runtime

type KeyPinner ¶

type KeyPinner struct {
	// contains filtered or unexported fields
}

KeyPinner implements transport.Verifier with first-seen key pinning. The first valid key seen for a node ID sticks: later handshakes presenting a different key at the same generation are rejected with a loud log, and the operator recovers by bumping the generation, which is an intentional act. Pins persist in the journal, so restarts re-pin from replay instead of trusting whoever arrives first.

The steady path, a handshake presenting the pinned key, is one view read and records nothing. Recording happens only on first sight and rotation.

func (p *KeyPinner) Verify(ctx context.Context, id uuid.UUID, generation uint64, pub, sig []byte) error