From ca28346d93dc7a8b93c8534edc54ad8830cd3f3f Mon Sep 17 00:00:00 2001 From: Ralf Anton Beier Date: Tue, 11 Aug 2026 21:10:38 +0200 Subject: [PATCH] =?UTF-8?q?rivet:=20REQ-24=20verified=20=E2=80=94=20wsc-ds?= =?UTF-8?q?se=20no=5Fstd=20crate=20landed=20(#232=20/=20#218)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_012aR3Md1h46K9wAUWMQiESH --- artifacts/dev/features.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/artifacts/dev/features.yaml b/artifacts/dev/features.yaml index 9a1666c..cadf49a 100644 --- a/artifacts/dev/features.yaml +++ b/artifacts/dev/features.yaml @@ -667,7 +667,7 @@ artifacts: - id: REQ-24 type: requirement title: Lightweight DSSE verify — extract dsse off the 179-crate wsc tree - status: draft + status: verified description: "wsc::dsse (DSSE sign/verify over arbitrary blobs — what a downstream offline verifier wants) lives only in the full wsc crate, whose default build pulls 179 crates (ring, rustls, ureq, rcgen, x509-parser, p256, webpki-roots). The dsse module's real deps are just base64, serde, serde_json, ed25519-compact. Move dsse into wsc-verify-core (21 crates) or a new wsc-dsse crate so an embedded/offline consumer (varve, the on-target verifier in #187) can verify DSSE without the registry/network stack. Complements the offline-keyless work." tags: [offline, dsse, embedded, dependency-hygiene] fields: