Expand description
The person’s own commands from the page: only what this host issued.
A fix that is the person’s own command reaches the page as a typed
step speccoder built (How::Command): exact argvs, built by their
source or one of speccoder’s constant lines. While the host builds and
serialises a result, every such step is signed for its project —
HMAC-SHA-256 over the project folder, the argvs and whether they read
the keyboard, with a key the page never sees (Issuer::signing).
JSON from elsewhere is never signed. POST /api/fix/run runs argvs
only with their signature: what speccoder printed, and nothing the
page composed, edited or took from a model’s words.
Structs§
- Issuer
- Signs and checks the argvs this host issued.