Module identities 

Stub local identity registry: .yah/cloud/identities/<machine>.json.

Phase 1 (R092-F8) bootstrap layer. The “broker” is a local JSON file; once R034 ships a real global identity broker, the CLI will POST there as well. Until then, the local file IS the source of truth for machine hostkeys.

Self-attested mode: fingerprints written here carry self_attested: true. The re-sign step (posting to the real R034 broker and clearing the flag) is gated on broker availability and ships as a follow-on.

Structs

LocalIdentity

A machine’s hostkey fingerprint entry in the local stub registry.

Functions

lookup

Look up a machine’s entry in the stub local registry. Returns None if no entry has been written yet (machine not yet provisioned or attached).

register

Write (or overwrite) a machine’s fingerprint to the stub local registry.