R-1280: a signed job's validity window is at most 24 h — the verifier, the root wrapper and felhom-opsign. Red-proved. Commit only, not released.

2026-10-25 21:42:18 +01:00
parent feaaa0e8ff
commit d912307bb7
7 changed files with 58 additions and 0 deletions
@@ -123,6 +123,10 @@ func run() error {

 	now := time.Now().UTC()
 	issued := now
+	if *ttl <= 0 || *ttl > authz.MaxWindow {
+		fmt.Fprintf(os.Stderr, "felhom-opsign: -ttl %s refused: a box accepts a window of at most %s (R-1280)\n", *ttl, authz.MaxWindow)
+		os.Exit(2)
+	}
 	expires := now.Add(*ttl)

 	// Canonical OpBlob bytes — the EXACT bytes the agent verifier authenticates over.