Gordian Envelope Use Cases: Software & AI Industry
Gordian Envelopes can be used to manage the secure development and distribution of open-source software, as well as the development of AI systems. There are a number of possible usages.
Gordian Envelopes can securely and accurately transmit complex data structures, such as software source code, AI training sets, and model data, between members of a development team and other stakeholders. This helps to ensure that the integrity of the code or models is maintained throughout the software development life-cycle and that only authorized individuals have access to the potentially sensitive data. Though ensuring the validity of software libraries has been a known problem for years, maintaining valid, high-quality AI training sets is a newer issue that requires its own options for independent verification and auditing — options that can be supported by Gordian Envelope.
Gordian Envelopes can also be used to improve the security of the software supply chain. They can be used to securely transmit software packages and updates between different parties such as developers, distributors, and end users. This can help to prevent tampering or other security breaches and ensure that only verified, trustworthy software is distributed. Much of this support comes through robust authentication and signing mechanisms, allowing signing of releases by multiple parties, by dynamically changing parties, and even by anonymous parties.
Finally, Gordian Envelopes can support the reliability and availability of software infrastructure. For example, they can be used to securely transmit configuration data, cryptographic keys, and other information needed to maintain and operate software systems. This can help to ensure that systems are more reliable and properly configured and that data needed for backup and recovery is securely transmitted and stored.
Overall, Gordian Envelopes offer a range of benefits for the software and AI industry, including improved security, reliability, and support for open-source collaboration and the deployment of AI systems.
Software Use Cases Table of Contents
Envelopes can be used in a variety of collaborative forms. Following are examples of collaborative signing, where a group of individuals jointly declare the validity of an envelope to ensure the trustworthiness of a software release. Two setse of use cases are each presented progressively. The first demonstrates how a group of users can jointly validate the contents of an envelope, even as the group evolves over time; and the second shows how an individual can chose first anonymity and then progressive disclosure.
Gordian Envelopes are useful for signing software releases in large part because of their ability to combine signatures with metadata and to chain that information over time through multiple signed documents. This allows for the creation of a history of signatures, which can have a variety of applications. Elision can also add powerful privacy enhancements to traditional signing methodologies.
- Part One: Chained Signing
- #1: Casey Codifies Software Releases (Multiple Signatures, Structured Data)
- #2: Blockchain Commons Confirms Casey (Repackaging Data, Third-Party Verification)
- #3: Casey Chains His Software Releases (Chained Data)
- #4: Casey Checks Compliance (Attestation)
- #5: Casey Changes Up His Software Releases (Chained Changes)
- Part Two: Anonymous Signing
Part One: Chained Signing
This set of progressive use cases describes how a user can structure and sign data, how third-parties can verify that data, how a user can chain envelopes of data over time, how additional metadata can be added to envelopes, and how signers can change over time. They demonstrate how well-structured envelopes can decrease validation costs and improve trust.
1. Casey Codifies Software Releases [Multiple Signatures, Structured Data]
Problem: Casey needs to produce multi-signed software releases using structured files that are easily checkable by automated means.
The possibility of malicious actors injecting code into software is a prime attack vector, especially on the modern internet with its open-source repositories. Thus, checksumming and signing sotware releases has become increasingly important. Unfortunately, it remains very ad hoc, with styles of release varying widely and information often split among many files.
Casey is the project head for Blockchain Everyday’s Gordian Envelope. He decides on a methodology for releases where he’ll store all of the release information in a single Gordian Envelope with regularized data and then have the engineers sign that data. He also wants to do his best to automate validation of the envelope data, since he knows that will make it more likely that the data is actually checked. He’ll provide some bootstrapping information in the first Envelope to support validation, and then link later software releases to this initial one, allowing for programmatic validation.
A precise and carefully considered structure is the foundation of the software-release information. Casey fills in an Envelope with a list of all the files, a list of all the signers, data on each, and some additional notes:
"Gordian Envelope 1.0.0" [
"fileInfo": "gordian-envelope-1.0.0.dm" [
"sha256": "6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec"
"timestamp": "1668062209"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
note: "initial release"
]
graph LR
1(("ac65545b<br/>NODE"))
2["de7e544e<br/>#quot;Gordian Envelope 1.0.0#quot;"]
3(["41db7106<br/>ASSERTION"])
4["628ac8d9<br/>#quot;fileInfo#quot;"]
5(("10561183<br/>NODE"))
6["03c3e8cf<br/>#quot;gordian-envelope-1.0.0.dm#quot;"]
7(["26cdea4a<br/>ASSERTION"])
8["fd9d5aed<br/>#quot;timestamp#quot;"]
9["928e86de<br/>#quot;1668062209#quot;"]
10(["b25bf99e<br/>ASSERTION"])
11["108dbfb1<br/>#quot;sha256#quot;"]
12["b895faae<br/>#quot;6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec#quot;"]
13(["484da754<br/>ASSERTION"])
14["67d69bd7<br/>#quot;isSigner#quot;"]
15(("0ae65c77<br/>NODE"))
16["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
17(["0ad198e4<br/>ASSERTION"])
18["d52596f8<br/>#quot;pubkey#quot;"]
19["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
20(["72d6fac6<br/>ASSERTION"])
21[/"61fb6a6b<br/>note"/]
22["fa62ba29<br/>#quot;initial release#quot;"]
23(["90e799be<br/>ASSERTION"])
24["67d69bd7<br/>#quot;isSigner#quot;"]
25(("c833b577<br/>NODE"))
26["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
27(["0b8d474f<br/>ASSERTION"])
28["d52596f8<br/>#quot;pubkey#quot;"]
29["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
5 --> 10
10 -->|pred| 11
10 -->|obj| 12
1 --> 13
13 -->|pred| 14
13 -->|obj| 15
15 -->|subj| 16
15 --> 17
17 -->|pred| 18
17 -->|obj| 19
1 --> 20
20 -->|pred| 21
20 -->|obj| 22
1 --> 23
23 -->|pred| 24
23 -->|obj| 25
25 -->|subj| 26
25 --> 27
27 -->|pred| 28
27 -->|obj| 29
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:red,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:#55f,stroke-width:3.0px
style 20 stroke:red,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:red,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
style 25 stroke:red,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:red,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:green,stroke-width:2.0px
linkStyle 10 stroke:#55f,stroke-width:2.0px
linkStyle 11 stroke-width:2.0px
linkStyle 12 stroke:green,stroke-width:2.0px
linkStyle 13 stroke:#55f,stroke-width:2.0px
linkStyle 14 stroke:red,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke:green,stroke-width:2.0px
linkStyle 17 stroke:#55f,stroke-width:2.0px
linkStyle 18 stroke-width:2.0px
linkStyle 19 stroke:green,stroke-width:2.0px
linkStyle 20 stroke:#55f,stroke-width:2.0px
linkStyle 21 stroke-width:2.0px
linkStyle 22 stroke:green,stroke-width:2.0px
linkStyle 23 stroke:#55f,stroke-width:2.0px
linkStyle 24 stroke:red,stroke-width:2.0px
linkStyle 25 stroke-width:2.0px
linkStyle 26 stroke:green,stroke-width:2.0px
linkStyle 27 stroke:#55f,stroke-width:2.0px
Since this is the initial release of the Envelope, no one knows whether the signers can be trusted or not. Casey bootstraps the envelope by adding signerInfo hints, which tell validators where they can go to get more information about the included public keys. As usual, validators will then have to thoughtfully address the trustworthiness of that information.
"Gordian Envelope 1.0.0" [
"fileInfo": "gordian-envelope-1.0.0.dm" [
"sha256": "6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec"
"timestamp": "1668062209"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"signerInfo": "bill-not-the-science-guy" [
"pubkeyURL": "https://github.com/bill-not-the-science-guy.keys"
]
"signerInfo": "omarc-bc-guy" [
"pubkeyURL": "https://github.com/omarc-bc-guy.keys"
]
note: "initial release"
]
graph LR
1(("d19ef9e7<br/>NODE"))
2["de7e544e<br/>#quot;Gordian Envelope 1.0.0#quot;"]
3(["41db7106<br/>ASSERTION"])
4["628ac8d9<br/>#quot;fileInfo#quot;"]
5(("10561183<br/>NODE"))
6["03c3e8cf<br/>#quot;gordian-envelope-1.0.0.dm#quot;"]
7(["26cdea4a<br/>ASSERTION"])
8["fd9d5aed<br/>#quot;timestamp#quot;"]
9["928e86de<br/>#quot;1668062209#quot;"]
10(["b25bf99e<br/>ASSERTION"])
11["108dbfb1<br/>#quot;sha256#quot;"]
12["b895faae<br/>#quot;6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec#quot;"]
13(["484da754<br/>ASSERTION"])
14["67d69bd7<br/>#quot;isSigner#quot;"]
15(("0ae65c77<br/>NODE"))
16["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
17(["0ad198e4<br/>ASSERTION"])
18["d52596f8<br/>#quot;pubkey#quot;"]
19["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
20(["4ef0d8f2<br/>ASSERTION"])
21["dbc1553d<br/>#quot;signerInfo#quot;"]
22(("d77c0291<br/>NODE"))
23["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
24(["9bc4beec<br/>ASSERTION"])
25["29c0cd61<br/>#quot;pubkeyURL#quot;"]
26["78d7942e<br/>#quot;https://github.com/omarc-bc-guy.keys#quot;"]
27(["72d6fac6<br/>ASSERTION"])
28[/"61fb6a6b<br/>note"/]
29["fa62ba29<br/>#quot;initial release#quot;"]
30(["90e799be<br/>ASSERTION"])
31["67d69bd7<br/>#quot;isSigner#quot;"]
32(("c833b577<br/>NODE"))
33["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
34(["0b8d474f<br/>ASSERTION"])
35["d52596f8<br/>#quot;pubkey#quot;"]
36["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
37(["b5c9129a<br/>ASSERTION"])
38["dbc1553d<br/>#quot;signerInfo#quot;"]
39(("67a2f813<br/>NODE"))
40["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
41(["8f4c7eec<br/>ASSERTION"])
42["29c0cd61<br/>#quot;pubkeyURL#quot;"]
43["0b240880<br/>#quot;https://github.com/bill-not-the-science-guy.keys#quot;"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
5 --> 10
10 -->|pred| 11
10 -->|obj| 12
1 --> 13
13 -->|pred| 14
13 -->|obj| 15
15 -->|subj| 16
15 --> 17
17 -->|pred| 18
17 -->|obj| 19
1 --> 20
20 -->|pred| 21
20 -->|obj| 22
22 -->|subj| 23
22 --> 24
24 -->|pred| 25
24 -->|obj| 26
1 --> 27
27 -->|pred| 28
27 -->|obj| 29
1 --> 30
30 -->|pred| 31
30 -->|obj| 32
32 -->|subj| 33
32 --> 34
34 -->|pred| 35
34 -->|obj| 36
1 --> 37
37 -->|pred| 38
37 -->|obj| 39
39 -->|subj| 40
39 --> 41
41 -->|pred| 42
41 -->|obj| 43
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:red,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:#55f,stroke-width:3.0px
style 20 stroke:red,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:red,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:red,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:red,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:red,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:red,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:#55f,stroke-width:3.0px
style 37 stroke:red,stroke-width:3.0px
style 38 stroke:#55f,stroke-width:3.0px
style 39 stroke:red,stroke-width:3.0px
style 40 stroke:#55f,stroke-width:3.0px
style 41 stroke:red,stroke-width:3.0px
style 42 stroke:#55f,stroke-width:3.0px
style 43 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:green,stroke-width:2.0px
linkStyle 10 stroke:#55f,stroke-width:2.0px
linkStyle 11 stroke-width:2.0px
linkStyle 12 stroke:green,stroke-width:2.0px
linkStyle 13 stroke:#55f,stroke-width:2.0px
linkStyle 14 stroke:red,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke:green,stroke-width:2.0px
linkStyle 17 stroke:#55f,stroke-width:2.0px
linkStyle 18 stroke-width:2.0px
linkStyle 19 stroke:green,stroke-width:2.0px
linkStyle 20 stroke:#55f,stroke-width:2.0px
linkStyle 21 stroke:red,stroke-width:2.0px
linkStyle 22 stroke-width:2.0px
linkStyle 23 stroke:green,stroke-width:2.0px
linkStyle 24 stroke:#55f,stroke-width:2.0px
linkStyle 25 stroke-width:2.0px
linkStyle 26 stroke:green,stroke-width:2.0px
linkStyle 27 stroke:#55f,stroke-width:2.0px
linkStyle 28 stroke-width:2.0px
linkStyle 29 stroke:green,stroke-width:2.0px
linkStyle 30 stroke:#55f,stroke-width:2.0px
linkStyle 31 stroke:red,stroke-width:2.0px
linkStyle 32 stroke-width:2.0px
linkStyle 33 stroke:green,stroke-width:2.0px
linkStyle 34 stroke:#55f,stroke-width:2.0px
linkStyle 35 stroke-width:2.0px
linkStyle 36 stroke:green,stroke-width:2.0px
linkStyle 37 stroke:#55f,stroke-width:2.0px
linkStyle 38 stroke:red,stroke-width:2.0px
linkStyle 39 stroke-width:2.0px
linkStyle 40 stroke:green,stroke-width:2.0px
linkStyle 41 stroke:#55f,stroke-width:2.0px
Of course, one more thing is necessary to make the fileInfo trustworthy: the Envelope must be signed. Casey’s lead developers, Bill and Omar, each provide a signature, creating a group verification that can be checked against either signature (or both).
In order for those signatures to apply to the entire envelope, the envelope must first be wrapped; because signatures are assertions, they’d otherwise just apply to the subject, “Gordian Envelope 1.0.0”, which wouldn’t be that useful! After wrapping the envelope, both Bill and Omar can sign.
{
"Gordian Envelope 1.0.0" [
"fileInfo": "gordian-envelope-1.0.0.dm" [
"sha256": "6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec"
"timestamp": "1668062209"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"signerInfo": "bill-not-the-science-guy" [
"pubkeyURL": "https://github.com/bill-not-the-science-guy.keys"
]
"signerInfo": "omarc-bc-guy" [
"pubkeyURL": "https://github.com/omarc-bc-guy.keys"
]
note: "initial release"
]
} [
verifiedBy: Signature
verifiedBy: Signature
]
graph LR
1(("e1c7893d<br/>NODE"))
2[/"1502aebf<br/>WRAPPED"\]
3(("d19ef9e7<br/>NODE"))
4["de7e544e<br/>#quot;Gordian Envelope 1.0.0#quot;"]
5(["41db7106<br/>ASSERTION"])
6["628ac8d9<br/>#quot;fileInfo#quot;"]
7(("10561183<br/>NODE"))
8["03c3e8cf<br/>#quot;gordian-envelope-1.0.0.dm#quot;"]
9(["26cdea4a<br/>ASSERTION"])
10["fd9d5aed<br/>#quot;timestamp#quot;"]
11["928e86de<br/>#quot;1668062209#quot;"]
12(["b25bf99e<br/>ASSERTION"])
13["108dbfb1<br/>#quot;sha256#quot;"]
14["b895faae<br/>#quot;6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec#quot;"]
15(["484da754<br/>ASSERTION"])
16["67d69bd7<br/>#quot;isSigner#quot;"]
17(("0ae65c77<br/>NODE"))
18["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
19(["0ad198e4<br/>ASSERTION"])
20["d52596f8<br/>#quot;pubkey#quot;"]
21["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
22(["4ef0d8f2<br/>ASSERTION"])
23["dbc1553d<br/>#quot;signerInfo#quot;"]
24(("d77c0291<br/>NODE"))
25["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
26(["9bc4beec<br/>ASSERTION"])
27["29c0cd61<br/>#quot;pubkeyURL#quot;"]
28["78d7942e<br/>#quot;https://github.com/omarc-bc-guy.keys#quot;"]
29(["72d6fac6<br/>ASSERTION"])
30[/"61fb6a6b<br/>note"/]
31["fa62ba29<br/>#quot;initial release#quot;"]
32(["90e799be<br/>ASSERTION"])
33["67d69bd7<br/>#quot;isSigner#quot;"]
34(("c833b577<br/>NODE"))
35["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
36(["0b8d474f<br/>ASSERTION"])
37["d52596f8<br/>#quot;pubkey#quot;"]
38["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
39(["b5c9129a<br/>ASSERTION"])
40["dbc1553d<br/>#quot;signerInfo#quot;"]
41(("67a2f813<br/>NODE"))
42["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
43(["8f4c7eec<br/>ASSERTION"])
44["29c0cd61<br/>#quot;pubkeyURL#quot;"]
45["0b240880<br/>#quot;https://github.com/bill-not-the-science-guy.keys#quot;"]
46(["272fd26b<br/>ASSERTION"])
47[/"d59f8c0f<br/>verifiedBy"/]
48["7b7b88b5<br/>Signature"]
49(["8158be67<br/>ASSERTION"])
50[/"d59f8c0f<br/>verifiedBy"/]
51["23ec6b65<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
3 --> 5
5 -->|pred| 6
5 -->|obj| 7
7 -->|subj| 8
7 --> 9
9 -->|pred| 10
9 -->|obj| 11
7 --> 12
12 -->|pred| 13
12 -->|obj| 14
3 --> 15
15 -->|pred| 16
15 -->|obj| 17
17 -->|subj| 18
17 --> 19
19 -->|pred| 20
19 -->|obj| 21
3 --> 22
22 -->|pred| 23
22 -->|obj| 24
24 -->|subj| 25
24 --> 26
26 -->|pred| 27
26 -->|obj| 28
3 --> 29
29 -->|pred| 30
29 -->|obj| 31
3 --> 32
32 -->|pred| 33
32 -->|obj| 34
34 -->|subj| 35
34 --> 36
36 -->|pred| 37
36 -->|obj| 38
3 --> 39
39 -->|pred| 40
39 -->|obj| 41
41 -->|subj| 42
41 --> 43
43 -->|pred| 44
43 -->|obj| 45
1 --> 46
46 -->|pred| 47
46 -->|obj| 48
1 --> 49
49 -->|pred| 50
49 -->|obj| 51
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:red,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:red,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:red,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:red,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:red,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:red,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:red,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:red,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:#55f,stroke-width:3.0px
style 39 stroke:red,stroke-width:3.0px
style 40 stroke:#55f,stroke-width:3.0px
style 41 stroke:red,stroke-width:3.0px
style 42 stroke:#55f,stroke-width:3.0px
style 43 stroke:red,stroke-width:3.0px
style 44 stroke:#55f,stroke-width:3.0px
style 45 stroke:#55f,stroke-width:3.0px
style 46 stroke:red,stroke-width:3.0px
style 47 stroke:#55f,stroke-width:3.0px
style 48 stroke:#55f,stroke-width:3.0px
style 49 stroke:red,stroke-width:3.0px
style 50 stroke:#55f,stroke-width:3.0px
style 51 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke-width:2.0px
linkStyle 4 stroke:green,stroke-width:2.0px
linkStyle 5 stroke:#55f,stroke-width:2.0px
linkStyle 6 stroke:red,stroke-width:2.0px
linkStyle 7 stroke-width:2.0px
linkStyle 8 stroke:green,stroke-width:2.0px
linkStyle 9 stroke:#55f,stroke-width:2.0px
linkStyle 10 stroke-width:2.0px
linkStyle 11 stroke:green,stroke-width:2.0px
linkStyle 12 stroke:#55f,stroke-width:2.0px
linkStyle 13 stroke-width:2.0px
linkStyle 14 stroke:green,stroke-width:2.0px
linkStyle 15 stroke:#55f,stroke-width:2.0px
linkStyle 16 stroke:red,stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke:green,stroke-width:2.0px
linkStyle 19 stroke:#55f,stroke-width:2.0px
linkStyle 20 stroke-width:2.0px
linkStyle 21 stroke:green,stroke-width:2.0px
linkStyle 22 stroke:#55f,stroke-width:2.0px
linkStyle 23 stroke:red,stroke-width:2.0px
linkStyle 24 stroke-width:2.0px
linkStyle 25 stroke:green,stroke-width:2.0px
linkStyle 26 stroke:#55f,stroke-width:2.0px
linkStyle 27 stroke-width:2.0px
linkStyle 28 stroke:green,stroke-width:2.0px
linkStyle 29 stroke:#55f,stroke-width:2.0px
linkStyle 30 stroke-width:2.0px
linkStyle 31 stroke:green,stroke-width:2.0px
linkStyle 32 stroke:#55f,stroke-width:2.0px
linkStyle 33 stroke:red,stroke-width:2.0px
linkStyle 34 stroke-width:2.0px
linkStyle 35 stroke:green,stroke-width:2.0px
linkStyle 36 stroke:#55f,stroke-width:2.0px
linkStyle 37 stroke-width:2.0px
linkStyle 38 stroke:green,stroke-width:2.0px
linkStyle 39 stroke:#55f,stroke-width:2.0px
linkStyle 40 stroke:red,stroke-width:2.0px
linkStyle 41 stroke-width:2.0px
linkStyle 42 stroke:green,stroke-width:2.0px
linkStyle 43 stroke:#55f,stroke-width:2.0px
linkStyle 44 stroke-width:2.0px
linkStyle 45 stroke:green,stroke-width:2.0px
linkStyle 46 stroke:#55f,stroke-width:2.0px
linkStyle 47 stroke-width:2.0px
linkStyle 48 stroke:green,stroke-width:2.0px
linkStyle 49 stroke:#55f,stroke-width:2.0px
2: Blockchain Everyday Confirms Casey [Repackaging Data, Third-Party Verification]
Problem Solved: Some corporations require more centralized validation; Blockchain Everday can provide that simply by repackaging an existing envelope.
Casey’s plan for bootstrapping the validation of Blockchain Everyday’s Gordian Envelope should be sufficient for most users of the software. However, Blockchain Everyday soon discovers that there are corporations that aren’t willing to use the software based solely on the public-key-infrastructure (PKI) information derived from individual GitHub accounts. They want the validation of a company that they can look up in Dun & Bradstreet.
Blockchain Everyday doesn’t want to reissue the existing release information, but Gordian Envelopes can be repackaged by any holder. That allows Blockchain Everyday to take the release information that Casey registered with GitHub, add more data, sign it themselves, and then publish it through their own website. Similarly, if users of Gordian Envelope were incorporating the software into software libraries they too could repackage either Casey or Blockchain Everyday’s Envelope and add their own seal to it before passing it on their customers! (It’s Envelopes all the way down.)
Blockchain Everday initially produces an Envelope containing their information:
"Blockchain Everyday" [
"dunsID": "000000000"
"isoCountryCode": "USA"
"pubkey": "ur:crypto-pubkeys/lftaaosehdcximbghsetjliyioztlrgwlegrctcyghrpotdrfxsrhgtojomykenscphsrlcwotvltpvahd…"
"pubkeyURL": "https://www.blockchaineveryday.com/pub.key"
"webURL": "https://www.blockchaineveryday.com"
]
graph LR
1(("c4ffa2a3<br/>NODE"))
2["a4ad4289<br/>#quot;Blockchain Everyday#quot;"]
3(["27be4bbb<br/>ASSERTION"])
4["d52596f8<br/>#quot;pubkey#quot;"]
5["700576a7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcximbghsetjliyioztlrgwlegrctcyghrpotdrfxsrhgtojomykenscphsrlcwotvltpvahd…#quot;"]
6(["6c8c092c<br/>ASSERTION"])
7["83f0896b<br/>#quot;webURL#quot;"]
8["97b377c9<br/>#quot;https://www.blockchaineveryday.com#quot;"]
9(["c7bd878b<br/>ASSERTION"])
10["ec387013<br/>#quot;isoCountryCode#quot;"]
11["aaa3899b<br/>#quot;USA#quot;"]
12(["dae49b12<br/>ASSERTION"])
13["97853f5c<br/>#quot;dunsID#quot;"]
14["4a00c18c<br/>#quot;000000000#quot;"]
15(["fef7ce4b<br/>ASSERTION"])
16["29c0cd61<br/>#quot;pubkeyURL#quot;"]
17["a88ae53e<br/>#quot;https://www.blockchaineveryday.com/pub.key#quot;"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
1 --> 6
6 -->|pred| 7
6 -->|obj| 8
1 --> 9
9 -->|pred| 10
9 -->|obj| 11
1 --> 12
12 -->|pred| 13
12 -->|obj| 14
1 --> 15
15 -->|pred| 16
15 -->|obj| 17
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:#55f,stroke-width:3.0px
style 6 stroke:red,stroke-width:3.0px
style 7 stroke:#55f,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:red,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:red,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
linkStyle 4 stroke-width:2.0px
linkStyle 5 stroke:green,stroke-width:2.0px
linkStyle 6 stroke:#55f,stroke-width:2.0px
linkStyle 7 stroke-width:2.0px
linkStyle 8 stroke:green,stroke-width:2.0px
linkStyle 9 stroke:#55f,stroke-width:2.0px
linkStyle 10 stroke-width:2.0px
linkStyle 11 stroke:green,stroke-width:2.0px
linkStyle 12 stroke:#55f,stroke-width:2.0px
linkStyle 13 stroke-width:2.0px
linkStyle 14 stroke:green,stroke-width:2.0px
linkStyle 15 stroke:#55f,stroke-width:2.0px
They then wrap the 1.0.0 release information and add on the Envelope with their details using a certifiedBy predicate.
{
{
"Gordian Envelope 1.0.0" [
"fileInfo": "gordian-envelope-1.0.0.dm" [
"sha256": "6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec"
"timestamp": "1668062209"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"signerInfo": "bill-not-the-science-guy" [
"pubkeyURL": "https://github.com/bill-not-the-science-guy.keys"
]
"signerInfo": "omarc-bc-guy" [
"pubkeyURL": "https://github.com/omarc-bc-guy.keys"
]
note: "initial release"
]
} [
verifiedBy: Signature
verifiedBy: Signature
]
} [
"certifiedBy": "Blockchain Everyday" [
"dunsID": "000000000"
"isoCountryCode": "USA"
"pubkey": "ur:crypto-pubkeys/lftaaosehdcximbghsetjliyioztlrgwlegrctcyghrpotdrfxsrhgtojomykenscphsrlcwotvltpvahd…"
"pubkeyURL": "https://www.blockchaineveryday.com/pub.key"
"webURL": "https://www.blockchaineveryday.com"
]
]
graph LR
1(("c9d29179<br/>NODE"))
2[/"292c57d4<br/>WRAPPED"\]
3(("e1c7893d<br/>NODE"))
4[/"1502aebf<br/>WRAPPED"\]
5(("d19ef9e7<br/>NODE"))
6["de7e544e<br/>#quot;Gordian Envelope 1.0.0#quot;"]
7(["41db7106<br/>ASSERTION"])
8["628ac8d9<br/>#quot;fileInfo#quot;"]
9(("10561183<br/>NODE"))
10["03c3e8cf<br/>#quot;gordian-envelope-1.0.0.dm#quot;"]
11(["26cdea4a<br/>ASSERTION"])
12["fd9d5aed<br/>#quot;timestamp#quot;"]
13["928e86de<br/>#quot;1668062209#quot;"]
14(["b25bf99e<br/>ASSERTION"])
15["108dbfb1<br/>#quot;sha256#quot;"]
16["b895faae<br/>#quot;6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec#quot;"]
17(["484da754<br/>ASSERTION"])
18["67d69bd7<br/>#quot;isSigner#quot;"]
19(("0ae65c77<br/>NODE"))
20["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
21(["0ad198e4<br/>ASSERTION"])
22["d52596f8<br/>#quot;pubkey#quot;"]
23["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
24(["4ef0d8f2<br/>ASSERTION"])
25["dbc1553d<br/>#quot;signerInfo#quot;"]
26(("d77c0291<br/>NODE"))
27["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
28(["9bc4beec<br/>ASSERTION"])
29["29c0cd61<br/>#quot;pubkeyURL#quot;"]
30["78d7942e<br/>#quot;https://github.com/omarc-bc-guy.keys#quot;"]
31(["72d6fac6<br/>ASSERTION"])
32[/"61fb6a6b<br/>note"/]
33["fa62ba29<br/>#quot;initial release#quot;"]
34(["90e799be<br/>ASSERTION"])
35["67d69bd7<br/>#quot;isSigner#quot;"]
36(("c833b577<br/>NODE"))
37["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
38(["0b8d474f<br/>ASSERTION"])
39["d52596f8<br/>#quot;pubkey#quot;"]
40["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
41(["b5c9129a<br/>ASSERTION"])
42["dbc1553d<br/>#quot;signerInfo#quot;"]
43(("67a2f813<br/>NODE"))
44["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
45(["8f4c7eec<br/>ASSERTION"])
46["29c0cd61<br/>#quot;pubkeyURL#quot;"]
47["0b240880<br/>#quot;https://github.com/bill-not-the-science-guy.keys#quot;"]
48(["272fd26b<br/>ASSERTION"])
49[/"d59f8c0f<br/>verifiedBy"/]
50["7b7b88b5<br/>Signature"]
51(["8158be67<br/>ASSERTION"])
52[/"d59f8c0f<br/>verifiedBy"/]
53["23ec6b65<br/>Signature"]
54(["baf9b08a<br/>ASSERTION"])
55["7eb11472<br/>#quot;certifiedBy#quot;"]
56(("c4ffa2a3<br/>NODE"))
57["a4ad4289<br/>#quot;Blockchain Everyday#quot;"]
58(["27be4bbb<br/>ASSERTION"])
59["d52596f8<br/>#quot;pubkey#quot;"]
60["700576a7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcximbghsetjliyioztlrgwlegrctcyghrpotdrfxsrhgtojomykenscphsrlcwotvltpvahd…#quot;"]
61(["6c8c092c<br/>ASSERTION"])
62["83f0896b<br/>#quot;webURL#quot;"]
63["97b377c9<br/>#quot;https://www.blockchaineveryday.com#quot;"]
64(["c7bd878b<br/>ASSERTION"])
65["ec387013<br/>#quot;isoCountryCode#quot;"]
66["aaa3899b<br/>#quot;USA#quot;"]
67(["dae49b12<br/>ASSERTION"])
68["97853f5c<br/>#quot;dunsID#quot;"]
69["4a00c18c<br/>#quot;000000000#quot;"]
70(["fef7ce4b<br/>ASSERTION"])
71["29c0cd61<br/>#quot;pubkeyURL#quot;"]
72["a88ae53e<br/>#quot;https://www.blockchaineveryday.com/pub.key#quot;"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
4 -->|subj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
9 -->|subj| 10
9 --> 11
11 -->|pred| 12
11 -->|obj| 13
9 --> 14
14 -->|pred| 15
14 -->|obj| 16
5 --> 17
17 -->|pred| 18
17 -->|obj| 19
19 -->|subj| 20
19 --> 21
21 -->|pred| 22
21 -->|obj| 23
5 --> 24
24 -->|pred| 25
24 -->|obj| 26
26 -->|subj| 27
26 --> 28
28 -->|pred| 29
28 -->|obj| 30
5 --> 31
31 -->|pred| 32
31 -->|obj| 33
5 --> 34
34 -->|pred| 35
34 -->|obj| 36
36 -->|subj| 37
36 --> 38
38 -->|pred| 39
38 -->|obj| 40
5 --> 41
41 -->|pred| 42
41 -->|obj| 43
43 -->|subj| 44
43 --> 45
45 -->|pred| 46
45 -->|obj| 47
3 --> 48
48 -->|pred| 49
48 -->|obj| 50
3 --> 51
51 -->|pred| 52
51 -->|obj| 53
1 --> 54
54 -->|pred| 55
54 -->|obj| 56
56 -->|subj| 57
56 --> 58
58 -->|pred| 59
58 -->|obj| 60
56 --> 61
61 -->|pred| 62
61 -->|obj| 63
56 --> 64
64 -->|pred| 65
64 -->|obj| 66
56 --> 67
67 -->|pred| 68
67 -->|obj| 69
56 --> 70
70 -->|pred| 71
70 -->|obj| 72
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:red,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:red,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:red,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:red,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:red,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:red,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:red,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:red,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:red,stroke-width:3.0px
style 39 stroke:#55f,stroke-width:3.0px
style 40 stroke:#55f,stroke-width:3.0px
style 41 stroke:red,stroke-width:3.0px
style 42 stroke:#55f,stroke-width:3.0px
style 43 stroke:red,stroke-width:3.0px
style 44 stroke:#55f,stroke-width:3.0px
style 45 stroke:red,stroke-width:3.0px
style 46 stroke:#55f,stroke-width:3.0px
style 47 stroke:#55f,stroke-width:3.0px
style 48 stroke:red,stroke-width:3.0px
style 49 stroke:#55f,stroke-width:3.0px
style 50 stroke:#55f,stroke-width:3.0px
style 51 stroke:red,stroke-width:3.0px
style 52 stroke:#55f,stroke-width:3.0px
style 53 stroke:#55f,stroke-width:3.0px
style 54 stroke:red,stroke-width:3.0px
style 55 stroke:#55f,stroke-width:3.0px
style 56 stroke:red,stroke-width:3.0px
style 57 stroke:#55f,stroke-width:3.0px
style 58 stroke:red,stroke-width:3.0px
style 59 stroke:#55f,stroke-width:3.0px
style 60 stroke:#55f,stroke-width:3.0px
style 61 stroke:red,stroke-width:3.0px
style 62 stroke:#55f,stroke-width:3.0px
style 63 stroke:#55f,stroke-width:3.0px
style 64 stroke:red,stroke-width:3.0px
style 65 stroke:#55f,stroke-width:3.0px
style 66 stroke:#55f,stroke-width:3.0px
style 67 stroke:red,stroke-width:3.0px
style 68 stroke:#55f,stroke-width:3.0px
style 69 stroke:#55f,stroke-width:3.0px
style 70 stroke:red,stroke-width:3.0px
style 71 stroke:#55f,stroke-width:3.0px
style 72 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke:red,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke:red,stroke-width:2.0px
linkStyle 9 stroke-width:2.0px
linkStyle 10 stroke:green,stroke-width:2.0px
linkStyle 11 stroke:#55f,stroke-width:2.0px
linkStyle 12 stroke-width:2.0px
linkStyle 13 stroke:green,stroke-width:2.0px
linkStyle 14 stroke:#55f,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke:green,stroke-width:2.0px
linkStyle 17 stroke:#55f,stroke-width:2.0px
linkStyle 18 stroke:red,stroke-width:2.0px
linkStyle 19 stroke-width:2.0px
linkStyle 20 stroke:green,stroke-width:2.0px
linkStyle 21 stroke:#55f,stroke-width:2.0px
linkStyle 22 stroke-width:2.0px
linkStyle 23 stroke:green,stroke-width:2.0px
linkStyle 24 stroke:#55f,stroke-width:2.0px
linkStyle 25 stroke:red,stroke-width:2.0px
linkStyle 26 stroke-width:2.0px
linkStyle 27 stroke:green,stroke-width:2.0px
linkStyle 28 stroke:#55f,stroke-width:2.0px
linkStyle 29 stroke-width:2.0px
linkStyle 30 stroke:green,stroke-width:2.0px
linkStyle 31 stroke:#55f,stroke-width:2.0px
linkStyle 32 stroke-width:2.0px
linkStyle 33 stroke:green,stroke-width:2.0px
linkStyle 34 stroke:#55f,stroke-width:2.0px
linkStyle 35 stroke:red,stroke-width:2.0px
linkStyle 36 stroke-width:2.0px
linkStyle 37 stroke:green,stroke-width:2.0px
linkStyle 38 stroke:#55f,stroke-width:2.0px
linkStyle 39 stroke-width:2.0px
linkStyle 40 stroke:green,stroke-width:2.0px
linkStyle 41 stroke:#55f,stroke-width:2.0px
linkStyle 42 stroke:red,stroke-width:2.0px
linkStyle 43 stroke-width:2.0px
linkStyle 44 stroke:green,stroke-width:2.0px
linkStyle 45 stroke:#55f,stroke-width:2.0px
linkStyle 46 stroke-width:2.0px
linkStyle 47 stroke:green,stroke-width:2.0px
linkStyle 48 stroke:#55f,stroke-width:2.0px
linkStyle 49 stroke-width:2.0px
linkStyle 50 stroke:green,stroke-width:2.0px
linkStyle 51 stroke:#55f,stroke-width:2.0px
linkStyle 52 stroke-width:2.0px
linkStyle 53 stroke:green,stroke-width:2.0px
linkStyle 54 stroke:#55f,stroke-width:2.0px
linkStyle 55 stroke:red,stroke-width:2.0px
linkStyle 56 stroke-width:2.0px
linkStyle 57 stroke:green,stroke-width:2.0px
linkStyle 58 stroke:#55f,stroke-width:2.0px
linkStyle 59 stroke-width:2.0px
linkStyle 60 stroke:green,stroke-width:2.0px
linkStyle 61 stroke:#55f,stroke-width:2.0px
linkStyle 62 stroke-width:2.0px
linkStyle 63 stroke:green,stroke-width:2.0px
linkStyle 64 stroke:#55f,stroke-width:2.0px
linkStyle 65 stroke-width:2.0px
linkStyle 66 stroke:green,stroke-width:2.0px
linkStyle 67 stroke:#55f,stroke-width:2.0px
linkStyle 68 stroke-width:2.0px
linkStyle 69 stroke:green,stroke-width:2.0px
linkStyle 70 stroke:#55f,stroke-width:2.0px
Finally, they wrap that so that they can sign the whole package themselves.
{
{
{
"Gordian Envelope 1.0.0" [
"fileInfo": "gordian-envelope-1.0.0.dm" [
"sha256": "6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec"
"timestamp": "1668062209"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"signerInfo": "bill-not-the-science-guy" [
"pubkeyURL": "https://github.com/bill-not-the-science-guy.keys"
]
"signerInfo": "omarc-bc-guy" [
"pubkeyURL": "https://github.com/omarc-bc-guy.keys"
]
note: "initial release"
]
} [
verifiedBy: Signature
verifiedBy: Signature
]
} [
"certifiedBy": "Blockchain Everyday" [
"dunsID": "000000000"
"isoCountryCode": "USA"
"pubkey": "ur:crypto-pubkeys/lftaaosehdcximbghsetjliyioztlrgwlegrctcyghrpotdrfxsrhgtojomykenscphsrlcwotvltpvahd…"
"pubkeyURL": "https://www.blockchaineveryday.com/pub.key"
"webURL": "https://www.blockchaineveryday.com"
]
]
} [
verifiedBy: Signature
]
graph LR
1(("5b13374c<br/>NODE"))
2[/"6f46ec73<br/>WRAPPED"\]
3(("c9d29179<br/>NODE"))
4[/"292c57d4<br/>WRAPPED"\]
5(("e1c7893d<br/>NODE"))
6[/"1502aebf<br/>WRAPPED"\]
7(("d19ef9e7<br/>NODE"))
8["de7e544e<br/>#quot;Gordian Envelope 1.0.0#quot;"]
9(["41db7106<br/>ASSERTION"])
10["628ac8d9<br/>#quot;fileInfo#quot;"]
11(("10561183<br/>NODE"))
12["03c3e8cf<br/>#quot;gordian-envelope-1.0.0.dm#quot;"]
13(["26cdea4a<br/>ASSERTION"])
14["fd9d5aed<br/>#quot;timestamp#quot;"]
15["928e86de<br/>#quot;1668062209#quot;"]
16(["b25bf99e<br/>ASSERTION"])
17["108dbfb1<br/>#quot;sha256#quot;"]
18["b895faae<br/>#quot;6b41b0d9d9bff2c23ad9bd66b054fda36e3494ec#quot;"]
19(["484da754<br/>ASSERTION"])
20["67d69bd7<br/>#quot;isSigner#quot;"]
21(("0ae65c77<br/>NODE"))
22["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
23(["0ad198e4<br/>ASSERTION"])
24["d52596f8<br/>#quot;pubkey#quot;"]
25["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
26(["4ef0d8f2<br/>ASSERTION"])
27["dbc1553d<br/>#quot;signerInfo#quot;"]
28(("d77c0291<br/>NODE"))
29["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
30(["9bc4beec<br/>ASSERTION"])
31["29c0cd61<br/>#quot;pubkeyURL#quot;"]
32["78d7942e<br/>#quot;https://github.com/omarc-bc-guy.keys#quot;"]
33(["72d6fac6<br/>ASSERTION"])
34[/"61fb6a6b<br/>note"/]
35["fa62ba29<br/>#quot;initial release#quot;"]
36(["90e799be<br/>ASSERTION"])
37["67d69bd7<br/>#quot;isSigner#quot;"]
38(("c833b577<br/>NODE"))
39["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
40(["0b8d474f<br/>ASSERTION"])
41["d52596f8<br/>#quot;pubkey#quot;"]
42["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
43(["b5c9129a<br/>ASSERTION"])
44["dbc1553d<br/>#quot;signerInfo#quot;"]
45(("67a2f813<br/>NODE"))
46["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
47(["8f4c7eec<br/>ASSERTION"])
48["29c0cd61<br/>#quot;pubkeyURL#quot;"]
49["0b240880<br/>#quot;https://github.com/bill-not-the-science-guy.keys#quot;"]
50(["272fd26b<br/>ASSERTION"])
51[/"d59f8c0f<br/>verifiedBy"/]
52["7b7b88b5<br/>Signature"]
53(["8158be67<br/>ASSERTION"])
54[/"d59f8c0f<br/>verifiedBy"/]
55["23ec6b65<br/>Signature"]
56(["baf9b08a<br/>ASSERTION"])
57["7eb11472<br/>#quot;certifiedBy#quot;"]
58(("c4ffa2a3<br/>NODE"))
59["a4ad4289<br/>#quot;Blockchain Everyday#quot;"]
60(["27be4bbb<br/>ASSERTION"])
61["d52596f8<br/>#quot;pubkey#quot;"]
62["700576a7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcximbghsetjliyioztlrgwlegrctcyghrpotdrfxsrhgtojomykenscphsrlcwotvltpvahd…#quot;"]
63(["6c8c092c<br/>ASSERTION"])
64["83f0896b<br/>#quot;webURL#quot;"]
65["97b377c9<br/>#quot;https://www.blockchaineveryday.com#quot;"]
66(["c7bd878b<br/>ASSERTION"])
67["ec387013<br/>#quot;isoCountryCode#quot;"]
68["aaa3899b<br/>#quot;USA#quot;"]
69(["dae49b12<br/>ASSERTION"])
70["97853f5c<br/>#quot;dunsID#quot;"]
71["4a00c18c<br/>#quot;000000000#quot;"]
72(["fef7ce4b<br/>ASSERTION"])
73["29c0cd61<br/>#quot;pubkeyURL#quot;"]
74["a88ae53e<br/>#quot;https://www.blockchaineveryday.com/pub.key#quot;"]
75(["ae90ab4e<br/>ASSERTION"])
76[/"d59f8c0f<br/>verifiedBy"/]
77["b782a795<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
4 -->|subj| 5
5 -->|subj| 6
6 -->|subj| 7
7 -->|subj| 8
7 --> 9
9 -->|pred| 10
9 -->|obj| 11
11 -->|subj| 12
11 --> 13
13 -->|pred| 14
13 -->|obj| 15
11 --> 16
16 -->|pred| 17
16 -->|obj| 18
7 --> 19
19 -->|pred| 20
19 -->|obj| 21
21 -->|subj| 22
21 --> 23
23 -->|pred| 24
23 -->|obj| 25
7 --> 26
26 -->|pred| 27
26 -->|obj| 28
28 -->|subj| 29
28 --> 30
30 -->|pred| 31
30 -->|obj| 32
7 --> 33
33 -->|pred| 34
33 -->|obj| 35
7 --> 36
36 -->|pred| 37
36 -->|obj| 38
38 -->|subj| 39
38 --> 40
40 -->|pred| 41
40 -->|obj| 42
7 --> 43
43 -->|pred| 44
43 -->|obj| 45
45 -->|subj| 46
45 --> 47
47 -->|pred| 48
47 -->|obj| 49
5 --> 50
50 -->|pred| 51
50 -->|obj| 52
5 --> 53
53 -->|pred| 54
53 -->|obj| 55
3 --> 56
56 -->|pred| 57
56 -->|obj| 58
58 -->|subj| 59
58 --> 60
60 -->|pred| 61
60 -->|obj| 62
58 --> 63
63 -->|pred| 64
63 -->|obj| 65
58 --> 66
66 -->|pred| 67
66 -->|obj| 68
58 --> 69
69 -->|pred| 70
69 -->|obj| 71
58 --> 72
72 -->|pred| 73
72 -->|obj| 74
1 --> 75
75 -->|pred| 76
75 -->|obj| 77
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:red,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:red,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:red,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:red,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:red,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:red,stroke-width:3.0px
style 17 stroke:#55f,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:red,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:red,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:red,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:red,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
style 33 stroke:red,stroke-width:3.0px
style 34 stroke:#55f,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:red,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:red,stroke-width:3.0px
style 39 stroke:#55f,stroke-width:3.0px
style 40 stroke:red,stroke-width:3.0px
style 41 stroke:#55f,stroke-width:3.0px
style 42 stroke:#55f,stroke-width:3.0px
style 43 stroke:red,stroke-width:3.0px
style 44 stroke:#55f,stroke-width:3.0px
style 45 stroke:red,stroke-width:3.0px
style 46 stroke:#55f,stroke-width:3.0px
style 47 stroke:red,stroke-width:3.0px
style 48 stroke:#55f,stroke-width:3.0px
style 49 stroke:#55f,stroke-width:3.0px
style 50 stroke:red,stroke-width:3.0px
style 51 stroke:#55f,stroke-width:3.0px
style 52 stroke:#55f,stroke-width:3.0px
style 53 stroke:red,stroke-width:3.0px
style 54 stroke:#55f,stroke-width:3.0px
style 55 stroke:#55f,stroke-width:3.0px
style 56 stroke:red,stroke-width:3.0px
style 57 stroke:#55f,stroke-width:3.0px
style 58 stroke:red,stroke-width:3.0px
style 59 stroke:#55f,stroke-width:3.0px
style 60 stroke:red,stroke-width:3.0px
style 61 stroke:#55f,stroke-width:3.0px
style 62 stroke:#55f,stroke-width:3.0px
style 63 stroke:red,stroke-width:3.0px
style 64 stroke:#55f,stroke-width:3.0px
style 65 stroke:#55f,stroke-width:3.0px
style 66 stroke:red,stroke-width:3.0px
style 67 stroke:#55f,stroke-width:3.0px
style 68 stroke:#55f,stroke-width:3.0px
style 69 stroke:red,stroke-width:3.0px
style 70 stroke:#55f,stroke-width:3.0px
style 71 stroke:#55f,stroke-width:3.0px
style 72 stroke:red,stroke-width:3.0px
style 73 stroke:#55f,stroke-width:3.0px
style 74 stroke:#55f,stroke-width:3.0px
style 75 stroke:red,stroke-width:3.0px
style 76 stroke:#55f,stroke-width:3.0px
style 77 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke:red,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke:red,stroke-width:2.0px
linkStyle 6 stroke:red,stroke-width:2.0px
linkStyle 7 stroke-width:2.0px
linkStyle 8 stroke:green,stroke-width:2.0px
linkStyle 9 stroke:#55f,stroke-width:2.0px
linkStyle 10 stroke:red,stroke-width:2.0px
linkStyle 11 stroke-width:2.0px
linkStyle 12 stroke:green,stroke-width:2.0px
linkStyle 13 stroke:#55f,stroke-width:2.0px
linkStyle 14 stroke-width:2.0px
linkStyle 15 stroke:green,stroke-width:2.0px
linkStyle 16 stroke:#55f,stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke:green,stroke-width:2.0px
linkStyle 19 stroke:#55f,stroke-width:2.0px
linkStyle 20 stroke:red,stroke-width:2.0px
linkStyle 21 stroke-width:2.0px
linkStyle 22 stroke:green,stroke-width:2.0px
linkStyle 23 stroke:#55f,stroke-width:2.0px
linkStyle 24 stroke-width:2.0px
linkStyle 25 stroke:green,stroke-width:2.0px
linkStyle 26 stroke:#55f,stroke-width:2.0px
linkStyle 27 stroke:red,stroke-width:2.0px
linkStyle 28 stroke-width:2.0px
linkStyle 29 stroke:green,stroke-width:2.0px
linkStyle 30 stroke:#55f,stroke-width:2.0px
linkStyle 31 stroke-width:2.0px
linkStyle 32 stroke:green,stroke-width:2.0px
linkStyle 33 stroke:#55f,stroke-width:2.0px
linkStyle 34 stroke-width:2.0px
linkStyle 35 stroke:green,stroke-width:2.0px
linkStyle 36 stroke:#55f,stroke-width:2.0px
linkStyle 37 stroke:red,stroke-width:2.0px
linkStyle 38 stroke-width:2.0px
linkStyle 39 stroke:green,stroke-width:2.0px
linkStyle 40 stroke:#55f,stroke-width:2.0px
linkStyle 41 stroke-width:2.0px
linkStyle 42 stroke:green,stroke-width:2.0px
linkStyle 43 stroke:#55f,stroke-width:2.0px
linkStyle 44 stroke:red,stroke-width:2.0px
linkStyle 45 stroke-width:2.0px
linkStyle 46 stroke:green,stroke-width:2.0px
linkStyle 47 stroke:#55f,stroke-width:2.0px
linkStyle 48 stroke-width:2.0px
linkStyle 49 stroke:green,stroke-width:2.0px
linkStyle 50 stroke:#55f,stroke-width:2.0px
linkStyle 51 stroke-width:2.0px
linkStyle 52 stroke:green,stroke-width:2.0px
linkStyle 53 stroke:#55f,stroke-width:2.0px
linkStyle 54 stroke-width:2.0px
linkStyle 55 stroke:green,stroke-width:2.0px
linkStyle 56 stroke:#55f,stroke-width:2.0px
linkStyle 57 stroke:red,stroke-width:2.0px
linkStyle 58 stroke-width:2.0px
linkStyle 59 stroke:green,stroke-width:2.0px
linkStyle 60 stroke:#55f,stroke-width:2.0px
linkStyle 61 stroke-width:2.0px
linkStyle 62 stroke:green,stroke-width:2.0px
linkStyle 63 stroke:#55f,stroke-width:2.0px
linkStyle 64 stroke-width:2.0px
linkStyle 65 stroke:green,stroke-width:2.0px
linkStyle 66 stroke:#55f,stroke-width:2.0px
linkStyle 67 stroke-width:2.0px
linkStyle 68 stroke:green,stroke-width:2.0px
linkStyle 69 stroke:#55f,stroke-width:2.0px
linkStyle 70 stroke-width:2.0px
linkStyle 71 stroke:green,stroke-width:2.0px
linkStyle 72 stroke:#55f,stroke-width:2.0px
linkStyle 73 stroke-width:2.0px
linkStyle 74 stroke:green,stroke-width:2.0px
linkStyle 75 stroke:#55f,stroke-width:2.0px
By signing Casey’s release, Blockchain Everyday has created a new root of trust for corporations (or individuals) who mandate a link to a D&B number. These companies with more stringent regulations will still be able to chain forward to new releases, just with a different root of trust than those companies (or individuals) who were willing to trust on the GitHub IDs alone.
3. Casey Chains His Software Releases [Chained Data]
Problem Solved: Casey wants to be able to continuously rerelease his software, while reducing validation cost over time.
Because Casey (and/or Blockchain Everyday) has established a root of trust with the initial release of Gordian Envelope, future releases can now be published without the need to reestablish the signers. This is done by including links to previous releases in each envelope. As long as users stored previous envelopes and recorded their validation, they will know that they can trust the new envelope because its still being signed with the private keys linked to the pubkeys from that initial release.
The Gordian Envelope for a new release looks much like that for a previous release, with the addition of a previousRelease link and the removal of the signerInfo (which appeared when the signers debuted in Gordian Envelope 1.0.0) and can be rediscovered by chaining previousRelease links.
"Gordian Envelope 1.0.1" [
"fileInfo": "gordian-envelope-1.0.1.dm" [
"sha256": "2c11c2c9c38b18ac12ab0880447f72b4739385c3a03ad65b765d426ecea1ad48"
"timestamp": "1668026209"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"previousRelease": "https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.0/gordian-env…"
note: "improved documentation"
]
graph LR
1(("42712f3e<br/>NODE"))
2["70788a53<br/>#quot;Gordian Envelope 1.0.1#quot;"]
3(["484da754<br/>ASSERTION"])
4["67d69bd7<br/>#quot;isSigner#quot;"]
5(("0ae65c77<br/>NODE"))
6["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
7(["0ad198e4<br/>ASSERTION"])
8["d52596f8<br/>#quot;pubkey#quot;"]
9["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
10(["8c13a688<br/>ASSERTION"])
11[/"61fb6a6b<br/>note"/]
12["3671dd52<br/>#quot;improved documentation#quot;"]
13(["90e799be<br/>ASSERTION"])
14["67d69bd7<br/>#quot;isSigner#quot;"]
15(("c833b577<br/>NODE"))
16["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
17(["0b8d474f<br/>ASSERTION"])
18["d52596f8<br/>#quot;pubkey#quot;"]
19["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
20(["d31238a4<br/>ASSERTION"])
21["10d67046<br/>#quot;previousRelease#quot;"]
22["348c0715<br/>#quot;https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.0/gordian-env…#quot;"]
23(["ebe4d16f<br/>ASSERTION"])
24["628ac8d9<br/>#quot;fileInfo#quot;"]
25(("96628076<br/>NODE"))
26["ed14cf80<br/>#quot;gordian-envelope-1.0.1.dm#quot;"]
27(["a9f4eb26<br/>ASSERTION"])
28["108dbfb1<br/>#quot;sha256#quot;"]
29["cd5979c9<br/>#quot;2c11c2c9c38b18ac12ab0880447f72b4739385c3a03ad65b765d426ecea1ad48#quot;"]
30(["f3a0597e<br/>ASSERTION"])
31["fd9d5aed<br/>#quot;timestamp#quot;"]
32["61b2ca73<br/>#quot;1668026209#quot;"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
1 --> 10
10 -->|pred| 11
10 -->|obj| 12
1 --> 13
13 -->|pred| 14
13 -->|obj| 15
15 -->|subj| 16
15 --> 17
17 -->|pred| 18
17 -->|obj| 19
1 --> 20
20 -->|pred| 21
20 -->|obj| 22
1 --> 23
23 -->|pred| 24
23 -->|obj| 25
25 -->|subj| 26
25 --> 27
27 -->|pred| 28
27 -->|obj| 29
25 --> 30
30 -->|pred| 31
30 -->|obj| 32
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:red,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:#55f,stroke-width:3.0px
style 20 stroke:red,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:red,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
style 25 stroke:red,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:red,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:red,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:green,stroke-width:2.0px
linkStyle 10 stroke:#55f,stroke-width:2.0px
linkStyle 11 stroke-width:2.0px
linkStyle 12 stroke:green,stroke-width:2.0px
linkStyle 13 stroke:#55f,stroke-width:2.0px
linkStyle 14 stroke:red,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke:green,stroke-width:2.0px
linkStyle 17 stroke:#55f,stroke-width:2.0px
linkStyle 18 stroke-width:2.0px
linkStyle 19 stroke:green,stroke-width:2.0px
linkStyle 20 stroke:#55f,stroke-width:2.0px
linkStyle 21 stroke-width:2.0px
linkStyle 22 stroke:green,stroke-width:2.0px
linkStyle 23 stroke:#55f,stroke-width:2.0px
linkStyle 24 stroke:red,stroke-width:2.0px
linkStyle 25 stroke-width:2.0px
linkStyle 26 stroke:green,stroke-width:2.0px
linkStyle 27 stroke:#55f,stroke-width:2.0px
linkStyle 28 stroke-width:2.0px
linkStyle 29 stroke:green,stroke-width:2.0px
linkStyle 30 stroke:#55f,stroke-width:2.0px
After wrapping and signing, the final envelope is:
{
"Gordian Envelope 1.0.1" [
"fileInfo": "gordian-envelope-1.0.1.dm" [
"sha256": "2c11c2c9c38b18ac12ab0880447f72b4739385c3a03ad65b765d426ecea1ad48"
"timestamp": "1668026209"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"previousRelease": "https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.0/gordian-env…"
note: "improved documentation"
]
} [
verifiedBy: Signature
verifiedBy: Signature
]
graph LR
1(("f6336886<br/>NODE"))
2[/"b4c23e49<br/>WRAPPED"\]
3(("42712f3e<br/>NODE"))
4["70788a53<br/>#quot;Gordian Envelope 1.0.1#quot;"]
5(["484da754<br/>ASSERTION"])
6["67d69bd7<br/>#quot;isSigner#quot;"]
7(("0ae65c77<br/>NODE"))
8["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
9(["0ad198e4<br/>ASSERTION"])
10["d52596f8<br/>#quot;pubkey#quot;"]
11["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
12(["8c13a688<br/>ASSERTION"])
13[/"61fb6a6b<br/>note"/]
14["3671dd52<br/>#quot;improved documentation#quot;"]
15(["90e799be<br/>ASSERTION"])
16["67d69bd7<br/>#quot;isSigner#quot;"]
17(("c833b577<br/>NODE"))
18["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
19(["0b8d474f<br/>ASSERTION"])
20["d52596f8<br/>#quot;pubkey#quot;"]
21["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
22(["d31238a4<br/>ASSERTION"])
23["10d67046<br/>#quot;previousRelease#quot;"]
24["348c0715<br/>#quot;https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.0/gordian-env…#quot;"]
25(["ebe4d16f<br/>ASSERTION"])
26["628ac8d9<br/>#quot;fileInfo#quot;"]
27(("96628076<br/>NODE"))
28["ed14cf80<br/>#quot;gordian-envelope-1.0.1.dm#quot;"]
29(["a9f4eb26<br/>ASSERTION"])
30["108dbfb1<br/>#quot;sha256#quot;"]
31["cd5979c9<br/>#quot;2c11c2c9c38b18ac12ab0880447f72b4739385c3a03ad65b765d426ecea1ad48#quot;"]
32(["f3a0597e<br/>ASSERTION"])
33["fd9d5aed<br/>#quot;timestamp#quot;"]
34["61b2ca73<br/>#quot;1668026209#quot;"]
35(["4eb7fae2<br/>ASSERTION"])
36[/"d59f8c0f<br/>verifiedBy"/]
37["1bb8f0ca<br/>Signature"]
38(["afd1e527<br/>ASSERTION"])
39[/"d59f8c0f<br/>verifiedBy"/]
40["e25fb646<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
3 --> 5
5 -->|pred| 6
5 -->|obj| 7
7 -->|subj| 8
7 --> 9
9 -->|pred| 10
9 -->|obj| 11
3 --> 12
12 -->|pred| 13
12 -->|obj| 14
3 --> 15
15 -->|pred| 16
15 -->|obj| 17
17 -->|subj| 18
17 --> 19
19 -->|pred| 20
19 -->|obj| 21
3 --> 22
22 -->|pred| 23
22 -->|obj| 24
3 --> 25
25 -->|pred| 26
25 -->|obj| 27
27 -->|subj| 28
27 --> 29
29 -->|pred| 30
29 -->|obj| 31
27 --> 32
32 -->|pred| 33
32 -->|obj| 34
1 --> 35
35 -->|pred| 36
35 -->|obj| 37
1 --> 38
38 -->|pred| 39
38 -->|obj| 40
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:red,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:red,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:red,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
style 25 stroke:red,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:red,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:red,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:red,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:#55f,stroke-width:3.0px
style 35 stroke:red,stroke-width:3.0px
style 36 stroke:#55f,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:red,stroke-width:3.0px
style 39 stroke:#55f,stroke-width:3.0px
style 40 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke-width:2.0px
linkStyle 4 stroke:green,stroke-width:2.0px
linkStyle 5 stroke:#55f,stroke-width:2.0px
linkStyle 6 stroke:red,stroke-width:2.0px
linkStyle 7 stroke-width:2.0px
linkStyle 8 stroke:green,stroke-width:2.0px
linkStyle 9 stroke:#55f,stroke-width:2.0px
linkStyle 10 stroke-width:2.0px
linkStyle 11 stroke:green,stroke-width:2.0px
linkStyle 12 stroke:#55f,stroke-width:2.0px
linkStyle 13 stroke-width:2.0px
linkStyle 14 stroke:green,stroke-width:2.0px
linkStyle 15 stroke:#55f,stroke-width:2.0px
linkStyle 16 stroke:red,stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke:green,stroke-width:2.0px
linkStyle 19 stroke:#55f,stroke-width:2.0px
linkStyle 20 stroke-width:2.0px
linkStyle 21 stroke:green,stroke-width:2.0px
linkStyle 22 stroke:#55f,stroke-width:2.0px
linkStyle 23 stroke-width:2.0px
linkStyle 24 stroke:green,stroke-width:2.0px
linkStyle 25 stroke:#55f,stroke-width:2.0px
linkStyle 26 stroke:red,stroke-width:2.0px
linkStyle 27 stroke-width:2.0px
linkStyle 28 stroke:green,stroke-width:2.0px
linkStyle 29 stroke:#55f,stroke-width:2.0px
linkStyle 30 stroke-width:2.0px
linkStyle 31 stroke:green,stroke-width:2.0px
linkStyle 32 stroke:#55f,stroke-width:2.0px
linkStyle 33 stroke-width:2.0px
linkStyle 34 stroke:green,stroke-width:2.0px
linkStyle 35 stroke:#55f,stroke-width:2.0px
linkStyle 36 stroke-width:2.0px
linkStyle 37 stroke:green,stroke-width:2.0px
linkStyle 38 stroke:#55f,stroke-width:2.0px
If the validator kept the envelope that he previously validated, now all that he has to do is see that the users and public keys in this new envelope match the old one, and then validate the signature. It should be entirely automatable.
More complexity is required only if the previous envelope were not kept. In this case, the validator uses the previousRelease metadata to backtrack until he finds the foundational signerInfo, which he can validate with more effort (as he did originally). A company with more stringent policies might have to make an orthogonal trip out to Blockchain Everday’s website, to see the additional verification there.
4. Casey Check Compliance [Attestation, Metadata]
Problem Solved: Casey needs to affirm compliance with a consent resolution in each release.
The massive success of Gordian Envelope allows Blockchain Everyday to purchase GoodGossip. Unfortunately, GoodGossip was under a consent decree with the FTC due to a previous privacy breach. Because Envelope incorporates a bit of GoodGossip’s technology, that means that Blockchain Everday must now attest to compliance with the consent decree within each of their Gordian Envelope releases for the next year (at which point the resolution comes to an end!).
This is easy to do with Gordian Envelope because metadata such as attestations can be added to any new envelope. As compliance officer, Casey will just need to verify compliance for each release and then attest to it through the creation of a signed envelope; he’ll then ask for that attestation to be added to the main Gordian Envelope for the release. It can then be cleanly incorporated into the structured release information.
Casey creates a sub-envelope that notes the existence of the FTC consent decree:
"FTC Consent #9213-1283-9172-1737-2016-C" [
"consentURL": "https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/"
]
graph LR
1(("76c7d72a<br/>NODE"))
2["15389e10<br/>#quot;FTC Consent #9213-1283-9172-1737-2016-C#quot;"]
3(["cff77d98<br/>ASSERTION"])
4["d14b45dc<br/>#quot;consentURL#quot;"]
5["dd9ec4a0<br/>#quot;https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/#quot;"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
He wraps it with Verifier Info:
{
"FTC Consent #9213-1283-9172-1737-2016-C" [
"consentURL": "https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/"
]
} [
"verifiedFor": "gordian-envelope-1.1.0.dm"
"verifiedSha": "6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7"
"verifierInfo": "Casey C. Case"
]
graph LR
1(("6a2827c7<br/>NODE"))
2[/"2e8c60e1<br/>WRAPPED"\]
3(("76c7d72a<br/>NODE"))
4["15389e10<br/>#quot;FTC Consent #9213-1283-9172-1737-2016-C#quot;"]
5(["cff77d98<br/>ASSERTION"])
6["d14b45dc<br/>#quot;consentURL#quot;"]
7["dd9ec4a0<br/>#quot;https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/#quot;"]
8(["599a98bb<br/>ASSERTION"])
9["2392e782<br/>#quot;verifiedFor#quot;"]
10["4a509a5a<br/>#quot;gordian-envelope-1.1.0.dm#quot;"]
11(["6f65d92f<br/>ASSERTION"])
12["7e84d1a9<br/>#quot;verifierInfo#quot;"]
13["5810917f<br/>#quot;Casey C. Case#quot;"]
14(["8061d9f9<br/>ASSERTION"])
15["38906e66<br/>#quot;verifiedSha#quot;"]
16["2dc8e526<br/>#quot;6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7#quot;"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
3 --> 5
5 -->|pred| 6
5 -->|obj| 7
1 --> 8
8 -->|pred| 9
8 -->|obj| 10
1 --> 11
11 -->|pred| 12
11 -->|obj| 13
1 --> 14
14 -->|pred| 15
14 -->|obj| 16
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:#55f,stroke-width:3.0px
style 8 stroke:red,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:red,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke-width:2.0px
linkStyle 4 stroke:green,stroke-width:2.0px
linkStyle 5 stroke:#55f,stroke-width:2.0px
linkStyle 6 stroke-width:2.0px
linkStyle 7 stroke:green,stroke-width:2.0px
linkStyle 8 stroke:#55f,stroke-width:2.0px
linkStyle 9 stroke-width:2.0px
linkStyle 10 stroke:green,stroke-width:2.0px
linkStyle 11 stroke:#55f,stroke-width:2.0px
linkStyle 12 stroke-width:2.0px
linkStyle 13 stroke:green,stroke-width:2.0px
linkStyle 14 stroke:#55f,stroke-width:2.0px
It’s important that the subenvelope contain specific details on the software release that Casey is verifying. That’s because envelopes can be added to envelopes by anyone at anytime. So Casey wants to ensure it’s clear what he’s verifying before he signs it!
When Casey is comfortable with the contents of the subenvelope, he can wrap it and sign:
{
{
"FTC Consent #9213-1283-9172-1737-2016-C" [
"consentURL": "https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/"
]
} [
"verifiedFor": "gordian-envelope-1.1.0.dm"
"verifiedSha": "6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7"
"verifierInfo": "Casey C. Case"
]
} [
verifiedBy: Signature
]
graph LR
1(("447a24d7<br/>NODE"))
2[/"a91c3392<br/>WRAPPED"\]
3(("6a2827c7<br/>NODE"))
4[/"2e8c60e1<br/>WRAPPED"\]
5(("76c7d72a<br/>NODE"))
6["15389e10<br/>#quot;FTC Consent #9213-1283-9172-1737-2016-C#quot;"]
7(["cff77d98<br/>ASSERTION"])
8["d14b45dc<br/>#quot;consentURL#quot;"]
9["dd9ec4a0<br/>#quot;https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/#quot;"]
10(["599a98bb<br/>ASSERTION"])
11["2392e782<br/>#quot;verifiedFor#quot;"]
12["4a509a5a<br/>#quot;gordian-envelope-1.1.0.dm#quot;"]
13(["6f65d92f<br/>ASSERTION"])
14["7e84d1a9<br/>#quot;verifierInfo#quot;"]
15["5810917f<br/>#quot;Casey C. Case#quot;"]
16(["8061d9f9<br/>ASSERTION"])
17["38906e66<br/>#quot;verifiedSha#quot;"]
18["2dc8e526<br/>#quot;6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7#quot;"]
19(["7b806854<br/>ASSERTION"])
20[/"d59f8c0f<br/>verifiedBy"/]
21["9301115f<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
4 -->|subj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
3 --> 10
10 -->|pred| 11
10 -->|obj| 12
3 --> 13
13 -->|pred| 14
13 -->|obj| 15
3 --> 16
16 -->|pred| 17
16 -->|obj| 18
1 --> 19
19 -->|pred| 20
19 -->|obj| 21
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:red,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:red,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:red,stroke-width:3.0px
style 17 stroke:#55f,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke:red,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:green,stroke-width:2.0px
linkStyle 10 stroke:#55f,stroke-width:2.0px
linkStyle 11 stroke-width:2.0px
linkStyle 12 stroke:green,stroke-width:2.0px
linkStyle 13 stroke:#55f,stroke-width:2.0px
linkStyle 14 stroke-width:2.0px
linkStyle 15 stroke:green,stroke-width:2.0px
linkStyle 16 stroke:#55f,stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke:green,stroke-width:2.0px
linkStyle 19 stroke:#55f,stroke-width:2.0px
The sub-envelope is then incorporated into the full envelope for the release.
"Gordian Envelope 1.1.0" [
"complianceCheck": {
{
"FTC Consent #9213-1283-9172-1737-2016-C" [
"consentURL": "https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/"
]
} [
"verifiedFor": "gordian-envelope-1.1.0.dm"
"verifiedSha": "6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7"
"verifierInfo": "Casey C. Case"
]
} [
verifiedBy: Signature
]
"fileInfo": "gordian-envelope-1.1.0.dm" [
"sha256": "6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7"
"timestamp": "1668026219"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"previousRelease": "https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.7/gordian-env…"
note: "defenestration option"
]
graph LR
1(("8cb10a3f<br/>NODE"))
2["5a1b50ef<br/>#quot;Gordian Envelope 1.1.0#quot;"]
3(["484da754<br/>ASSERTION"])
4["67d69bd7<br/>#quot;isSigner#quot;"]
5(("0ae65c77<br/>NODE"))
6["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
7(["0ad198e4<br/>ASSERTION"])
8["d52596f8<br/>#quot;pubkey#quot;"]
9["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
10(["7769dae6<br/>ASSERTION"])
11["e1a064a8<br/>#quot;complianceCheck#quot;"]
12(("447a24d7<br/>NODE"))
13[/"a91c3392<br/>WRAPPED"\]
14(("6a2827c7<br/>NODE"))
15[/"2e8c60e1<br/>WRAPPED"\]
16(("76c7d72a<br/>NODE"))
17["15389e10<br/>#quot;FTC Consent #9213-1283-9172-1737-2016-C#quot;"]
18(["cff77d98<br/>ASSERTION"])
19["d14b45dc<br/>#quot;consentURL#quot;"]
20["dd9ec4a0<br/>#quot;https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/#quot;"]
21(["599a98bb<br/>ASSERTION"])
22["2392e782<br/>#quot;verifiedFor#quot;"]
23["4a509a5a<br/>#quot;gordian-envelope-1.1.0.dm#quot;"]
24(["6f65d92f<br/>ASSERTION"])
25["7e84d1a9<br/>#quot;verifierInfo#quot;"]
26["5810917f<br/>#quot;Casey C. Case#quot;"]
27(["8061d9f9<br/>ASSERTION"])
28["38906e66<br/>#quot;verifiedSha#quot;"]
29["2dc8e526<br/>#quot;6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7#quot;"]
30(["7b806854<br/>ASSERTION"])
31[/"d59f8c0f<br/>verifiedBy"/]
32["9301115f<br/>Signature"]
33(["8e1f2877<br/>ASSERTION"])
34["10d67046<br/>#quot;previousRelease#quot;"]
35["c0b0b7e1<br/>#quot;https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.7/gordian-env…#quot;"]
36(["90e799be<br/>ASSERTION"])
37["67d69bd7<br/>#quot;isSigner#quot;"]
38(("c833b577<br/>NODE"))
39["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
40(["0b8d474f<br/>ASSERTION"])
41["d52596f8<br/>#quot;pubkey#quot;"]
42["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
43(["f9ce156a<br/>ASSERTION"])
44[/"61fb6a6b<br/>note"/]
45["8c6d932c<br/>#quot;defenestration option#quot;"]
46(["fea3fcfd<br/>ASSERTION"])
47["628ac8d9<br/>#quot;fileInfo#quot;"]
48(("2466ba25<br/>NODE"))
49["4a509a5a<br/>#quot;gordian-envelope-1.1.0.dm#quot;"]
50(["012b600a<br/>ASSERTION"])
51["fd9d5aed<br/>#quot;timestamp#quot;"]
52["b383633a<br/>#quot;1668026219#quot;"]
53(["15e12f13<br/>ASSERTION"])
54["108dbfb1<br/>#quot;sha256#quot;"]
55["2dc8e526<br/>#quot;6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7#quot;"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
1 --> 10
10 -->|pred| 11
10 -->|obj| 12
12 -->|subj| 13
13 -->|subj| 14
14 -->|subj| 15
15 -->|subj| 16
16 -->|subj| 17
16 --> 18
18 -->|pred| 19
18 -->|obj| 20
14 --> 21
21 -->|pred| 22
21 -->|obj| 23
14 --> 24
24 -->|pred| 25
24 -->|obj| 26
14 --> 27
27 -->|pred| 28
27 -->|obj| 29
12 --> 30
30 -->|pred| 31
30 -->|obj| 32
1 --> 33
33 -->|pred| 34
33 -->|obj| 35
1 --> 36
36 -->|pred| 37
36 -->|obj| 38
38 -->|subj| 39
38 --> 40
40 -->|pred| 41
40 -->|obj| 42
1 --> 43
43 -->|pred| 44
43 -->|obj| 45
1 --> 46
46 -->|pred| 47
46 -->|obj| 48
48 -->|subj| 49
48 --> 50
50 -->|pred| 51
50 -->|obj| 52
48 --> 53
53 -->|pred| 54
53 -->|obj| 55
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:red,stroke-width:3.0px
style 13 stroke:red,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:red,stroke-width:3.0px
style 17 stroke:#55f,stroke-width:3.0px
style 18 stroke:red,stroke-width:3.0px
style 19 stroke:#55f,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:red,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:red,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
style 33 stroke:red,stroke-width:3.0px
style 34 stroke:#55f,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:red,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:red,stroke-width:3.0px
style 39 stroke:#55f,stroke-width:3.0px
style 40 stroke:red,stroke-width:3.0px
style 41 stroke:#55f,stroke-width:3.0px
style 42 stroke:#55f,stroke-width:3.0px
style 43 stroke:red,stroke-width:3.0px
style 44 stroke:#55f,stroke-width:3.0px
style 45 stroke:#55f,stroke-width:3.0px
style 46 stroke:red,stroke-width:3.0px
style 47 stroke:#55f,stroke-width:3.0px
style 48 stroke:red,stroke-width:3.0px
style 49 stroke:#55f,stroke-width:3.0px
style 50 stroke:red,stroke-width:3.0px
style 51 stroke:#55f,stroke-width:3.0px
style 52 stroke:#55f,stroke-width:3.0px
style 53 stroke:red,stroke-width:3.0px
style 54 stroke:#55f,stroke-width:3.0px
style 55 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:green,stroke-width:2.0px
linkStyle 10 stroke:#55f,stroke-width:2.0px
linkStyle 11 stroke:red,stroke-width:2.0px
linkStyle 12 stroke:red,stroke-width:2.0px
linkStyle 13 stroke:red,stroke-width:2.0px
linkStyle 14 stroke:red,stroke-width:2.0px
linkStyle 15 stroke:red,stroke-width:2.0px
linkStyle 16 stroke-width:2.0px
linkStyle 17 stroke:green,stroke-width:2.0px
linkStyle 18 stroke:#55f,stroke-width:2.0px
linkStyle 19 stroke-width:2.0px
linkStyle 20 stroke:green,stroke-width:2.0px
linkStyle 21 stroke:#55f,stroke-width:2.0px
linkStyle 22 stroke-width:2.0px
linkStyle 23 stroke:green,stroke-width:2.0px
linkStyle 24 stroke:#55f,stroke-width:2.0px
linkStyle 25 stroke-width:2.0px
linkStyle 26 stroke:green,stroke-width:2.0px
linkStyle 27 stroke:#55f,stroke-width:2.0px
linkStyle 28 stroke-width:2.0px
linkStyle 29 stroke:green,stroke-width:2.0px
linkStyle 30 stroke:#55f,stroke-width:2.0px
linkStyle 31 stroke-width:2.0px
linkStyle 32 stroke:green,stroke-width:2.0px
linkStyle 33 stroke:#55f,stroke-width:2.0px
linkStyle 34 stroke-width:2.0px
linkStyle 35 stroke:green,stroke-width:2.0px
linkStyle 36 stroke:#55f,stroke-width:2.0px
linkStyle 37 stroke:red,stroke-width:2.0px
linkStyle 38 stroke-width:2.0px
linkStyle 39 stroke:green,stroke-width:2.0px
linkStyle 40 stroke:#55f,stroke-width:2.0px
linkStyle 41 stroke-width:2.0px
linkStyle 42 stroke:green,stroke-width:2.0px
linkStyle 43 stroke:#55f,stroke-width:2.0px
linkStyle 44 stroke-width:2.0px
linkStyle 45 stroke:green,stroke-width:2.0px
linkStyle 46 stroke:#55f,stroke-width:2.0px
linkStyle 47 stroke:red,stroke-width:2.0px
linkStyle 48 stroke-width:2.0px
linkStyle 49 stroke:green,stroke-width:2.0px
linkStyle 50 stroke:#55f,stroke-width:2.0px
linkStyle 51 stroke-width:2.0px
linkStyle 52 stroke:green,stroke-width:2.0px
linkStyle 53 stroke:#55f,stroke-width:2.0px
Note the use of the predicate complianceCheck to incorporate Casey’s attestation. This is a purposefully neutral phrase so as not to mislead readers. The only thing that’s actually signed is the subenvelope:
{
"FTC Consent #9213-1283-9172-1737-2016-C" [
"consentURL": "https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/"
]
} [
"verifiedFor": "gordian-envelope-1.1.0.dm"
"verifiedSha": "6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7"
"verifierInfo": "Casey C. Case"
]
If a predicate like isCompliant were instead used, that might mislead readers into thinking that Casey stated something that he didn’t. All that Casey attested to is knowledge of the FTC Consent, that he was the verifier, and that he verifiedFor a specific image, designated by a SHA hash.
Attestations can be tricky: an Envelope creator must carefully think about what’s getting signed and what’s not!
A final version of the Envelope will also include the normal signatures by Bill and Omar:
{
"Gordian Envelope 1.1.0" [
"complianceCheck": {
{
"FTC Consent #9213-1283-9172-1737-2016-C" [
"consentURL": "https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/"
]
} [
"verifiedFor": "gordian-envelope-1.1.0.dm"
"verifiedSha": "6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7"
"verifierInfo": "Casey C. Case"
]
} [
verifiedBy: Signature
]
"fileInfo": "gordian-envelope-1.1.0.dm" [
"sha256": "6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7"
"timestamp": "1668026219"
]
"isSigner": "bill-not-the-science-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"previousRelease": "https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.7/gordian-env…"
note: "defenestration option"
]
} [
verifiedBy: Signature
verifiedBy: Signature
]
graph LR
1(("819dc8e4<br/>NODE"))
2[/"324e4abf<br/>WRAPPED"\]
3(("8cb10a3f<br/>NODE"))
4["5a1b50ef<br/>#quot;Gordian Envelope 1.1.0#quot;"]
5(["484da754<br/>ASSERTION"])
6["67d69bd7<br/>#quot;isSigner#quot;"]
7(("0ae65c77<br/>NODE"))
8["61aece1e<br/>#quot;bill-not-the-science-guy#quot;"]
9(["0ad198e4<br/>ASSERTION"])
10["d52596f8<br/>#quot;pubkey#quot;"]
11["e82d6b98<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxnnvapylszmcwmowzjlkifrktpftnamrdpdjkcfetfskoimeolfcywnloptaswsvltpvahd…#quot;"]
12(["7769dae6<br/>ASSERTION"])
13["e1a064a8<br/>#quot;complianceCheck#quot;"]
14(("447a24d7<br/>NODE"))
15[/"a91c3392<br/>WRAPPED"\]
16(("6a2827c7<br/>NODE"))
17[/"2e8c60e1<br/>WRAPPED"\]
18(("76c7d72a<br/>NODE"))
19["15389e10<br/>#quot;FTC Consent #9213-1283-9172-1737-2016-C#quot;"]
20(["cff77d98<br/>ASSERTION"])
21["d14b45dc<br/>#quot;consentURL#quot;"]
22["dd9ec4a0<br/>#quot;https://www.ftc-consent-resolutions.gov/#9213-1283-9172-1737-2016-C/#quot;"]
23(["599a98bb<br/>ASSERTION"])
24["2392e782<br/>#quot;verifiedFor#quot;"]
25["4a509a5a<br/>#quot;gordian-envelope-1.1.0.dm#quot;"]
26(["6f65d92f<br/>ASSERTION"])
27["7e84d1a9<br/>#quot;verifierInfo#quot;"]
28["5810917f<br/>#quot;Casey C. Case#quot;"]
29(["8061d9f9<br/>ASSERTION"])
30["38906e66<br/>#quot;verifiedSha#quot;"]
31["2dc8e526<br/>#quot;6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7#quot;"]
32(["7b806854<br/>ASSERTION"])
33[/"d59f8c0f<br/>verifiedBy"/]
34["9301115f<br/>Signature"]
35(["8e1f2877<br/>ASSERTION"])
36["10d67046<br/>#quot;previousRelease#quot;"]
37["c0b0b7e1<br/>#quot;https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.0.7/gordian-env…#quot;"]
38(["90e799be<br/>ASSERTION"])
39["67d69bd7<br/>#quot;isSigner#quot;"]
40(("c833b577<br/>NODE"))
41["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
42(["0b8d474f<br/>ASSERTION"])
43["d52596f8<br/>#quot;pubkey#quot;"]
44["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
45(["f9ce156a<br/>ASSERTION"])
46[/"61fb6a6b<br/>note"/]
47["8c6d932c<br/>#quot;defenestration option#quot;"]
48(["fea3fcfd<br/>ASSERTION"])
49["628ac8d9<br/>#quot;fileInfo#quot;"]
50(("2466ba25<br/>NODE"))
51["4a509a5a<br/>#quot;gordian-envelope-1.1.0.dm#quot;"]
52(["012b600a<br/>ASSERTION"])
53["fd9d5aed<br/>#quot;timestamp#quot;"]
54["b383633a<br/>#quot;1668026219#quot;"]
55(["15e12f13<br/>ASSERTION"])
56["108dbfb1<br/>#quot;sha256#quot;"]
57["2dc8e526<br/>#quot;6814fe0bf2981f820ef9595c2c1eab649dfd9508f09f0024d8ce2871207097c7#quot;"]
58(["17c3a040<br/>ASSERTION"])
59[/"d59f8c0f<br/>verifiedBy"/]
60["f3073261<br/>Signature"]
61(["cb58d9fb<br/>ASSERTION"])
62[/"d59f8c0f<br/>verifiedBy"/]
63["7eef0d49<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
3 --> 5
5 -->|pred| 6
5 -->|obj| 7
7 -->|subj| 8
7 --> 9
9 -->|pred| 10
9 -->|obj| 11
3 --> 12
12 -->|pred| 13
12 -->|obj| 14
14 -->|subj| 15
15 -->|subj| 16
16 -->|subj| 17
17 -->|subj| 18
18 -->|subj| 19
18 --> 20
20 -->|pred| 21
20 -->|obj| 22
16 --> 23
23 -->|pred| 24
23 -->|obj| 25
16 --> 26
26 -->|pred| 27
26 -->|obj| 28
16 --> 29
29 -->|pred| 30
29 -->|obj| 31
14 --> 32
32 -->|pred| 33
32 -->|obj| 34
3 --> 35
35 -->|pred| 36
35 -->|obj| 37
3 --> 38
38 -->|pred| 39
38 -->|obj| 40
40 -->|subj| 41
40 --> 42
42 -->|pred| 43
42 -->|obj| 44
3 --> 45
45 -->|pred| 46
45 -->|obj| 47
3 --> 48
48 -->|pred| 49
48 -->|obj| 50
50 -->|subj| 51
50 --> 52
52 -->|pred| 53
52 -->|obj| 54
50 --> 55
55 -->|pred| 56
55 -->|obj| 57
1 --> 58
58 -->|pred| 59
58 -->|obj| 60
1 --> 61
61 -->|pred| 62
61 -->|obj| 63
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:red,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:red,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:red,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:red,stroke-width:3.0px
style 19 stroke:#55f,stroke-width:3.0px
style 20 stroke:red,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:red,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:red,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:red,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:red,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:#55f,stroke-width:3.0px
style 35 stroke:red,stroke-width:3.0px
style 36 stroke:#55f,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:red,stroke-width:3.0px
style 39 stroke:#55f,stroke-width:3.0px
style 40 stroke:red,stroke-width:3.0px
style 41 stroke:#55f,stroke-width:3.0px
style 42 stroke:red,stroke-width:3.0px
style 43 stroke:#55f,stroke-width:3.0px
style 44 stroke:#55f,stroke-width:3.0px
style 45 stroke:red,stroke-width:3.0px
style 46 stroke:#55f,stroke-width:3.0px
style 47 stroke:#55f,stroke-width:3.0px
style 48 stroke:red,stroke-width:3.0px
style 49 stroke:#55f,stroke-width:3.0px
style 50 stroke:red,stroke-width:3.0px
style 51 stroke:#55f,stroke-width:3.0px
style 52 stroke:red,stroke-width:3.0px
style 53 stroke:#55f,stroke-width:3.0px
style 54 stroke:#55f,stroke-width:3.0px
style 55 stroke:red,stroke-width:3.0px
style 56 stroke:#55f,stroke-width:3.0px
style 57 stroke:#55f,stroke-width:3.0px
style 58 stroke:red,stroke-width:3.0px
style 59 stroke:#55f,stroke-width:3.0px
style 60 stroke:#55f,stroke-width:3.0px
style 61 stroke:red,stroke-width:3.0px
style 62 stroke:#55f,stroke-width:3.0px
style 63 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke-width:2.0px
linkStyle 4 stroke:green,stroke-width:2.0px
linkStyle 5 stroke:#55f,stroke-width:2.0px
linkStyle 6 stroke:red,stroke-width:2.0px
linkStyle 7 stroke-width:2.0px
linkStyle 8 stroke:green,stroke-width:2.0px
linkStyle 9 stroke:#55f,stroke-width:2.0px
linkStyle 10 stroke-width:2.0px
linkStyle 11 stroke:green,stroke-width:2.0px
linkStyle 12 stroke:#55f,stroke-width:2.0px
linkStyle 13 stroke:red,stroke-width:2.0px
linkStyle 14 stroke:red,stroke-width:2.0px
linkStyle 15 stroke:red,stroke-width:2.0px
linkStyle 16 stroke:red,stroke-width:2.0px
linkStyle 17 stroke:red,stroke-width:2.0px
linkStyle 18 stroke-width:2.0px
linkStyle 19 stroke:green,stroke-width:2.0px
linkStyle 20 stroke:#55f,stroke-width:2.0px
linkStyle 21 stroke-width:2.0px
linkStyle 22 stroke:green,stroke-width:2.0px
linkStyle 23 stroke:#55f,stroke-width:2.0px
linkStyle 24 stroke-width:2.0px
linkStyle 25 stroke:green,stroke-width:2.0px
linkStyle 26 stroke:#55f,stroke-width:2.0px
linkStyle 27 stroke-width:2.0px
linkStyle 28 stroke:green,stroke-width:2.0px
linkStyle 29 stroke:#55f,stroke-width:2.0px
linkStyle 30 stroke-width:2.0px
linkStyle 31 stroke:green,stroke-width:2.0px
linkStyle 32 stroke:#55f,stroke-width:2.0px
linkStyle 33 stroke-width:2.0px
linkStyle 34 stroke:green,stroke-width:2.0px
linkStyle 35 stroke:#55f,stroke-width:2.0px
linkStyle 36 stroke-width:2.0px
linkStyle 37 stroke:green,stroke-width:2.0px
linkStyle 38 stroke:#55f,stroke-width:2.0px
linkStyle 39 stroke:red,stroke-width:2.0px
linkStyle 40 stroke-width:2.0px
linkStyle 41 stroke:green,stroke-width:2.0px
linkStyle 42 stroke:#55f,stroke-width:2.0px
linkStyle 43 stroke-width:2.0px
linkStyle 44 stroke:green,stroke-width:2.0px
linkStyle 45 stroke:#55f,stroke-width:2.0px
linkStyle 46 stroke-width:2.0px
linkStyle 47 stroke:green,stroke-width:2.0px
linkStyle 48 stroke:#55f,stroke-width:2.0px
linkStyle 49 stroke:red,stroke-width:2.0px
linkStyle 50 stroke-width:2.0px
linkStyle 51 stroke:green,stroke-width:2.0px
linkStyle 52 stroke:#55f,stroke-width:2.0px
linkStyle 53 stroke-width:2.0px
linkStyle 54 stroke:green,stroke-width:2.0px
linkStyle 55 stroke:#55f,stroke-width:2.0px
linkStyle 56 stroke-width:2.0px
linkStyle 57 stroke:green,stroke-width:2.0px
linkStyle 58 stroke:#55f,stroke-width:2.0px
linkStyle 59 stroke-width:2.0px
linkStyle 60 stroke:green,stroke-width:2.0px
linkStyle 61 stroke:#55f,stroke-width:2.0px
5. Casey Changes Up His Software Releases [Chained Changes]
Problem Solved: Casey wants to change signers over time in a way that’s organic and continues to allow for simple validation.
A few years on, Bill leaves software programming for a lucrative career in television and lectures. Though Omar is maintaining the software on his own at this point, Casey wants to ensure that the software still is signed by multiple parties to allow for more robust validation. So he takes over as release manager, checking the software prior to release and adding his own signature.
An ordinary validator will be able to verify that one of the signatures matches a public key he has in his saved Envelope from release 1.7.2. Automatic validation! This will then allow for a continued chain of validation going forward. If Casey produces 1.7.4 on his own, because Omar is out sick, validators can see that Casey’s public key was in 1.7.3, signed by Omar, so they know the new release is safe.
A more strict validator might instead validate the signerInfo for Casey themselves. Even if they miss 1.7.3, they’ll be able to chain back from any later release until they find the initial one with the signerInfo.
{
"Gordian Envelope 1.7.3" [
"fileInfo": "gordian-envelope-1.7.3.dm" [
"sha256": "c2121d1c7b82607fb289282020c6c7f73cb0aaa8e02e5f0529165a4c46591413"
"timestamp": "1668026209"
]
"fileInfo": "gordian-ttools-1.7.3.dm" [
"sha256": "7e6865b88d62b1d2bb7864fc7eb73fe74c99a773d2d224adebdd18d679c023f2"
"timestamp": "1668032076"
]
"isSigner": "casey-the-boss" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxwehehymwkbiolglpnbeevtvttlaafgpdspntrpserplblbgrstwmswjpkkmwdwbatpvahd…"
]
"isSigner": "omarc-bc-guy" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…"
]
"previousRelease": "https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.7.2/gordian-env…"
"signerInfo": "casey-the-boss" [
"pubkeyURL": "https://pki.blockchaincommons.com/casey-the-boss"
]
note: "the latest glorious revision"
]
} [
verifiedBy: Signature
verifiedBy: Signature
]
graph LR
1(("8442ccb3<br/>NODE"))
2[/"660c90b7<br/>WRAPPED"\]
3(("8cdff684<br/>NODE"))
4["af3c537d<br/>#quot;Gordian Envelope 1.7.3#quot;"]
5(["4c86919f<br/>ASSERTION"])
6["10d67046<br/>#quot;previousRelease#quot;"]
7["a4a99c3c<br/>#quot;https://github.com/BlockchainCommons/GordianEnvelope-Experiment/releases/download/v1.7.2/gordian-env…#quot;"]
8(["6e7fcb1c<br/>ASSERTION"])
9["67d69bd7<br/>#quot;isSigner#quot;"]
10(("34f411d0<br/>NODE"))
11["c7e775ab<br/>#quot;casey-the-boss#quot;"]
12(["b2d580a4<br/>ASSERTION"])
13["d52596f8<br/>#quot;pubkey#quot;"]
14["769da384<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxwehehymwkbiolglpnbeevtvttlaafgpdspntrpserplblbgrstwmswjpkkmwdwbatpvahd…#quot;"]
15(["71bbe4c2<br/>ASSERTION"])
16["dbc1553d<br/>#quot;signerInfo#quot;"]
17(("b28b7b74<br/>NODE"))
18["c7e775ab<br/>#quot;casey-the-boss#quot;"]
19(["a31bfd80<br/>ASSERTION"])
20["29c0cd61<br/>#quot;pubkeyURL#quot;"]
21["361430aa<br/>#quot;https://pki.blockchaincommons.com/casey-the-boss#quot;"]
22(["90e799be<br/>ASSERTION"])
23["67d69bd7<br/>#quot;isSigner#quot;"]
24(("c833b577<br/>NODE"))
25["34e0c09c<br/>#quot;omarc-bc-guy#quot;"]
26(["0b8d474f<br/>ASSERTION"])
27["d52596f8<br/>#quot;pubkey#quot;"]
28["929e99e7<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxzojlrltejneykkzcfdaowkcwlbguvtmhsegdwpttwdadrnjtpmchlbrswkbwkivwtpvahd…#quot;"]
29(["922bf933<br/>ASSERTION"])
30[/"61fb6a6b<br/>note"/]
31["540dd49b<br/>#quot;the latest glorious revision#quot;"]
32(["adc524d7<br/>ASSERTION"])
33["628ac8d9<br/>#quot;fileInfo#quot;"]
34(("daa0cdad<br/>NODE"))
35["f0cece42<br/>#quot;gordian-ttools-1.7.3.dm#quot;"]
36(["53087955<br/>ASSERTION"])
37["fd9d5aed<br/>#quot;timestamp#quot;"]
38["abd7ee4e<br/>#quot;1668032076#quot;"]
39(["be287f81<br/>ASSERTION"])
40["108dbfb1<br/>#quot;sha256#quot;"]
41["39f15278<br/>#quot;7e6865b88d62b1d2bb7864fc7eb73fe74c99a773d2d224adebdd18d679c023f2#quot;"]
42(["f6b0290b<br/>ASSERTION"])
43["628ac8d9<br/>#quot;fileInfo#quot;"]
44(("2dff440a<br/>NODE"))
45["2d7eea6f<br/>#quot;gordian-envelope-1.7.3.dm#quot;"]
46(["71094acb<br/>ASSERTION"])
47["108dbfb1<br/>#quot;sha256#quot;"]
48["12c5f463<br/>#quot;c2121d1c7b82607fb289282020c6c7f73cb0aaa8e02e5f0529165a4c46591413#quot;"]
49(["f3a0597e<br/>ASSERTION"])
50["fd9d5aed<br/>#quot;timestamp#quot;"]
51["61b2ca73<br/>#quot;1668026209#quot;"]
52(["55ba3222<br/>ASSERTION"])
53[/"d59f8c0f<br/>verifiedBy"/]
54["9fd67dec<br/>Signature"]
55(["ac321ebe<br/>ASSERTION"])
56[/"d59f8c0f<br/>verifiedBy"/]
57["ce294f99<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
3 --> 5
5 -->|pred| 6
5 -->|obj| 7
3 --> 8
8 -->|pred| 9
8 -->|obj| 10
10 -->|subj| 11
10 --> 12
12 -->|pred| 13
12 -->|obj| 14
3 --> 15
15 -->|pred| 16
15 -->|obj| 17
17 -->|subj| 18
17 --> 19
19 -->|pred| 20
19 -->|obj| 21
3 --> 22
22 -->|pred| 23
22 -->|obj| 24
24 -->|subj| 25
24 --> 26
26 -->|pred| 27
26 -->|obj| 28
3 --> 29
29 -->|pred| 30
29 -->|obj| 31
3 --> 32
32 -->|pred| 33
32 -->|obj| 34
34 -->|subj| 35
34 --> 36
36 -->|pred| 37
36 -->|obj| 38
34 --> 39
39 -->|pred| 40
39 -->|obj| 41
3 --> 42
42 -->|pred| 43
42 -->|obj| 44
44 -->|subj| 45
44 --> 46
46 -->|pred| 47
46 -->|obj| 48
44 --> 49
49 -->|pred| 50
49 -->|obj| 51
1 --> 52
52 -->|pred| 53
52 -->|obj| 54
1 --> 55
55 -->|pred| 56
55 -->|obj| 57
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:#55f,stroke-width:3.0px
style 8 stroke:red,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:red,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:red,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:red,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:red,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:#55f,stroke-width:3.0px
style 32 stroke:red,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:red,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:red,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:#55f,stroke-width:3.0px
style 39 stroke:red,stroke-width:3.0px
style 40 stroke:#55f,stroke-width:3.0px
style 41 stroke:#55f,stroke-width:3.0px
style 42 stroke:red,stroke-width:3.0px
style 43 stroke:#55f,stroke-width:3.0px
style 44 stroke:red,stroke-width:3.0px
style 45 stroke:#55f,stroke-width:3.0px
style 46 stroke:red,stroke-width:3.0px
style 47 stroke:#55f,stroke-width:3.0px
style 48 stroke:#55f,stroke-width:3.0px
style 49 stroke:red,stroke-width:3.0px
style 50 stroke:#55f,stroke-width:3.0px
style 51 stroke:#55f,stroke-width:3.0px
style 52 stroke:red,stroke-width:3.0px
style 53 stroke:#55f,stroke-width:3.0px
style 54 stroke:#55f,stroke-width:3.0px
style 55 stroke:red,stroke-width:3.0px
style 56 stroke:#55f,stroke-width:3.0px
style 57 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke-width:2.0px
linkStyle 4 stroke:green,stroke-width:2.0px
linkStyle 5 stroke:#55f,stroke-width:2.0px
linkStyle 6 stroke-width:2.0px
linkStyle 7 stroke:green,stroke-width:2.0px
linkStyle 8 stroke:#55f,stroke-width:2.0px
linkStyle 9 stroke:red,stroke-width:2.0px
linkStyle 10 stroke-width:2.0px
linkStyle 11 stroke:green,stroke-width:2.0px
linkStyle 12 stroke:#55f,stroke-width:2.0px
linkStyle 13 stroke-width:2.0px
linkStyle 14 stroke:green,stroke-width:2.0px
linkStyle 15 stroke:#55f,stroke-width:2.0px
linkStyle 16 stroke:red,stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke:green,stroke-width:2.0px
linkStyle 19 stroke:#55f,stroke-width:2.0px
linkStyle 20 stroke-width:2.0px
linkStyle 21 stroke:green,stroke-width:2.0px
linkStyle 22 stroke:#55f,stroke-width:2.0px
linkStyle 23 stroke:red,stroke-width:2.0px
linkStyle 24 stroke-width:2.0px
linkStyle 25 stroke:green,stroke-width:2.0px
linkStyle 26 stroke:#55f,stroke-width:2.0px
linkStyle 27 stroke-width:2.0px
linkStyle 28 stroke:green,stroke-width:2.0px
linkStyle 29 stroke:#55f,stroke-width:2.0px
linkStyle 30 stroke-width:2.0px
linkStyle 31 stroke:green,stroke-width:2.0px
linkStyle 32 stroke:#55f,stroke-width:2.0px
linkStyle 33 stroke:red,stroke-width:2.0px
linkStyle 34 stroke-width:2.0px
linkStyle 35 stroke:green,stroke-width:2.0px
linkStyle 36 stroke:#55f,stroke-width:2.0px
linkStyle 37 stroke-width:2.0px
linkStyle 38 stroke:green,stroke-width:2.0px
linkStyle 39 stroke:#55f,stroke-width:2.0px
linkStyle 40 stroke-width:2.0px
linkStyle 41 stroke:green,stroke-width:2.0px
linkStyle 42 stroke:#55f,stroke-width:2.0px
linkStyle 43 stroke:red,stroke-width:2.0px
linkStyle 44 stroke-width:2.0px
linkStyle 45 stroke:green,stroke-width:2.0px
linkStyle 46 stroke:#55f,stroke-width:2.0px
linkStyle 47 stroke-width:2.0px
linkStyle 48 stroke:green,stroke-width:2.0px
linkStyle 49 stroke:#55f,stroke-width:2.0px
linkStyle 50 stroke-width:2.0px
linkStyle 51 stroke:green,stroke-width:2.0px
linkStyle 52 stroke:#55f,stroke-width:2.0px
linkStyle 53 stroke-width:2.0px
linkStyle 54 stroke:green,stroke-width:2.0px
linkStyle 55 stroke:#55f,stroke-width:2.0px
Casey is happy that he’s achieved his goal: creating software releases that are easily validatable in automated ways, even as engineers change over time.
Part Two: Anonymous Signing
Sometimes signers don’t want to reveal information about who they are. That’s the case in the Amira Engagement Model, created at Rebooting the Web of Trust V in Boston, Massachusetts. The following progressive use cases utilize the Amira story to suggest how anonymous signing can be enabled with Gordian Envelope, while still allowing the anonymous signer to come forward in the future if they desire.
6. Amira Signs Anonymously [Anonymous Signature, Web of Trust]
Problem Solved: Amira wants to release software without revealing her identity, while maintaining the option to do so in the future.
Amira wants to volunteer her programming skills to support activist causes, but doesn’t want her boss at the bank to know she’s doing so, lest it impact her daytime job. So she begins working with RISK, which allows her to anonymously support activist projects. Amira is contracted to produce the SisterSpace app by BigBen44. The problem comes of course when Amira needs to release SisterSpace 1.0, which she’ll need to sign. It’s not just that she wants to maintain her anonymity, but also that she wants to have the option to reveal her identity in the future, if his activist programming is successful enough that she decides she can turn it into a new career.
To solve this problem, Amira creates a block of signerInfo for her new alter-ego bwhacker (or “Better World Hacker”), just like she saw in the Gordian Envelope project, and has BigBen44 sign it. But she then largely elides her information before attaching the envelope to the project! Any validator can decide to trust Amira’s signature (or not) based on the Web of Trust created by Ben’s signature. Meanwhile, if Amira wants to reveal her identity at some time in the future she can do so by revealing the envelope that matches the elided assertion.
Amira starts by creating a thorough infoblock envelope:
"bwhacker" [
{
"aliasGitHub": "amira"
} [
salt: Salt
]
{
"email": "amira.khaled.programming@hmail.com"
} [
salt: Salt
]
{
"firstName": "Amira"
} [
salt: Salt
]
{
"lastName": "Khaled"
} [
salt: Salt
]
"photo": "This is Amira Khaled's photo"
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…"
]
graph LR
1(("2f90936e<br/>NODE"))
2["1b099cac<br/>#quot;bwhacker#quot;"]
3(["11310699<br/>ASSERTION"])
4["d52596f8<br/>#quot;pubkey#quot;"]
5["7cb48a87<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…#quot;"]
6(("4f6903a2<br/>NODE"))
7(["5c6fd8b9<br/>ASSERTION"])
8["4bcd8772<br/>#quot;aliasGitHub#quot;"]
9["4c602907<br/>#quot;amira#quot;"]
10(["b76f477f<br/>ASSERTION"])
11[/"3fb4814d<br/>salt"/]
12["2e7d1c26<br/>Salt"]
13(("5cc0b1c8<br/>NODE"))
14(["3e54569f<br/>ASSERTION"])
15["eb62836d<br/>#quot;lastName#quot;"]
16["6c089801<br/>#quot;Khaled#quot;"]
17(["d705c5c0<br/>ASSERTION"])
18[/"3fb4814d<br/>salt"/]
19["f36b1c78<br/>Salt"]
20(("64ab7339<br/>NODE"))
21(["526084ac<br/>ASSERTION"])
22["c4d5323d<br/>#quot;firstName#quot;"]
23["3710316b<br/>#quot;Amira#quot;"]
24(["4ab0b8e3<br/>ASSERTION"])
25[/"3fb4814d<br/>salt"/]
26["0336655f<br/>Salt"]
27(["b0692f4b<br/>ASSERTION"])
28["a791d0c7<br/>#quot;photo#quot;"]
29["f74cc03b<br/>#quot;This is Amira Khaled's photo#quot;"]
30(("bc8187c9<br/>NODE"))
31(["43dc8696<br/>ASSERTION"])
32["a9400195<br/>#quot;email#quot;"]
33["346da217<br/>#quot;amira.khaled.programming@hmail.com#quot;"]
34(["11d4a558<br/>ASSERTION"])
35[/"3fb4814d<br/>salt"/]
36["955f2fff<br/>Salt"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
1 --> 6
6 -->|subj| 7
7 -->|pred| 8
7 -->|obj| 9
6 --> 10
10 -->|pred| 11
10 -->|obj| 12
1 --> 13
13 -->|subj| 14
14 -->|pred| 15
14 -->|obj| 16
13 --> 17
17 -->|pred| 18
17 -->|obj| 19
1 --> 20
20 -->|subj| 21
21 -->|pred| 22
21 -->|obj| 23
20 --> 24
24 -->|pred| 25
24 -->|obj| 26
1 --> 27
27 -->|pred| 28
27 -->|obj| 29
1 --> 30
30 -->|subj| 31
31 -->|pred| 32
31 -->|obj| 33
30 --> 34
34 -->|pred| 35
34 -->|obj| 36
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:#55f,stroke-width:3.0px
style 6 stroke:red,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:#55f,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:red,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:#55f,stroke-width:3.0px
style 20 stroke:red,stroke-width:3.0px
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:red,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:red,stroke-width:3.0px
style 31 stroke:red,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:red,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
linkStyle 4 stroke-width:2.0px
linkStyle 5 stroke:red,stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:green,stroke-width:2.0px
linkStyle 10 stroke:#55f,stroke-width:2.0px
linkStyle 11 stroke-width:2.0px
linkStyle 12 stroke:red,stroke-width:2.0px
linkStyle 13 stroke:green,stroke-width:2.0px
linkStyle 14 stroke:#55f,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke:green,stroke-width:2.0px
linkStyle 17 stroke:#55f,stroke-width:2.0px
linkStyle 18 stroke-width:2.0px
linkStyle 19 stroke:red,stroke-width:2.0px
linkStyle 20 stroke:green,stroke-width:2.0px
linkStyle 21 stroke:#55f,stroke-width:2.0px
linkStyle 22 stroke-width:2.0px
linkStyle 23 stroke:green,stroke-width:2.0px
linkStyle 24 stroke:#55f,stroke-width:2.0px
linkStyle 25 stroke-width:2.0px
linkStyle 26 stroke:green,stroke-width:2.0px
linkStyle 27 stroke:#55f,stroke-width:2.0px
linkStyle 28 stroke-width:2.0px
linkStyle 29 stroke:red,stroke-width:2.0px
linkStyle 30 stroke:green,stroke-width:2.0px
linkStyle 31 stroke:#55f,stroke-width:2.0px
linkStyle 32 stroke-width:2.0px
linkStyle 33 stroke:green,stroke-width:2.0px
linkStyle 34 stroke:#55f,stroke-width:2.0px
Even if she decides to introduce herself to the world at some future time, this may be more information than Amira wants to reveal, but she’ll be able to release a partially elided infoblock in the future is she prefers. Note that Amira salts most of the assertions to ensure that they can’t be accidentally correlated even if she later reveals part of the information.
Ben takes Amira’s envelope, adds on information about himself, then signs it all:
{
{
"bwhacker" [
{
"aliasGitHub": "amira"
} [
salt: Salt
]
{
"email": "amira.khaled.programming@hmail.com"
} [
salt: Salt
]
{
"firstName": "Amira"
} [
salt: Salt
]
{
"lastName": "Khaled"
} [
salt: Salt
]
"photo": "This is Amira Khaled's photo"
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…"
]
} [
"verifierInfo": "bigben44" [
"pubkeyURL": "https://github.com/bigben44.keys"
]
]
} [
verifiedBy: Signature
]
graph LR
1(("e4925bbe<br/>NODE"))
2[/"bcdfaec2<br/>WRAPPED"\]
3(("b7387f30<br/>NODE"))
4[/"121eb051<br/>WRAPPED"\]
5(("2f90936e<br/>NODE"))
6["1b099cac<br/>#quot;bwhacker#quot;"]
7(["11310699<br/>ASSERTION"])
8["d52596f8<br/>#quot;pubkey#quot;"]
9["7cb48a87<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…#quot;"]
10(("4f6903a2<br/>NODE"))
11(["5c6fd8b9<br/>ASSERTION"])
12["4bcd8772<br/>#quot;aliasGitHub#quot;"]
13["4c602907<br/>#quot;amira#quot;"]
14(["b76f477f<br/>ASSERTION"])
15[/"3fb4814d<br/>salt"/]
16["2e7d1c26<br/>Salt"]
17(("5cc0b1c8<br/>NODE"))
18(["3e54569f<br/>ASSERTION"])
19["eb62836d<br/>#quot;lastName#quot;"]
20["6c089801<br/>#quot;Khaled#quot;"]
21(["d705c5c0<br/>ASSERTION"])
22[/"3fb4814d<br/>salt"/]
23["f36b1c78<br/>Salt"]
24(("64ab7339<br/>NODE"))
25(["526084ac<br/>ASSERTION"])
26["c4d5323d<br/>#quot;firstName#quot;"]
27["3710316b<br/>#quot;Amira#quot;"]
28(["4ab0b8e3<br/>ASSERTION"])
29[/"3fb4814d<br/>salt"/]
30["0336655f<br/>Salt"]
31(["b0692f4b<br/>ASSERTION"])
32["a791d0c7<br/>#quot;photo#quot;"]
33["f74cc03b<br/>#quot;This is Amira Khaled's photo#quot;"]
34(("bc8187c9<br/>NODE"))
35(["43dc8696<br/>ASSERTION"])
36["a9400195<br/>#quot;email#quot;"]
37["346da217<br/>#quot;amira.khaled.programming@hmail.com#quot;"]
38(["11d4a558<br/>ASSERTION"])
39[/"3fb4814d<br/>salt"/]
40["955f2fff<br/>Salt"]
41(["a45ab5f0<br/>ASSERTION"])
42["7e84d1a9<br/>#quot;verifierInfo#quot;"]
43(("eeab1852<br/>NODE"))
44["c3f77745<br/>#quot;bigben44#quot;"]
45(["e2a29393<br/>ASSERTION"])
46["29c0cd61<br/>#quot;pubkeyURL#quot;"]
47["2a90fca7<br/>#quot;https://github.com/bigben44.keys#quot;"]
48(["c2cebc0d<br/>ASSERTION"])
49[/"d59f8c0f<br/>verifiedBy"/]
50["fb894c92<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
4 -->|subj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
5 --> 10
10 -->|subj| 11
11 -->|pred| 12
11 -->|obj| 13
10 --> 14
14 -->|pred| 15
14 -->|obj| 16
5 --> 17
17 -->|subj| 18
18 -->|pred| 19
18 -->|obj| 20
17 --> 21
21 -->|pred| 22
21 -->|obj| 23
5 --> 24
24 -->|subj| 25
25 -->|pred| 26
25 -->|obj| 27
24 --> 28
28 -->|pred| 29
28 -->|obj| 30
5 --> 31
31 -->|pred| 32
31 -->|obj| 33
5 --> 34
34 -->|subj| 35
35 -->|pred| 36
35 -->|obj| 37
34 --> 38
38 -->|pred| 39
38 -->|obj| 40
3 --> 41
41 -->|pred| 42
41 -->|obj| 43
43 -->|subj| 44
43 --> 45
45 -->|pred| 46
45 -->|obj| 47
1 --> 48
48 -->|pred| 49
48 -->|obj| 50
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:red,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:red,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:red,stroke-width:3.0px
style 19 stroke:#55f,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:red,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:red,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:red,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:red,stroke-width:3.0px
style 35 stroke:red,stroke-width:3.0px
style 36 stroke:#55f,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:red,stroke-width:3.0px
style 39 stroke:#55f,stroke-width:3.0px
style 40 stroke:#55f,stroke-width:3.0px
style 41 stroke:red,stroke-width:3.0px
style 42 stroke:#55f,stroke-width:3.0px
style 43 stroke:red,stroke-width:3.0px
style 44 stroke:#55f,stroke-width:3.0px
style 45 stroke:red,stroke-width:3.0px
style 46 stroke:#55f,stroke-width:3.0px
style 47 stroke:#55f,stroke-width:3.0px
style 48 stroke:red,stroke-width:3.0px
style 49 stroke:#55f,stroke-width:3.0px
style 50 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke:red,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:red,stroke-width:2.0px
linkStyle 10 stroke:green,stroke-width:2.0px
linkStyle 11 stroke:#55f,stroke-width:2.0px
linkStyle 12 stroke-width:2.0px
linkStyle 13 stroke:green,stroke-width:2.0px
linkStyle 14 stroke:#55f,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke:red,stroke-width:2.0px
linkStyle 17 stroke:green,stroke-width:2.0px
linkStyle 18 stroke:#55f,stroke-width:2.0px
linkStyle 19 stroke-width:2.0px
linkStyle 20 stroke:green,stroke-width:2.0px
linkStyle 21 stroke:#55f,stroke-width:2.0px
linkStyle 22 stroke-width:2.0px
linkStyle 23 stroke:red,stroke-width:2.0px
linkStyle 24 stroke:green,stroke-width:2.0px
linkStyle 25 stroke:#55f,stroke-width:2.0px
linkStyle 26 stroke-width:2.0px
linkStyle 27 stroke:green,stroke-width:2.0px
linkStyle 28 stroke:#55f,stroke-width:2.0px
linkStyle 29 stroke-width:2.0px
linkStyle 30 stroke:green,stroke-width:2.0px
linkStyle 31 stroke:#55f,stroke-width:2.0px
linkStyle 32 stroke-width:2.0px
linkStyle 33 stroke:red,stroke-width:2.0px
linkStyle 34 stroke:green,stroke-width:2.0px
linkStyle 35 stroke:#55f,stroke-width:2.0px
linkStyle 36 stroke-width:2.0px
linkStyle 37 stroke:green,stroke-width:2.0px
linkStyle 38 stroke:#55f,stroke-width:2.0px
linkStyle 39 stroke-width:2.0px
linkStyle 40 stroke:green,stroke-width:2.0px
linkStyle 41 stroke:#55f,stroke-width:2.0px
linkStyle 42 stroke:red,stroke-width:2.0px
linkStyle 43 stroke-width:2.0px
linkStyle 44 stroke:green,stroke-width:2.0px
linkStyle 45 stroke:#55f,stroke-width:2.0px
linkStyle 46 stroke-width:2.0px
linkStyle 47 stroke:green,stroke-width:2.0px
linkStyle 48 stroke:#55f,stroke-width:2.0px
In an alternative scenario, Amira might have presented Ben with her information already elided. This would allow him to sign without knowing who Amira actually is. However, signing elided information is very dangerous. (The envelope-cli warns against it, but allows it if the user is insistent.) Since it’s not a best practice, that alternative is not utilized in this use case.
Amira should keep her unelided, signed envelope somewhere very safe. It can be simply stored in ur:envelope form.
ur:envelope/lftpsptpvtlftpsptpvtlttpsptpcsisidktishsiajeihjptpsptputlftpsptpcsiyjokpidjeihkktpsptpcsksplkpjpftiajpkkjojyjldpjokpidjeihkkjkdljziyjyhshsjljkihisieiaksisjkkpjyknjkjyihjkjpjokkjpjzieinjpjziojzidihiaksjljkimjlihiaktiyiykkjzjpjoieiokpiaisjzjejljtidktimjziokpjpkkjpisjzihiajnjeioiyjojyjokohsisieiaksjzjlkkjejkjtjpisktjojohsknjnjyjliejtiajtjkjyjyjljkiyimihjyjkiohsjzjpknjljeinjlksidjyjejkiyjpidknjoiykpjlhsjyjyjyjzihjnjejyjyinjkiyisidiektjeidiotpsplftpsptputlftpsptpcsjehsjzinhsjkflinjyfdkpidtpsptpcsihhsjninjphstpsptputlftpsptpurbstpsptpcstaaossgawkcefezmryrsgomudttpsplftpsptputlftpsptpcsisjzhsjkjyglhsjnihtpsptpcsiygrishsjzihietpsptputlftpsptpurbstpsptpcstaaossgedeasvemygslptkhgaehttpsplftpsptputlftpsptpcsiniyinjpjkjyglhsjnihtpsptpcsihfpjninjphstpsptputlftpsptpurbstpsptpcstaaossgtehdtseptvsuycxhswepkurlysetpsptputlftpsptpcsihjoisjljyjltpsptpcsksceghisinjkcxinjkcxfpjninjphscxgrishsjzihiedijkcxjoisjljyjltpsplftpsptputlftpsptpcsihihjnhsinjztpsptpcskscphsjninjphsdmjeishsjzihiedmjojpjliojphsjnjninjtiofzisjnhsinjzdmiajljntpsptputlftpsptpurbstpsptpcstaaossgdrnmucwqzinkomkldmknsoepmzomssokntpsptputlftpsptpcsjzkoihjpiniyinihjpgajtiyjltpsplftpsptpcsisidinioidihjteeeetpsptputlftpsptpcsinjokpidjeihkkgogmgstpsptpcskscxisjyjyjojkftdldlioinjyiskpiddmiajljndlidinioidihjteeeedmjeihkkjktpsptputlftpsptpuraxtpsptpcstpuehdfzvlgmtkrfrkntwdlufrmylsytfzsksoqdpraoftiewdpldictsaetfgtboyvtpdcfnydafmzcsgflhelopmqzskcwrtgmrtvlaogobbchvedmeybdwelofyoyplvazolpcfyarkas
However for the purpose of software release, she's going to want to largely elide it.
{ { “bwhacker” [ “pubkey”: “ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…” ELIDED (5) ] } [ “verifierInfo”: “bigben44” [ “pubkeyURL”: “https://github.com/bigben44.keys” ] ] } [ verifiedBy: Signature ]
```mermaid
graph LR
1(("e4925bbe<br/>NODE"))
2[/"bcdfaec2<br/>WRAPPED"\]
3(("b7387f30<br/>NODE"))
4[/"121eb051<br/>WRAPPED"\]
5(("2f90936e<br/>NODE"))
6["1b099cac<br/>#quot;bwhacker#quot;"]
7(["11310699<br/>ASSERTION"])
8["d52596f8<br/>#quot;pubkey#quot;"]
9["7cb48a87<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…#quot;"]
104f6903a2<br/>ELIDED
115cc0b1c8<br/>ELIDED
1264ab7339<br/>ELIDED
13b0692f4b<br/>ELIDED
14bc8187c9<br/>ELIDED
15(["a45ab5f0<br/>ASSERTION"])
16["7e84d1a9<br/>#quot;verifierInfo#quot;"]
17(("eeab1852<br/>NODE"))
18["c3f77745<br/>#quot;bigben44#quot;"]
19(["e2a29393<br/>ASSERTION"])
20["29c0cd61<br/>#quot;pubkeyURL#quot;"]
21["2a90fca7<br/>#quot;https://github.com/bigben44.keys#quot;"]
22(["c2cebc0d<br/>ASSERTION"])
23[/"d59f8c0f<br/>verifiedBy"/]
24["fb894c92<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
4 -->|subj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
5 --> 10
5 --> 11
5 --> 12
5 --> 13
5 --> 14
3 --> 15
15 -->|pred| 16
15 -->|obj| 17
17 -->|subj| 18
17 --> 19
19 -->|pred| 20
19 -->|obj| 21
1 --> 22
22 -->|pred| 23
22 -->|obj| 24
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:red,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 11 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 12 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 13 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 14 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 15 stroke:red,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:red,stroke-width:3.0px
style 18 stroke:#55f,stroke-width:3.0px
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:#55f,stroke-width:3.0px
style 22 stroke:red,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke:red,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke-width:2.0px
linkStyle 10 stroke-width:2.0px
linkStyle 11 stroke-width:2.0px
linkStyle 12 stroke-width:2.0px
linkStyle 13 stroke-width:2.0px
linkStyle 14 stroke:green,stroke-width:2.0px
linkStyle 15 stroke:#55f,stroke-width:2.0px
linkStyle 16 stroke:red,stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke:green,stroke-width:2.0px
linkStyle 19 stroke:#55f,stroke-width:2.0px
linkStyle 20 stroke-width:2.0px
linkStyle 21 stroke:green,stroke-width:2.0px
linkStyle 22 stroke:#55f,stroke-width:2.0px
Amira can now release SisterSpace by signing with the private key linked to the public key that Ben verified:
"Sister Space 1.0.0" [
"fileInfo": "sister-space-1.0.0.dm" [
"sha256": "30f16e13b25892955fcbe950503be6b6328b5a7edcd7f2f9afe7fb164e52aed0"
"timestamp": "1670448151"
]
"note": "initial release"
"signerInfo": {
{
"bwhacker" [
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…"
ELIDED (5)
]
} [
"verifierInfo": "bigben44" [
"pubkeyURL": "https://github.com/bigben44.keys"
]
]
} [
verifiedBy: Signature
]
]
graph LR
1(("08179d0c<br/>NODE"))
2["14084e97<br/>#quot;Sister Space 1.0.0#quot;"]
3(["0c3105a5<br/>ASSERTION"])
4["dbc1553d<br/>#quot;signerInfo#quot;"]
5(("e4925bbe<br/>NODE"))
6[/"bcdfaec2<br/>WRAPPED"\]
7(("b7387f30<br/>NODE"))
8[/"121eb051<br/>WRAPPED"\]
9(("2f90936e<br/>NODE"))
10["1b099cac<br/>#quot;bwhacker#quot;"]
11(["11310699<br/>ASSERTION"])
12["d52596f8<br/>#quot;pubkey#quot;"]
13["7cb48a87<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…#quot;"]
144f6903a2<br/>ELIDED
155cc0b1c8<br/>ELIDED
1664ab7339<br/>ELIDED
17b0692f4b<br/>ELIDED
18bc8187c9<br/>ELIDED
19(["a45ab5f0<br/>ASSERTION"])
20["7e84d1a9<br/>#quot;verifierInfo#quot;"]
21(("eeab1852<br/>NODE"))
22["c3f77745<br/>#quot;bigben44#quot;"]
23(["e2a29393<br/>ASSERTION"])
24["29c0cd61<br/>#quot;pubkeyURL#quot;"]
25["2a90fca7<br/>#quot;https://github.com/bigben44.keys#quot;"]
26(["c2cebc0d<br/>ASSERTION"])
27[/"d59f8c0f<br/>verifiedBy"/]
28["fb894c92<br/>Signature"]
29(["adc69437<br/>ASSERTION"])
30["628ac8d9<br/>#quot;fileInfo#quot;"]
31(("91d5778e<br/>NODE"))
32["8a64a6b4<br/>#quot;sister-space-1.0.0.dm#quot;"]
33(["90f97e58<br/>ASSERTION"])
34["fd9d5aed<br/>#quot;timestamp#quot;"]
35["8bcc29f7<br/>#quot;1670448151#quot;"]
36(["ab64c8fb<br/>ASSERTION"])
37["108dbfb1<br/>#quot;sha256#quot;"]
38["d56a9fad<br/>#quot;30f16e13b25892955fcbe950503be6b6328b5a7edcd7f2f9afe7fb164e52aed0#quot;"]
39(["c7711b07<br/>ASSERTION"])
40["4310575f<br/>#quot;note#quot;"]
41["fa62ba29<br/>#quot;initial release#quot;"]
1 -->|subj| 2
1 --> 3
3 -->|pred| 4
3 -->|obj| 5
5 -->|subj| 6
6 -->|subj| 7
7 -->|subj| 8
8 -->|subj| 9
9 -->|subj| 10
9 --> 11
11 -->|pred| 12
11 -->|obj| 13
9 --> 14
9 --> 15
9 --> 16
9 --> 17
9 --> 18
7 --> 19
19 -->|pred| 20
19 -->|obj| 21
21 -->|subj| 22
21 --> 23
23 -->|pred| 24
23 -->|obj| 25
5 --> 26
26 -->|pred| 27
26 -->|obj| 28
1 --> 29
29 -->|pred| 30
29 -->|obj| 31
31 -->|subj| 32
31 --> 33
33 -->|pred| 34
33 -->|obj| 35
31 --> 36
36 -->|pred| 37
36 -->|obj| 38
1 --> 39
39 -->|pred| 40
39 -->|obj| 41
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:#55f,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:#55f,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:red,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:red,stroke-width:3.0px
style 9 stroke:red,stroke-width:3.0px
style 10 stroke:#55f,stroke-width:3.0px
style 11 stroke:red,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 15 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 16 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 17 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 18 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 19 stroke:red,stroke-width:3.0px
style 20 stroke:#55f,stroke-width:3.0px
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:red,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:red,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:red,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:red,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
style 33 stroke:red,stroke-width:3.0px
style 34 stroke:#55f,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:red,stroke-width:3.0px
style 37 stroke:#55f,stroke-width:3.0px
style 38 stroke:#55f,stroke-width:3.0px
style 39 stroke:red,stroke-width:3.0px
style 40 stroke:#55f,stroke-width:3.0px
style 41 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke-width:2.0px
linkStyle 2 stroke:green,stroke-width:2.0px
linkStyle 3 stroke:#55f,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke:red,stroke-width:2.0px
linkStyle 6 stroke:red,stroke-width:2.0px
linkStyle 7 stroke:red,stroke-width:2.0px
linkStyle 8 stroke:red,stroke-width:2.0px
linkStyle 9 stroke-width:2.0px
linkStyle 10 stroke:green,stroke-width:2.0px
linkStyle 11 stroke:#55f,stroke-width:2.0px
linkStyle 12 stroke-width:2.0px
linkStyle 13 stroke-width:2.0px
linkStyle 14 stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke:green,stroke-width:2.0px
linkStyle 19 stroke:#55f,stroke-width:2.0px
linkStyle 20 stroke:red,stroke-width:2.0px
linkStyle 21 stroke-width:2.0px
linkStyle 22 stroke:green,stroke-width:2.0px
linkStyle 23 stroke:#55f,stroke-width:2.0px
linkStyle 24 stroke-width:2.0px
linkStyle 25 stroke:green,stroke-width:2.0px
linkStyle 26 stroke:#55f,stroke-width:2.0px
linkStyle 27 stroke-width:2.0px
linkStyle 28 stroke:green,stroke-width:2.0px
linkStyle 29 stroke:#55f,stroke-width:2.0px
linkStyle 30 stroke:red,stroke-width:2.0px
linkStyle 31 stroke-width:2.0px
linkStyle 32 stroke:green,stroke-width:2.0px
linkStyle 33 stroke:#55f,stroke-width:2.0px
linkStyle 34 stroke-width:2.0px
linkStyle 35 stroke:green,stroke-width:2.0px
linkStyle 36 stroke:#55f,stroke-width:2.0px
linkStyle 37 stroke-width:2.0px
linkStyle 38 stroke:green,stroke-width:2.0px
linkStyle 39 stroke:#55f,stroke-width:2.0px
Validators can choose to trust Amira’s signature (or not!) based on Ben’s verification of the associated pubkey and the Web of Trust he’s thus created. The fact that there’s also elided information in the signerInfo subenvelope is irrelevent to the software release as it currently stands.
7. Amira Reveals Her Identity [Progressive Trust]
Problem Solved: Amira now wants to reveal her personal information to take advantage of her programming success.
Amira receives considerable acclaim for her work on SisterSpace, especially as she expands the app over the new few years. She eventually decides that could leave behind her stodgy bank career to do activist programming full time, but to do so, she must prove she’s bwhacker! She’s prepared to start the process by revealing her identity to a few additional activist-focused clients.
Fortunately, she planned for this from the start. Her signerInfo actually contains considerable personally identifying information, she just salted and elided it so that it couldn’t be correlated. All she needs to do now is either produce a partially or entirely unelided version of her signed signerInfo envelope or just offer up the unelided assertions for individual parts of the envelopes. Either will allow a validator to check the hashes and see that Amira’s information matches what Ben signed off on in the original envelope.
She starts out by revealing her other GitHub ID, which does use her actual first name, but which doesn’t have any other connections to her identity:
{
{
"bwhacker" [
{
"aliasGitHub": "amira"
} [
salt: Salt
]
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…"
ELIDED (4)
]
} [
"verifierInfo": "bigben44" [
"pubkeyURL": "https://github.com/bigben44.keys"
]
]
} [
verifiedBy: Signature
]
graph LR
1(("e4925bbe<br/>NODE"))
2[/"bcdfaec2<br/>WRAPPED"\]
3(("b7387f30<br/>NODE"))
4[/"121eb051<br/>WRAPPED"\]
5(("2f90936e<br/>NODE"))
6["1b099cac<br/>#quot;bwhacker#quot;"]
7(["11310699<br/>ASSERTION"])
8["d52596f8<br/>#quot;pubkey#quot;"]
9["7cb48a87<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…#quot;"]
10(("4f6903a2<br/>NODE"))
11(["5c6fd8b9<br/>ASSERTION"])
12["4bcd8772<br/>#quot;aliasGitHub#quot;"]
13["4c602907<br/>#quot;amira#quot;"]
14(["b76f477f<br/>ASSERTION"])
15[/"3fb4814d<br/>salt"/]
16["2e7d1c26<br/>Salt"]
175cc0b1c8<br/>ELIDED
1864ab7339<br/>ELIDED
19b0692f4b<br/>ELIDED
20bc8187c9<br/>ELIDED
21(["a45ab5f0<br/>ASSERTION"])
22["7e84d1a9<br/>#quot;verifierInfo#quot;"]
23(("eeab1852<br/>NODE"))
24["c3f77745<br/>#quot;bigben44#quot;"]
25(["e2a29393<br/>ASSERTION"])
26["29c0cd61<br/>#quot;pubkeyURL#quot;"]
27["2a90fca7<br/>#quot;https://github.com/bigben44.keys#quot;"]
28(["c2cebc0d<br/>ASSERTION"])
29[/"d59f8c0f<br/>verifiedBy"/]
30["fb894c92<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
4 -->|subj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
5 --> 10
10 -->|subj| 11
11 -->|pred| 12
11 -->|obj| 13
10 --> 14
14 -->|pred| 15
14 -->|obj| 16
5 --> 17
5 --> 18
5 --> 19
5 --> 20
3 --> 21
21 -->|pred| 22
21 -->|obj| 23
23 -->|subj| 24
23 --> 25
25 -->|pred| 26
25 -->|obj| 27
1 --> 28
28 -->|pred| 29
28 -->|obj| 30
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:red,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:red,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 18 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 19 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 20 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:red,stroke-width:3.0px
style 24 stroke:#55f,stroke-width:3.0px
style 25 stroke:red,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:#55f,stroke-width:3.0px
style 28 stroke:red,stroke-width:3.0px
style 29 stroke:#55f,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke:red,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:red,stroke-width:2.0px
linkStyle 10 stroke:green,stroke-width:2.0px
linkStyle 11 stroke:#55f,stroke-width:2.0px
linkStyle 12 stroke-width:2.0px
linkStyle 13 stroke:green,stroke-width:2.0px
linkStyle 14 stroke:#55f,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke-width:2.0px
linkStyle 19 stroke-width:2.0px
linkStyle 20 stroke:green,stroke-width:2.0px
linkStyle 21 stroke:#55f,stroke-width:2.0px
linkStyle 22 stroke:red,stroke-width:2.0px
linkStyle 23 stroke-width:2.0px
linkStyle 24 stroke:green,stroke-width:2.0px
linkStyle 25 stroke:#55f,stroke-width:2.0px
linkStyle 26 stroke-width:2.0px
linkStyle 27 stroke:green,stroke-width:2.0px
linkStyle 28 stroke:#55f,stroke-width:2.0px
Over time, Amira develops some trust with her new clients and also reveals her email address, so that they can have private, out-of-band communications.
{
{
"bwhacker" [
{
"aliasGitHub": "amira"
} [
salt: Salt
]
{
"email": "amira.khaled.programming@hmail.com"
} [
salt: Salt
]
"pubkey": "ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…"
ELIDED (3)
]
} [
"verifierInfo": "bigben44" [
"pubkeyURL": "https://github.com/bigben44.keys"
]
]
} [
verifiedBy: Signature
]
graph LR
1(("e4925bbe<br/>NODE"))
2[/"bcdfaec2<br/>WRAPPED"\]
3(("b7387f30<br/>NODE"))
4[/"121eb051<br/>WRAPPED"\]
5(("2f90936e<br/>NODE"))
6["1b099cac<br/>#quot;bwhacker#quot;"]
7(["11310699<br/>ASSERTION"])
8["d52596f8<br/>#quot;pubkey#quot;"]
9["7cb48a87<br/>#quot;ur:crypto-pubkeys/lftaaosehdcxhsutzstesrpyrldirlglbecxosjoecwffylrpdguchlkonbwjlguryrhlecmkgfptpvahd…#quot;"]
10(("4f6903a2<br/>NODE"))
11(["5c6fd8b9<br/>ASSERTION"])
12["4bcd8772<br/>#quot;aliasGitHub#quot;"]
13["4c602907<br/>#quot;amira#quot;"]
14(["b76f477f<br/>ASSERTION"])
15[/"3fb4814d<br/>salt"/]
16["2e7d1c26<br/>Salt"]
175cc0b1c8<br/>ELIDED
1864ab7339<br/>ELIDED
19b0692f4b<br/>ELIDED
20(("bc8187c9<br/>NODE"))
21(["43dc8696<br/>ASSERTION"])
22["a9400195<br/>#quot;email#quot;"]
23["346da217<br/>#quot;amira.khaled.programming@hmail.com#quot;"]
24(["11d4a558<br/>ASSERTION"])
25[/"3fb4814d<br/>salt"/]
26["955f2fff<br/>Salt"]
27(["a45ab5f0<br/>ASSERTION"])
28["7e84d1a9<br/>#quot;verifierInfo#quot;"]
29(("eeab1852<br/>NODE"))
30["c3f77745<br/>#quot;bigben44#quot;"]
31(["e2a29393<br/>ASSERTION"])
32["29c0cd61<br/>#quot;pubkeyURL#quot;"]
33["2a90fca7<br/>#quot;https://github.com/bigben44.keys#quot;"]
34(["c2cebc0d<br/>ASSERTION"])
35[/"d59f8c0f<br/>verifiedBy"/]
36["fb894c92<br/>Signature"]
1 -->|subj| 2
2 -->|subj| 3
3 -->|subj| 4
4 -->|subj| 5
5 -->|subj| 6
5 --> 7
7 -->|pred| 8
7 -->|obj| 9
5 --> 10
10 -->|subj| 11
11 -->|pred| 12
11 -->|obj| 13
10 --> 14
14 -->|pred| 15
14 -->|obj| 16
5 --> 17
5 --> 18
5 --> 19
5 --> 20
20 -->|subj| 21
21 -->|pred| 22
21 -->|obj| 23
20 --> 24
24 -->|pred| 25
24 -->|obj| 26
3 --> 27
27 -->|pred| 28
27 -->|obj| 29
29 -->|subj| 30
29 --> 31
31 -->|pred| 32
31 -->|obj| 33
1 --> 34
34 -->|pred| 35
34 -->|obj| 36
style 1 stroke:red,stroke-width:3.0px
style 2 stroke:red,stroke-width:3.0px
style 3 stroke:red,stroke-width:3.0px
style 4 stroke:red,stroke-width:3.0px
style 5 stroke:red,stroke-width:3.0px
style 6 stroke:#55f,stroke-width:3.0px
style 7 stroke:red,stroke-width:3.0px
style 8 stroke:#55f,stroke-width:3.0px
style 9 stroke:#55f,stroke-width:3.0px
style 10 stroke:red,stroke-width:3.0px
style 11 stroke:red,stroke-width:3.0px
style 12 stroke:#55f,stroke-width:3.0px
style 13 stroke:#55f,stroke-width:3.0px
style 14 stroke:red,stroke-width:3.0px
style 15 stroke:#55f,stroke-width:3.0px
style 16 stroke:#55f,stroke-width:3.0px
style 17 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 18 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 19 stroke:#55f,stroke-width:3.0px,stroke-dasharray:5.0 5.0
style 20 stroke:red,stroke-width:3.0px
style 21 stroke:red,stroke-width:3.0px
style 22 stroke:#55f,stroke-width:3.0px
style 23 stroke:#55f,stroke-width:3.0px
style 24 stroke:red,stroke-width:3.0px
style 25 stroke:#55f,stroke-width:3.0px
style 26 stroke:#55f,stroke-width:3.0px
style 27 stroke:red,stroke-width:3.0px
style 28 stroke:#55f,stroke-width:3.0px
style 29 stroke:red,stroke-width:3.0px
style 30 stroke:#55f,stroke-width:3.0px
style 31 stroke:red,stroke-width:3.0px
style 32 stroke:#55f,stroke-width:3.0px
style 33 stroke:#55f,stroke-width:3.0px
style 34 stroke:red,stroke-width:3.0px
style 35 stroke:#55f,stroke-width:3.0px
style 36 stroke:#55f,stroke-width:3.0px
linkStyle 0 stroke:red,stroke-width:2.0px
linkStyle 1 stroke:red,stroke-width:2.0px
linkStyle 2 stroke:red,stroke-width:2.0px
linkStyle 3 stroke:red,stroke-width:2.0px
linkStyle 4 stroke:red,stroke-width:2.0px
linkStyle 5 stroke-width:2.0px
linkStyle 6 stroke:green,stroke-width:2.0px
linkStyle 7 stroke:#55f,stroke-width:2.0px
linkStyle 8 stroke-width:2.0px
linkStyle 9 stroke:red,stroke-width:2.0px
linkStyle 10 stroke:green,stroke-width:2.0px
linkStyle 11 stroke:#55f,stroke-width:2.0px
linkStyle 12 stroke-width:2.0px
linkStyle 13 stroke:green,stroke-width:2.0px
linkStyle 14 stroke:#55f,stroke-width:2.0px
linkStyle 15 stroke-width:2.0px
linkStyle 16 stroke-width:2.0px
linkStyle 17 stroke-width:2.0px
linkStyle 18 stroke-width:2.0px
linkStyle 19 stroke:red,stroke-width:2.0px
linkStyle 20 stroke:green,stroke-width:2.0px
linkStyle 21 stroke:#55f,stroke-width:2.0px
linkStyle 22 stroke-width:2.0px
linkStyle 23 stroke:green,stroke-width:2.0px
linkStyle 24 stroke:#55f,stroke-width:2.0px
linkStyle 25 stroke-width:2.0px
linkStyle 26 stroke:green,stroke-width:2.0px
linkStyle 27 stroke:#55f,stroke-width:2.0px
linkStyle 28 stroke:red,stroke-width:2.0px
linkStyle 29 stroke-width:2.0px
linkStyle 30 stroke:green,stroke-width:2.0px
linkStyle 31 stroke:#55f,stroke-width:2.0px
linkStyle 32 stroke-width:2.0px
linkStyle 33 stroke:green,stroke-width:2.0px
linkStyle 34 stroke:#55f,stroke-width:2.0px
Each time that Amira progressively reveals more information, her clients can go back and check the hashes of that information against the signed hashes in Sister Space. The GitHub revelation matches the 4f6903a2 elision and the email revelation matches the bc8187c9 elision. Even though Amira was previously entirely anonymous, now she can easily prove that she’s that anonymous person (and take advantage of her past work).