vgi-core 0.1.0

Shared primitives for Verifiable Git Infrastructure (VGI): PROTOCOL.sshsig encoding, git commit-object handling, and DID-document Ed25519 key extraction.
Documentation

Shared primitives for Verifiable Git Infrastructure (VGI).

Pure, dependency-light building blocks that both the signer (did-git-sign) and the CI verifier (verify-trust) rely on, kept in one crate so their wire formats cannot drift:

  • the PROTOCOL.sshsig encoder ([create_ssh_signature]) and the git sshsig namespace ([GIT_SSHSIG_NAMESPACE]),
  • git commit-object handling ([split_signed_commit], [normalize_sshsig_armor]),
  • DID-document Ed25519 key extraction ([ed25519_keys_from_doc]).

Nothing here touches the network, a keyring, or a VTA — that is what lets the CI verifier stay a small, fast dependency.