feat(enroll): operator enrollment driver for coordinator onboarding#16
Merged
NetworkTheoryAppliedResearchInstitute merged 1 commit intoJul 14, 2026
Merged
Conversation
internal/enroll + cmd/cloudy-enroll drive a coordinator's operator onboarding lifecycle end to end: apply -> register the 7-key set -> email verification -> conformance suites A/B -> automatic activation. The onboarding endpoints are plain JSON on the coordinator's PORTAL surface, not the /v0 node-side wire internal/coord speaks, so this is a separate minimal HTTP+JSON client. It reuses internal/opcred for key custody and for computing conformance answers through the real protocol canon; Suite C is graded coordinator-side and needs no operator response. The out-of-band email code is supplied via an injected CodeSource (an interactive prompt, or a polled file for automated/containerized bring-up). - enroll.Client with per-step methods (Apply/RegisterKeys/VerifyStart/ VerifyCheck/ConformanceStart/ConformanceSubmit) plus an Enroll() orchestration; a 409 on Apply is tolerated for idempotent re-runs. - Contract test: an httptest coordinator that grades conformance with the REAL sohocloud-protocol operator verifier (byte-equality oracle + ConformanceResponse.Verify for A, OperatorTransmission.Verify for B); a foreign-keyset run must fail, proving the grade is not a rubber stamp. - cmd/cloudy-enroll wires it as a CLI (-gen-keys, -code-file/-code-wait). - CONFORMANCE.md: internal/enroll component row + labeled built entry. Verified end to end against a live SoHoLINK coordinator: the enrolled operator reached active and its credential then authenticated on /v0. Signed-off-by: Jodson Graves <info@ntari.org>
NetworkTheoryAppliedResearchInstitute
deleted the
feat/operator-enrollment-driver
branch
July 14, 2026 13:12
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Builds the HTTP driver that brings Cloudy up as an operator on a SoHoLINK-class coordinator, and closes the loop end-to-end against the live coordinator.
What
internal/enroll+cmd/cloudy-enrolldrive the coordinator's operator onboarding lifecycle:apply → register the 7-key set → email verification → conformance suites A/B → automatic activation
/v0node-side wireinternal/coordspeaks — so this is a separate minimal HTTP+JSON client, kept deliberately distinct fromcoord.Client.internal/opcredfor key custody and for computing conformance answers through the real protocol canon. Suite C is graded coordinator-side and needs no operator response, so there is no suite-C step (matchesopcred's deliberate no-AnswerC).CodeSource— an interactive stdin prompt, or a polled file (-code-file) for automated/containerized bring-up.enroll.Clientexposes each step plus anEnroll()orchestration; a409on apply is tolerated for idempotent re-runs.Test
enroll_test.go): anhttptestcoordinator that grades conformance with the realsohocloud-protocol/operatorverifier — byte-equality oracle +ConformanceResponse.Verifyfor suite A,OperatorTransmission.Verifyfor suite B. A companion test answers with a foreign keyset and asserts the grade fails, proving the grading isn't a rubber stamp.main,/v0operator-auth active). The driver enrolled an operator toactive(7 active keys, conformance passed), and the activated credential then authenticated on/v0(a signed operator transmission passedOperatorAuth; the same call without the header is401). The test operator was removed afterward so the coordinator is back to zero operators for the real bring-up.CONFORMANCE.md
Adds the
internal/enrollcomponent row and a labeled built entry, per the ride-along rule.Note: real federation still awaits the Go 1.27 / ML-DSA-65 migration; this proves the enrollment + auth machinery on today's Ed25519 build.
Author does not self-merge — for review.