Add optional public verification endpoint#9
Merged
Conversation
Ships can now serve as public verification services for any repo's CI without requiring auth cookies. - State-9: adds public-verify flag (default off) - Admin UI: toggle in maintainer section with description of which endpoints become public - Auth check restructured: parses URL before auth, skips auth for verify-commit, verify-status, sats-per-pr, and ecash-pubkey when public-verify is enabled - All other endpoints (admin, sign, ban, wallet) remain auth-required Usage: enable on a ship like ~posum, then any repo can point their CI workflow at it without needing an auth cookie secret. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Groundwire Verification FailedThis PR will not be reviewed because commits are not signed by a recognized Groundwire ID. Why?This repository requires contributors to prove ownership of an onchain Groundwire identity. How to fix this
This repository is protected by Groundwire for GitHub. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Ships can now serve as public verification services — any repo's CI can use them without needing an auth cookie.
public-verifyflag (default off)verify-commit,verify-status,sats-per-pr, andecash-pubkeyskip auth when enabledUsage
On the verifier ship (e.g. ~posum), enable in admin panel. Then any repo can set
GROUNDWIRE_ENDPOINTto that ship's URL without needingGROUNDWIRE_AUTH.Test plan
🤖 Generated with Claude Code