fix(subscription): preserve receipt trust roots across key rotation - #14
Merged
Merged
Conversation
- Add a clear 8111 and rules-risk notice to the public landing page - Explain Super Bomb capabilities and link the CheemsPay trial/purchase page - Keep site tests aligned with the public wording and allowed references --- docs(site): 发布风险与订阅版说明 - 在官网增加 8111 与规则风险提示 - 补充超级爆弹版能力并链接 CheemsPay 试用/购买页 - 同步官网测试与允许的公开引用
- Pin the CheemsPay primary public key while allowing reviewed additive keys - Package the complete trust map so old paid receipts remain verifiable - Fail closed when CI or generated runtime keys do not match the contract --- fix(subscription): 在密钥轮换中保留订阅收据信任根 - 固定 CheemsPay 主公钥，同时允许经过审查的新增 key - 打包完整信任映射，确保旧付费收据继续可验证 - CI 或生成运行时密钥与合同不一致时在发布前失败
- Apply the repository Ruff formatter to the trust-root implementation and tests --- style(subscription): 格式化信任根改动 - 使用仓库 Ruff 格式化信任根实现与测试
Thankyou-Cheems
force-pushed
the
codex/immutable-cheemspay-license-key
branch
from
August 3, 2026 04:29
b057e27 to
315e05f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
prod-2026-01permanently trusted while allowing reviewed additive key ids; generated packages carry the complete map so existing paid receipts remain verifiable.Paid-user compatibility
prod-2026-01remain accepted.Verification
uv run --extra dev ruff check .passed.uv run --extra dev ruff format --check .passed.uv run --extra dev pytestpassed: 510 passed, 9 subtests passed.