Hardware, platform and safety / Offline-first architecture
Where does “Two independent signatures on price documents” fit in Simca, in particular regarding ceremony not done?
Built in the repository (checked files or tested library code; not a product you can run yet) C0256
ADR-0008: a cost model or price table is accepted only with two signatures from two separate key sets; the ordinary single-signature check refuses these document types. This is enforced in code and tests with throwaway test keys. The key ceremony (who holds the keys, the second signer, offline custody) has not been done, so no real price can be published. ADR-0009 (tentative) sketches two independent custodians in separate legal entities with their own offline hardware keys; none exists. Plan for: ceremony not done; second signer not chosen; losing both keys of one side stops publishing. It exists only as a file in the repository, not as a product feature.
How to read this
The tag above says how real the answer is. Answers describe the plan in the repository and design documents. No app is released. Where an answer touches tax or law, treat it as a theme to verify with a qualified local adviser.
More in Offline-first architecture
- What goes wrong with “Your bill has dropped X percent” in a shop, thinking about needs the starting quarter kept locally?
- What should I plan for with “Entitlement per package”, in particular regarding host design open?
- Why does “The customer app front end is a plan” matter for a small business, in particular regarding windows 7 and 8.1 support open?
- See it in context with the whole topic
- Search all answers