fixture-operator (pki.sgit.ai)
One record in the register: sha256:90f97984b9cf3930 —
8 signed statements, appended in
order and never edited. This page renders the record; the files beside it are the record.
Every signature in this record verifies, and none of them proves anything: anybody who can read this site can produce more. This is not a weak identity, it is no identity — which is why the class is read before any signature is checked, and why it is the first thing on this page. It is also a declared root of this registry, so every chain anchored here demonstrates the walk and proves nothing.
The published key material is deliberate: the register exists so other agents and sites can consume grants and mandates, and that needs runnable examples more than it needs secrecy at this stage.
The signed statements
In file order, which is append order. Nothing here was rewritten: a revocation is a later statement, not a deletion, and a superseded statement stays readable underneath it.
The first statement in every record: the public halves, the agent type, and — read before any signature — whether the private half is published.
sha256:90f97984b9cf3930
encryption fingerprintsha256:075693699f0694d0
private key publishedYES — this is a fixture, not an identity
signed bysha256:90f97984b9cf3930
statement hashsha256:2087cd35b2240cf1c270ea7915ce99805801c172f636fd59b3452e8fc0f4710d
What the issuer authorised: a capability on a resource, bounded by constraints and an interval. Silence is refusal — anything not listed is not authorised.
repo.pull-request.create
resourcegithub.com/SGit-AI/SGit-AI__Website__PKI
mandate subjectsha256:df2bb4d93af69e6a
constraintsbranches: devmax_files:
20paths:
briefs/**, documents/**
interval2026-08-25T00:00:00Z → 2026-10-01T00:00:00Z
environmentfixture
signed bysha256:90f97984b9cf3930
statement hashsha256:e572d490272cc517d3fe0783193b539c06bb9f06bf19334ca02619a926e7c45d
What the issuer authorised: a capability on a resource, bounded by constraints and an interval. Silence is refusal — anything not listed is not authorised.
repo.contents.write
resourcegithub.com/SGit-AI/SGit-AI__Website__PKI
mandate subjectsha256:1ccafd8f3f8906c4
constraintsbranches: dev
interval2026-08-01T00:00:00Z → 2026-12-31T00:00:00Z
environmentfixture
signed bysha256:90f97984b9cf3930
statement hashsha256:06da5443b3fb9225c1d019737b9718464f9e3c9252b5a6eb99885a8e9f5c828f
What the issuer authorised: a capability on a resource, bounded by constraints and an interval. Silence is refusal — anything not listed is not authorised.
repo.pull-request.create
resourcegithub.com/SGit-AI/SGit-AI__Website__PKI
mandate subjectsha256:f32e7a1da4e098e0
constraintsbranches: dev
interval2026-07-01T00:00:00Z → 2026-08-01T00:00:00Z
environmentfixture
signed bysha256:90f97984b9cf3930
statement hashsha256:834e29ab87165620f816526a752c25c0df6515af9fe35cf5b62b823137dcb624
What the issuer authorised: a capability on a resource, bounded by constraints and an interval. Silence is refusal — anything not listed is not authorised.
repo.pull-request.create
resourcegithub.com/SGit-AI/SGit-AI__Website__PKI
mandate subjectsha256:b3ffc1f05803720b
constraintsbranches: dev
interval2026-08-25T00:00:00Z → 2026-10-01T00:00:00Z
environmentfixture
signed bysha256:90f97984b9cf3930
statement hashsha256:ac339acbdc86bc0b57044b77aac88b847a214b16e795910efcab59d484c4e396
An append that ends something. Nothing is edited or deleted; the revoked statement stays readable and the revocation sits after it.
sha256:06da5443b3fb9225c1d019737b9718464f9e3c9252b5a6eb99885a8e9f5c828f in record sha256:90f97984b9cf3930
reasonpolicy
effective from2026-08-20T00:00:00Z
signed bysha256:90f97984b9cf3930
statement hashsha256:00d5fba95ef79b18bdf665dae6c57ae9cab54d6a891f8ecf10dc293423e3e2c5
What a credential technically permits — discovered by measurement, not authored. The gap between this and the mandate is excess authority, and it has no acceptor.
sha256:df2bb4d93af69e6a
capabilityrepo.contents.write
reaches41 resources; sample: github.com/SGit-AI/SGit-AI__Website__PKI, github.com/SGit-AI/SGit-AI__Website__NHI, github.com/SGit-AI/SGit-AI__Website
basisasserted
observed at2026-08-25
credentialcode-host-token — hash of the issued credential; the preimage was discarded before publication
notefixture: the count is the scenario, the sample is real repository names, the credential is fiction
tree4 node(s) — rendered in the block gallery
signed bysha256:90f97984b9cf3930
statement hashsha256:4dec940de3243f48ecd77de478b6fa24e09fe3f6095cf2e4023863dec944db3d
What the issuer authorised: a capability on a resource, bounded by constraints and an interval. Silence is refusal — anything not listed is not authorised.
repo.pull-request.create
resourcegithub.com/SGit-AI/SGit-AI__Website__PKI
mandate subjectsha256:878bb98be58abc56
constraintsbranches: devmax_files:
50paths:
registry/**
interval2026-08-25T00:00:00Z → 2026-12-31T00:00:00Z
environmentfixture
signed bysha256:90f97984b9cf3930
statement hashsha256:6139dd65791395e501a6de74c96e032d935b20b869964916073d860792a51f09
Key material
Linked, never printed on this page — a rendered page has no business carrying a key, even one published on purpose.
public/encrypt.pem public/sign.pem
private/encrypt.pem private/sign.pem
The private halves are published because this is a fixture. That is the whole point of the class.
This record elsewhere
- record.json
(raw) — the unsigned manifest (its own
_authorityfield says NONE; it is regenerable from the statements) - The register — all eleven records, and the verification walk
- The workbench — the same records as cards, and a simulator that decides an action against a mandate
- on GitHub