This release adds commit signing and validation support to the `rngit` system, as well as improvements to the blackhole functionality. **Changes** - Extended blackhole functionality to immediately terminate links from blackholed identities - Added commit signing and validation to `rngit` - Added commit hash inclusion in generated release manifest to `rngit` - Added local `verify` operation shorthand to `rngit release` - Added option to configure blackhole update interval - Added configuration option to log without timestamps **Verified Retrieval** You can retrieve and verify this release over Reticulum using the built-in `rngit release` utility. To retrieve only the installation `.whl` package, and the release manifest for future updates, you can use: ```sh rngit release rns://7649a50d84610232d1416b41d2896aff/reticulum/reticulum fetch "latest:rns-*.whl" --signer bc7291552be7a58f361522990465165c ``` To download all artifacts, including the documentation and source archive, you can use the following command: ```sh rngit release rns://7649a50d84610232d1416b41d2896aff/reticulum/reticulum fetch latest:all --signer bc7291552be7a58f361522990465165c ``` **Release Signatures** Release artifacts include a signed `rsm` release manifest and `rsg` signature files that can be validated against the RNS release signing identity `<bc7291552be7a58f361522990465165c>` using `rngit` or `rnid`. To perform an offline verification of all release artifacts using a manifest: ```sh rngit release rns_*.rsm verify --signer bc7291552be7a58f361522990465165c ``` To verify release artifacts using individual `rsg` files, while also verifying the manifest itself, download the `rsm` and `rsg` signatures, make sure they are in the same folder as the release artifact, and run `rnid` signature verification with the release identity as the required signer: ```sh rnid -i bc7291552be7a58f361522990465165c -V rns_*.rsm *.rsg ``` The `rnid` utility will then verify the signatures, and display whether they are valid. If the signature cannot be verified, the release has been tampered with and should be discarded. -----BEGIN SSH SIGNATURE----- U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAgXevlW8ApzeTT9dG2gFGW1M4Mak C9S32Taf9thGcjG7YAAAADZ2l0AAAAAAAAAAZzaGEyNTYAAADgXTiG5cDqkYmO+IpE9qXY eF+MQZcBIm18PNt5Hln1HvMfDbSH9wCJiKtjjRkh0lEVXZmuRwWxlRBv5EhG6yO9A4OoaG FzaHR5cGWmc2hhMjU2pGhhc2jEILWMhOVzFDDiFDfcCt5kHfsrNA1Uh57FzqzpXIHYR1bD pG1ldGGCpnNpZ25lcsQQvHKRVSvnpY82FSKZBGUWXKZwdWJrZXnEQEPm1AwljXxGKDknI5 eDeBK3v4iFX4nhjcmFWFepsuJQXevlW8ApzeTT9dG2gFGW1M4MakC9S32Taf9thGcjG7Y= -----END SSH SIGNATURE-----