Identity and Key Management

This section documents the procedures for establishing and managing developer and organizational cryptographic identity in Shyft.

• Release Trust Infrastructure
  • Purpose
  • Design Principles
  • Trust Model
  • Official Release Definition
  • Provisioning Workstation
  • Root Key Ceremony
  • Artifact Signing Key Ceremony
  • Operational Signing Key Rotation
  • Developer Identity Keys in Daily Use
  • Recovery and Key Rotation
  • Relationship to the Release Process
  • References
• Nitrokey Setup Notes
  • Prepare dedicated user group and Polkit policy
  • Nitrokey Device Initialization