From 11914b258e2b73f844e3235be53a797afbfce65f Mon Sep 17 00:00:00 2001 From: Martin Hutchinson Date: Tue, 7 Mar 2023 12:38:29 +0000 Subject: [PATCH 1/2] More precise wording in SumDB claimant model The old statement could be read to be making a promise about future states, which is not needed and brings in questions about falsifiability. --- docs/claimantmodel/Logs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/claimantmodel/Logs.md b/docs/claimantmodel/Logs.md index 7431df0466..7eaa025d6f 100644 --- a/docs/claimantmodel/Logs.md +++ b/docs/claimantmodel/Logs.md @@ -87,4 +87,4 @@ The signature on each individual StatementDOMAIN can be omitted if bo * ClaimantDOMAIN and ClaimantLOG are the same actor; and * Every actor that is BelieverDOMAIN is also BelieverLOG -The signature on the Checkpoint effectively transitively signs each of the Claims within the log. This is what the [GoLang SumDB](https://blog.golang.org/module-mirror-launch) does. The Claim here is “*I, ${SumDB}, will return only $hash as the checksum for $module at $version*”. This is falsifiable; correct behaviour can be verified by confirming that no two entries in the log have the same module & version, but different checksums. +The signature on the Checkpoint effectively transitively signs each of the Claims within the log. This is what the [GoLang SumDB](https://blog.golang.org/module-mirror-launch) does. The Claim here is “*I, ${SumDB}, commit to $hash as the checksum for $module at $version*”. This is falsifiable; correct behaviour can be verified by confirming that no two entries committed to by the log have the same module & version, but different checksums. From 5d26c3e9b6d7d8ab17d902cffd3a31cf158bb002 Mon Sep 17 00:00:00 2001 From: Martin Hutchinson Date: Tue, 7 Mar 2023 12:41:56 +0000 Subject: [PATCH 2/2] s/GoLang/Go/ --- docs/claimantmodel/Logs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/claimantmodel/Logs.md b/docs/claimantmodel/Logs.md index 7eaa025d6f..912b050088 100644 --- a/docs/claimantmodel/Logs.md +++ b/docs/claimantmodel/Logs.md @@ -87,4 +87,4 @@ The signature on each individual StatementDOMAIN can be omitted if bo * ClaimantDOMAIN and ClaimantLOG are the same actor; and * Every actor that is BelieverDOMAIN is also BelieverLOG -The signature on the Checkpoint effectively transitively signs each of the Claims within the log. This is what the [GoLang SumDB](https://blog.golang.org/module-mirror-launch) does. The Claim here is “*I, ${SumDB}, commit to $hash as the checksum for $module at $version*”. This is falsifiable; correct behaviour can be verified by confirming that no two entries committed to by the log have the same module & version, but different checksums. +The signature on the Checkpoint effectively transitively signs each of the Claims within the log. This is what the [Go SumDB](https://blog.golang.org/module-mirror-launch) does. The Claim here is “*I, ${SumDB}, commit to $hash as the checksum for $module at $version*”. This is falsifiable; correct behaviour can be verified by confirming that no two entries committed to by the log have the same module & version, but different checksums.