Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions tee/cli/common/manifest.py
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,10 @@
deterministically once and then travel as opaque bytes through every hop
(deploy artifact -> `configure` merges it into the POST -> tdx-init ->
/run/seismic/conf/).
The node-side parser lives in
enclave/crates/seismic-attestation/src/manifest.rs; the schema here must stay
in lockstep with it (the fixture-vector test in tests/test_manifest.py pins
both to the same bytes).
The node-side parser lives in the enclave repo's `seismic-network-manifest` crate:
https://github.com/SeismicSystems/enclave/tree/seismic/crates/network-manifest;
the schema here must stay in lockstep with it since the fixture-vector test in
tests/test_manifest.py pins both to the same bytes).

Two artifacts are produced:
- network-manifest.json deploy-time facts; hashed into network_id
Expand Down Expand Up @@ -143,8 +143,8 @@ def _check_keys(obj: dict[str, Any], expected: set[str], where: str) -> None:
def validate_manifest_schema(manifest_bytes: bytes) -> dict[str, Any]:
"""Strictly parse manifest bytes against the v1 schema.

Mirrors NetworkManifest::from_json_bytes in
enclave/crates/seismic-attestation: version probe first (so a future
Mirrors NetworkManifestV1::from_json_bytes in
enclave/crates/network-manifest: version probe first (so a future
version reports "unsupported manifest_version", not "unknown key"), then
reject unknown/missing keys and malformed hex.
"""
Expand Down
4 changes: 2 additions & 2 deletions tee/cli/common/tests/test_manifest.py
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@
write_artifact_set,
)

# Mirrors enclave/crates/seismic-attestation/fixtures/network-manifest-v1.json.
# Mirrors https://github.com/SeismicSystems/enclave/blob/seismic/crates/network-manifest/fixtures/network-manifest-v1.json
# The network_id vector below is asserted by that crate's
# parses_v1_fixture_and_derives_network_id test; together they pin the deploy
# emitter and the node-side parser to byte-identical rendering.
Expand Down Expand Up @@ -73,7 +73,7 @@
# guard; it skips when GitHub is unreachable.
ENCLAVE_FIXTURE_URL = (
"https://raw.githubusercontent.com/SeismicSystems/enclave/seismic/"
"crates/seismic-attestation/fixtures/network-manifest-v1.json"
"crates/network-manifest/fixtures/network-manifest-v1.json"
)


Expand Down
Loading