mirror of
https://seed.radicle.dev/rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5.git
synced 2026-11-15 15:50:38 +08:00
There are two areas where we can be more tolerant of delegate namespaces being missing or not validating: 1. Calculating the canonical HEAD 2. Fetching from a remote In 1. the protocol is tolerant in that if the local node does not have the default branch for a delegate, it will still attempt to use any of the delegates it does have to reach the threshold. This is made safe by ensuring that if the threshold is being updated then the node performing the update must have a threshold of delegates locally in their storage. It also made safe by 2. In 2. the protocol is tolerant by allowing delegates to be missing from the serving side, as long as they can still meet a threshold of delegates. This is further tolerant, when validating the received data, a threshold of delegates are valid to consider the fetch successful -- otherwise it will fail. Signed-off-by: Fintan Halpenny <fintan.halpenny@gmail.com> X-Clacks-Overhead: GNU Terry Pratchett
148 lines
5.7 KiB
Markdown
148 lines
5.7 KiB
Markdown
At some point in the lifetime of a Radicle project you may want to
|
|
collaborate with someone else allowing them to become a project
|
|
maintainer. This requires adding them as a `delegate` and possibly
|
|
editing the `threshold` for passing new changes to the identity of the
|
|
project.
|
|
|
|
For cases where `threshold > 1`, it is necessary to gather a quorum of
|
|
signatures to update the Radicle identity. To do this, we use the `rad id`
|
|
command. For now, since we are the only delegate, and `treshold` is `1`, we
|
|
can update the identity ourselves.
|
|
|
|
Let's add Bob as a delegate using their DID,
|
|
`did:key:z6Mkt67GdsW7715MEfRuP4pSZxJRJh6kj6Y48WRqVv4N1tRk`, and update the
|
|
threshold to `2`.
|
|
|
|
```
|
|
$ rad id update --title "Add Bob" --description "Add Bob as a delegate" --delegate did:key:z6Mkt67GdsW7715MEfRuP4pSZxJRJh6kj6Y48WRqVv4N1tRk --threshold 2
|
|
✓ Identity revision 0ca42d376bd566631083c8913cf86bec722da392 created
|
|
╭────────────────────────────────────────────────────────────────────────╮
|
|
│ Title Add Bob │
|
|
│ Revision 0ca42d376bd566631083c8913cf86bec722da392 │
|
|
│ Blob 053541ba7b90534b35dd8718e0ceaa408979b02b │
|
|
│ Author did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi │
|
|
│ State accepted │
|
|
│ Quorum yes │
|
|
│ │
|
|
│ Add Bob as a delegate │
|
|
├────────────────────────────────────────────────────────────────────────┤
|
|
│ ✓ did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi alice (you) │
|
|
╰────────────────────────────────────────────────────────────────────────╯
|
|
|
|
@@ -1,13 +1,14 @@
|
|
{
|
|
"payload": {
|
|
"xyz.radicle.project": {
|
|
"defaultBranch": "master",
|
|
"description": "Radicle Heartwood Protocol & Stack",
|
|
"name": "heartwood"
|
|
}
|
|
},
|
|
"delegates": [
|
|
- "did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi"
|
|
+ "did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi",
|
|
+ "did:key:z6Mkt67GdsW7715MEfRuP4pSZxJRJh6kj6Y48WRqVv4N1tRk"
|
|
],
|
|
- "threshold": 1
|
|
+ "threshold": 2
|
|
}
|
|
```
|
|
|
|
Before moving on, let's take a few notes on this output. The first
|
|
thing we'll notice is that the difference between the current identity
|
|
document and the proposed changes are shown. Specifically, we changed
|
|
the delegates and threshold:
|
|
|
|
"delegates": [
|
|
- "did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi"
|
|
+ "did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi",
|
|
+ "did:key:z6Mkt67GdsW7715MEfRuP4pSZxJRJh6kj6Y48WRqVv4N1tRk"
|
|
],
|
|
...
|
|
- "threshold": 1
|
|
+ "threshold": 2
|
|
|
|
Next we have the number of signatures from delegates, which includes our own:
|
|
|
|
✓ did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi
|
|
|
|
Finally, we can see whether the `Quorum` was reached:
|
|
|
|
Quorum yes
|
|
|
|
Since the threshold was previously `1`, this change is now in effect. We
|
|
can verify that by listing the current identity document:
|
|
|
|
```
|
|
$ rad inspect --identity
|
|
{
|
|
"payload": {
|
|
"xyz.radicle.project": {
|
|
"defaultBranch": "master",
|
|
"description": "Radicle Heartwood Protocol & Stack",
|
|
"name": "heartwood"
|
|
}
|
|
},
|
|
"delegates": [
|
|
"did:key:z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi",
|
|
"did:key:z6Mkt67GdsW7715MEfRuP4pSZxJRJh6kj6Y48WRqVv4N1tRk"
|
|
],
|
|
"threshold": 2
|
|
}
|
|
```
|
|
|
|
We can also look at the document's COB directly:
|
|
```
|
|
$ rad cob show --object 0656c217f917c3e06234771e9ecae53aba5e173e --type xyz.radicle.id --repo rad:z42hL2jL4XNk6K8oHQaSWfMgCL7ji
|
|
commit 0ca42d376bd566631083c8913cf86bec722da392
|
|
parent 0656c217f917c3e06234771e9ecae53aba5e173e
|
|
author z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi
|
|
date Thu, 15 Dec 2022 17:28:04 +0000
|
|
|
|
{
|
|
"blob": "053541ba7b90534b35dd8718e0ceaa408979b02b",
|
|
"description": "Add Bob as a delegate",
|
|
"parent": "0656c217f917c3e06234771e9ecae53aba5e173e",
|
|
"signature": "z3AyzixN2eWLtRfQWowtBXwWyRH3iJ8oJ25W6KFYFw5ANLntbzfavge15muNU6AVAUkxSxQvgg9yh2gupbUecavQY",
|
|
"title": "Add Bob",
|
|
"type": "revision"
|
|
}
|
|
|
|
commit 0656c217f917c3e06234771e9ecae53aba5e173e
|
|
author z6MknSLrJoTcukLrE435hVNQT4JUhbvWLX4kUzqkEStBU8Vi
|
|
date Thu, 15 Dec 2022 17:28:04 +0000
|
|
|
|
{
|
|
"blob": "d96f425412c9f8ad5d9a9a05c9831d0728e2338d",
|
|
"parent": null,
|
|
"signature": "z5nGqUvrmfiSyLjNCHWTWYvVMcPUZcvo9TxPKzEKXYBdSgUzbrqf1cYsmpGgbQvYunnsrLSsubEmxZaRdKM4quqQR",
|
|
"title": "Initial revision",
|
|
"type": "revision"
|
|
}
|
|
|
|
```
|
|
|
|
Note that once a revision is accepted, it can't be edited, redacted or otherwise
|
|
acted upon:
|
|
|
|
``` (fail)
|
|
$ rad id redact 0ca42d376bd566631083c8913cf86bec722da392
|
|
✗ Error: [..]
|
|
```
|
|
``` (fail)
|
|
$ rad id reject 0ca42d376bd566631083c8913cf86bec722da392
|
|
✗ Error: [..]
|
|
```
|
|
``` (fail)
|
|
$ rad id accept 0ca42d376bd566631083c8913cf86bec722da392
|
|
✗ Error: [..]
|
|
```
|
|
|
|
If no updates are specified then the update will fail:
|
|
|
|
``` (fail)
|
|
$ rad id update --title "Update canonical branch" --description "Update the canonical branch to `main`"
|
|
✗ Error: no update specified
|
|
✗ Hint: an update to the identity must be specified, run `rad id update -h` to see the available options
|
|
```
|