ReleaseMetadataSchemaVersionV5

+ const ReleaseMetadataSchemaVersionV6

Jul 21, 2026

Changes in this version

+ const GenesisPreviousDocumentSHA256

+ const GenesisPreviousEpoch

+ const PackageSignatureSchemaVersion

+ const ReleaseMetadataSchemaVersion

+ const RevocationPointerSchemaVersion

+ const RevocationSchemaVersion

+ const RootDelegationSchemaVersion

+ const SignatureAlgorithmEd25519

+ const SigningEnvelopeSchemaVersion

+ const SigningLedgerEntrySchemaVersion

+ const SigningLedgerEvidenceSchemaVersion

+ const SigningLedgerLatestProofDepth

+ const SigningLedgerLogLeafSchemaVersion

+ const SigningLedgerReceiptSchemaVersion

+ const SigningLedgerSchemaVersion

+ const SigningSubjectSchemaVersion

+ const SourcePolicyPointerSchemaVersion

+ const SourcePolicySchemaVersion

+ var ErrInvalidDocument = errors.New("release contract document is invalid")

+ var ErrInvalidLedgerProof = errors.New("release signing ledger proof is invalid")

+ var ErrInvalidSignature = errors.New("release contract signature is invalid")

+ var ErrUnsupportedUsage = errors.New("release contract signing usage is unsupported")

+ var ErrVerifierRequired = errors.New("release contract signature verifier is required")

+ func CanonicalPackageSignature(context PackageVerificationContext, document PackageSignatureV1) ([]byte, error)

+ func CanonicalReleaseMetadata(document ReleaseMetadataV5) ([]byte, error)

+ func CanonicalRevocation(document RevocationV2) ([]byte, error)

+ func CanonicalRevocationPointer(document RevocationPointerV1) ([]byte, error)

+ func CanonicalRootDelegation(document RootDelegationV1) ([]byte, error)

+ func CanonicalSignatureEnvelope(envelope SignatureEnvelopeV1) ([]byte, error)

+ func CanonicalSigningLedgerCheckpoint(checkpoint SigningLedgerCheckpointV1) ([]byte, error)

+ func CanonicalSigningLedgerConsistencyProof(proof SigningLedgerConsistencyProofV1) ([]byte, error)

+ func CanonicalSigningLedgerEntry(entry SigningLedgerEntryV1) ([]byte, error)

+ func CanonicalSigningLedgerEvidence(evidence SigningLedgerEvidenceV1) ([]byte, error)

+ func CanonicalSigningLedgerInclusionProof(proof SigningLedgerInclusionProofV1) ([]byte, error)

+ func CanonicalSigningLedgerLatestProof(proof SigningLedgerLatestProofV1) ([]byte, error)

+ func CanonicalSigningLedgerLogLeaf(leaf SigningLedgerLogLeafV1) ([]byte, error)

+ func CanonicalSigningLedgerReceipt(receipt SigningLedgerReceiptV1) ([]byte, error)

+ func CanonicalSigningSubject(subject SigningSubjectV1) ([]byte, error)

+ func CanonicalSourcePolicy(document SourcePolicyV2) ([]byte, error)

+ func CanonicalSourcePolicyPointer(document SourcePolicyPointerV1) ([]byte, error)

+ func PackageSigningPreimage(input PackageSigningInput) ([]byte, error)

+ func ReleaseMetadataSigningPreimage(channel string, document ReleaseMetadataV5) ([]byte, error)

+ func RevocationPointerSigningPreimage(input ReleasePointerInput) ([]byte, error)

+ func RevocationSigningPreimage(input RevocationInput) ([]byte, error)

+ func RootDelegationSigningPreimage(input RootDelegationInput) ([]byte, error)

+ func SignatureEnvelopeSHA256(envelope SignatureEnvelopeV1) (string, error)

+ func SigningLedgerCheckpointSigningPreimage(checkpoint SigningLedgerCheckpointV1) ([]byte, error)

+ func SigningLedgerReceiptSigningPreimage(receipt SigningLedgerReceiptV1) ([]byte, error)

+ func SigningSubjectIdentitySHA256(subject SigningSubjectV1) (string, error)

+ func SourcePolicyPointerSigningPreimage(input ReleasePointerInput) ([]byte, error)

+ func SourcePolicySigningPreimage(input SourcePolicyInput) ([]byte, error)

+ func VerifyPackageSignature(context PackageVerificationContext, document PackageSignatureV1, ...) error

+ func VerifyReleaseMetadata(channel string, document ReleaseMetadataV5, signature []byte, ...) error

+ func VerifyRevocation(document RevocationV2, verifier SignatureVerifier) error

+ func VerifyRevocationPointer(document RevocationPointerV1, verifier SignatureVerifier) error

+ func VerifyRootDelegation(document RootDelegationV1, verifier SignatureVerifier) error

+ func VerifySignatureEnvelope(subject SigningSubjectV1, signingPreimage []byte, envelope SignatureEnvelopeV1, ...) error

+ func VerifySigningLedgerCheckpoint(checkpoint SigningLedgerCheckpointV1, verifier SignatureVerifier) error

+ func VerifySigningLedgerConsistency(previous, current SigningLedgerCheckpointV1, ...) error

+ func VerifySigningLedgerInclusion(receipt SigningLedgerReceiptV1, proof SigningLedgerInclusionProofV1, ...) error

+ func VerifySigningLedgerLatest(receipt SigningLedgerReceiptV1, proof SigningLedgerLatestProofV1, ...) error

+ func VerifySigningLedgerReceipt(receipt SigningLedgerReceiptV1, checkpoint SigningLedgerCheckpointV1, ...) error

+ func VerifySourcePolicy(document SourcePolicyV2, verifier SignatureVerifier) error

+ func VerifySourcePolicyPointer(document SourcePolicyPointerV1, verifier SignatureVerifier) error

+ type DelegatedKeyUsage string

+ const DelegatedKeyUsageHostCapabilityContract

+ const DelegatedKeyUsagePackage

+ const DelegatedKeyUsageReleaseMetadata

+ const DelegatedKeyUsageRevocation

+ const DelegatedKeyUsageRevocationPointer

+ const DelegatedKeyUsageSigningLedger

+ const DelegatedKeyUsageSourcePolicy

+ const DelegatedKeyUsageSourcePolicyPointer

+ const DelegatedKeyUsageTrustedTime

+ type Ed25519PublicKeyVerifier map[string]ed25519.PublicKey

+ func (keys Ed25519PublicKeyVerifier) VerifySignature(request SignatureVerificationRequest) error

+ type HostCapabilityContractRef struct

+ ArtifactRef string

+ ArtifactSHA256 string

+ CompatibilityRef string

+ CompatibilitySHA256 string

+ ContractID string

+ ContractVersion string

+ GeneratedClientRef string

+ GeneratedClientSHA256 string

+ ManifestRef string

+ ManifestSHA256 string

+ NoticesRef string

+ NoticesSHA256 string

+ PublisherID string

+ SignatureKeyID string

+ SignaturePolicyEpoch string

+ SignatureRef string

+ SignatureRevocationEpoch string

+ SignatureSHA256 string

+ type HostCapabilityRequirementRef struct

+ CapabilityID string

+ CapabilityVersion string

+ Contract HostCapabilityContractRef

+ type PackageReleaseSignatureRef struct

+ Algorithm string

+ KeyID string

+ RevocationEpoch string

+ SignatureBundleRef string

+ SourcePolicyEpoch string

+ type PackageSignatureV1 struct

+ Algorithm string

+ EntriesHash string

+ KeyID string

+ ManifestHash string

+ PackageHash string

+ PluginID string

+ PublisherID string

+ SchemaVersion string

+ Signature string

+ SignedAt string

+ func BuildPackageSignature(input PackageSigningInput, signature []byte) (PackageSignatureV1, error)

+ func DecodePackageSignature(raw []byte, context PackageVerificationContext) (PackageSignatureV1, error)

+ type PackageSigningInput struct

+ Algorithm string

+ Channel string

+ EntriesHash string

+ KeyID string

+ ManifestHash string

+ PackageHash string

+ PluginID string

+ PublisherID string

+ SignedAt string

+ SourceID string

+ Version string

+ type PackageVerificationContext struct

+ Channel string

+ SourceID string

+ Version string

+ type ReleaseCompatibility struct

+ MinReDevPluginVersion string

+ MinRuntimeVersion string

+ SupportedTargets []string

+ UIProtocolVersion string

+ type ReleaseDistributionRef struct

+ ArtifactRef string

+ Distribution string

+ type ReleaseEvidence struct

+ GeneratedAt string

+ NoticesSHA256 string

+ ProvenanceSHA256 string

+ type ReleaseHostRequirement struct

+ HostID string

+ MinHostVersion string

+ RequiredCapabilityContracts []HostCapabilityRequirementRef

+ type ReleaseMetadataSignatureRef struct

+ Algorithm string

+ KeyID string

+ RevocationEpoch string

+ SignatureRef string

+ SourcePolicyEpoch string

+ type ReleaseMetadataV5 struct

+ Compatibility ReleaseCompatibility

+ DistributionRef ReleaseDistributionRef

+ Hashes ReleasePackageHashSet

+ HostRequirements []ReleaseHostRequirement

+ Metadata map[string]string

+ PackageSignature PackageReleaseSignatureRef

+ PluginID string

+ PublisherID string

+ ReleaseEvidence *ReleaseEvidence

+ ReleaseMetadataRef string

+ ReleaseMetadataSignature ReleaseMetadataSignatureRef

+ SchemaVersion string

+ SourceID string

+ Version string

+ func BuildReleaseMetadata(document ReleaseMetadataV5) (ReleaseMetadataV5, error)

+ func DecodeReleaseMetadata(raw []byte) (ReleaseMetadataV5, error)

+ type ReleasePackageHashSet struct

+ EntriesSHA256 string

+ ManifestSHA256 string

+ PackageSHA256 string

+ type ReleasePointerInput struct

+ Channel string

+ DocumentSHA256 string

+ Epoch string

+ ExpiresAt string

+ GeneratedAt string

+ KeyID string

+ PreviousDocumentSHA256 string

+ PreviousEpoch string

+ Ref string

+ SourceID string

+ type RevocationInput struct

+ Channel string

+ Epoch string

+ ExpiresAt string

+ GeneratedAt string

+ KeyID string

+ PreviousDocumentSHA256 string

+ PreviousEpoch string

+ RevokedKeyIDs []string

+ RevokedReleases []RevokedRelease

+ RootEpoch string

+ SourceID string

+ type RevocationPointerV1 struct

+ Channel string

+ DocumentSHA256 string

+ Epoch string

+ ExpiresAt string

+ GeneratedAt string

+ KeyID string

+ PreviousDocumentSHA256 string

+ PreviousEpoch string

+ Ref string

+ SchemaVersion string

+ Signature string

+ SourceID string

+ func BuildRevocationPointer(input ReleasePointerInput, signature []byte) (RevocationPointerV1, error)

+ func DecodeRevocationPointer(raw []byte) (RevocationPointerV1, error)

+ type RevocationV2 struct

+ Channel string

+ Epoch string

+ ExpiresAt string

+ GeneratedAt string

+ KeyID string

+ PreviousDocumentSHA256 string

+ PreviousEpoch string

+ RevokedKeyIDs []string

+ RevokedReleases []RevokedRelease

+ RootEpoch string

+ SchemaVersion string

+ Signature string

+ SourceID string

+ func BuildRevocation(input RevocationInput, signature []byte) (RevocationV2, error)

+ func DecodeRevocation(raw []byte) (RevocationV2, error)

+ type RevokedRelease struct

+ PluginID string

+ PublisherID string

+ ReleaseMetadataSHA256 string

+ RevokedAt string

+ Version string

+ type RootDelegatedKey struct

+ Algorithm string

+ Channels []string

+ KeyID string

+ PublicKey string

+ Usages []DelegatedKeyUsage

+ ValidFrom string

+ ValidUntil string

+ type RootDelegationInput struct

+ DelegatedKeys []RootDelegatedKey

+ ExpiresAt string

+ GeneratedAt string

+ KeyID string

+ PreviousDelegationSHA256 string

+ PreviousRootEpoch string

+ RootEpoch string

+ SourceID string

+ type RootDelegationV1 struct

+ DelegatedKeys []RootDelegatedKey

+ ExpiresAt string

+ GeneratedAt string

+ KeyID string

+ PreviousDelegationSHA256 string

+ PreviousRootEpoch string

+ RootEpoch string

+ SchemaVersion string

+ Signature string

+ SourceID string

+ func BuildRootDelegation(input RootDelegationInput, signature []byte) (RootDelegationV1, error)

+ func DecodeRootDelegation(raw []byte) (RootDelegationV1, error)

+ type SignatureEnvelopeV1 struct

+ Algorithm string

+ KeyID string

+ SchemaVersion string

+ Signature string

+ SigningPreimageSHA256 string

+ SubjectIdentitySHA256 string

+ func DecodeSignatureEnvelope(raw []byte) (SignatureEnvelopeV1, error)

+ type SignatureVerificationRequest struct

+ KeyID string

+ Signature []byte

+ SigningPreimageSHA256 [sha256.Size]byte

+ Usage SigningUsage

+ type SignatureVerifier interface

+ VerifySignature func(SignatureVerificationRequest) error

+ type SignatureVerifierFunc func(SignatureVerificationRequest) error

+ func (verify SignatureVerifierFunc) VerifySignature(request SignatureVerificationRequest) error

+ type SigningLedgerArtifactKind string

+ const SigningLedgerArtifactCheckpoint

+ const SigningLedgerArtifactConsistencyProof

+ const SigningLedgerArtifactInclusionProof

+ const SigningLedgerArtifactLatestProof

+ type SigningLedgerCheckpointV1 struct

+ CheckpointTime string

+ KeyID string

+ Kind SigningLedgerArtifactKind

+ LatestMapRootHash string

+ LogID string

+ LogRootHash string

+ SchemaVersion string

+ Signature string

+ TreeSize uint64

+ func DecodeSigningLedgerCheckpoint(raw []byte) (SigningLedgerCheckpointV1, error)

+ type SigningLedgerConsistencyProofV1 struct

+ Kind SigningLedgerArtifactKind

+ LogID string

+ NewTreeSize uint64

+ Nodes []string

+ OldTreeSize uint64

+ SchemaVersion string

+ func DecodeSigningLedgerConsistencyProof(raw []byte) (SigningLedgerConsistencyProofV1, error)

+ type SigningLedgerEntryState string

+ const SigningLedgerEntryFinalized

+ const SigningLedgerEntryReserved

+ const SigningLedgerEntryTerminalFailed

+ type SigningLedgerEntryV1 struct

+ Algorithm string

+ FailedAt string

+ FailureCode SigningLedgerFailureCode

+ FinalizedAt string

+ KeyID string

+ ReservedAt string

+ Revision uint64

+ SchemaVersion string

+ SignatureEnvelope *SignatureEnvelopeV1

+ SignatureEnvelopeSHA256 string

+ SigningPreimageSHA256 string

+ State SigningLedgerEntryState

+ Subject SigningSubjectV1

+ SubjectIdentitySHA256 string

+ func DecodeSigningLedgerEntry(raw []byte) (SigningLedgerEntryV1, error)

+ type SigningLedgerEvidenceV1 struct

+ Channel string

+ CheckpointRef string

+ CheckpointSHA256 string

+ ConsistencyProofRef string

+ ConsistencyProofSHA256 string

+ InclusionProofRef string

+ InclusionProofSHA256 string

+ LatestProofRef string

+ LatestProofSHA256 string

+ ReceiptRef string

+ ReceiptSHA256 string

+ SchemaVersion string

+ SignatureEnvelopeSHA256 string

+ SigningPreimageSHA256 string

+ SourceID string

+ SubjectIdentitySHA256 string

+ func DecodeSigningLedgerEvidence(raw []byte) (SigningLedgerEvidenceV1, error)

+ type SigningLedgerFailureCode string

+ const SigningLedgerFailureLedgerRejected

+ const SigningLedgerFailureSignerRejected

+ const SigningLedgerFailureSubjectConflict

+ type SigningLedgerInclusionProofV1 struct

+ Kind SigningLedgerArtifactKind

+ LeafIndex uint64

+ LogID string

+ Nodes []string

+ SchemaVersion string

+ TreeSize uint64

+ func DecodeSigningLedgerInclusionProof(raw []byte) (SigningLedgerInclusionProofV1, error)

+ type SigningLedgerLatestProofV1 struct

+ Kind SigningLedgerArtifactKind

+ LogID string

+ Present bool

+ SchemaVersion string

+ Sequence uint64

+ Siblings []string

+ SignatureEnvelopeSHA256 string

+ SigningPreimageSHA256 string

+ SubjectIdentitySHA256 string

+ func DecodeSigningLedgerLatestProof(raw []byte) (SigningLedgerLatestProofV1, error)

+ type SigningLedgerLogLeafV1 struct

+ Channel string

+ SchemaVersion string

+ Sequence uint64

+ SignatureEnvelopeSHA256 string

+ SigningPreimageSHA256 string

+ SourceID string

+ SubjectIdentitySHA256 string

+ func SigningLedgerLogLeafFromReceipt(receipt SigningLedgerReceiptV1) (SigningLedgerLogLeafV1, error)

+ type SigningLedgerReceiptV1 struct

+ Channel string

+ CheckpointSHA256 string

+ CheckpointTime string

+ KeyID string

+ LatestMapRootHash string

+ LeafIndex uint64

+ LogID string

+ LogRootHash string

+ SchemaVersion string

+ Sequence uint64

+ Signature string

+ SignatureEnvelopeSHA256 string

+ SigningPreimageSHA256 string

+ SourceID string

+ SubjectIdentitySHA256 string

+ TreeSize uint64

+ func DecodeSigningLedgerReceipt(raw []byte) (SigningLedgerReceiptV1, error)

+ type SigningSubjectUsage string

+ const SigningSubjectUsagePackage

+ const SigningSubjectUsageReleaseMetadata

+ const SigningSubjectUsageRevocation

+ const SigningSubjectUsageRevocationPointer

+ const SigningSubjectUsageRootDelegation

+ const SigningSubjectUsageSourcePolicy

+ const SigningSubjectUsageSourcePolicyPointer

+ type SigningSubjectV1 struct

+ ArtifactIdentitySHA256 string

+ Channel string

+ Epoch string

+ PluginID string

+ PublisherID string

+ RootEpoch string

+ SchemaVersion string

+ SourceID string

+ Usage SigningSubjectUsage

+ Version string

+ func DecodeSigningSubject(raw []byte) (SigningSubjectV1, error)

+ type SigningUsage string

+ const SigningUsageLedgerCheckpoint

+ const SigningUsageLedgerReceipt

+ const SigningUsagePackage

+ const SigningUsageReleaseMetadata

+ const SigningUsageRevocation

+ const SigningUsageRevocationPointer

+ const SigningUsageRootDelegation

+ const SigningUsageSourcePolicy

+ const SigningUsageSourcePolicyPointer

+ type SourcePolicyActiveKeys struct

+ HostCapabilityContract []string

+ Package []string

+ ReleaseMetadata []string

+ Revocation []string

+ RevocationPointer []string

+ SourcePolicyPointer []string

+ type SourcePolicyCapabilityPublisherScope struct

+ AllowedPublishers []string

+ KeyID string

+ type SourcePolicyInput struct

+ ActiveKeys SourcePolicyActiveKeys

+ AllowedArtifactHosts []string

+ AllowedPublishers []string

+ CapabilityPublisherScopes []SourcePolicyCapabilityPublisherScope

+ Channel string

+ DowngradePolicy string

+ Epoch string

+ ExpiresAt string

+ GeneratedAt string

+ InstallPolicy string

+ KeyID string

+ Limits SourcePolicyLimits

+ MinimumRevocationEpoch string

+ PreviousDocumentSHA256 string

+ PreviousEpoch string

+ RequireSignature bool

+ RootEpoch string

+ SourceClass string

+ SourceID string

+ SourceType string

+ UnsignedPolicy string

+ type SourcePolicyLimits struct

+ ActivationLeaseMaxSeconds int

+ DocumentMaxLifetimeSeconds int

+ FailureTeardownDeadlineSeconds int

+ FutureSkewSeconds int

+ RefreshIntervalMaxSeconds int

+ func DefaultSourcePolicyLimits() SourcePolicyLimits

+ type SourcePolicyPointerV1 struct

+ Channel string

+ DocumentSHA256 string

+ Epoch string

+ ExpiresAt string

+ GeneratedAt string

+ KeyID string

+ PreviousDocumentSHA256 string

+ PreviousEpoch string

+ Ref string

+ SchemaVersion string

+ Signature string

+ SourceID string

+ func BuildSourcePolicyPointer(input ReleasePointerInput, signature []byte) (SourcePolicyPointerV1, error)

+ func DecodeSourcePolicyPointer(raw []byte) (SourcePolicyPointerV1, error)

+ type SourcePolicyV2 struct

+ ActiveKeys SourcePolicyActiveKeys

+ AllowedArtifactHosts []string

+ AllowedPublishers []string

+ CapabilityPublisherScopes []SourcePolicyCapabilityPublisherScope

+ Channel string

+ DowngradePolicy string

+ Epoch string

+ ExpiresAt string

+ GeneratedAt string

+ InstallPolicy string

+ KeyID string

+ Limits SourcePolicyLimits

+ MinimumRevocationEpoch string

+ PreviousDocumentSHA256 string

+ PreviousEpoch string

+ RequireSignature bool

+ RootEpoch string

+ SchemaVersion string

+ Signature string

+ SourceClass string

+ SourceID string

+ SourceType string

+ UnsignedPolicy string

+ func BuildSourcePolicy(input SourcePolicyInput, signature []byte) (SourcePolicyV2, error)

+ func DecodeSourcePolicy(raw []byte) (SourcePolicyV2, error)