From 2c014393ef62690f40e3c18e79fa10ee27f06cc9 Mon Sep 17 00:00:00 2001 From: "Beau Beauchamp, WebTigers" Date: Sun, 2 Aug 2026 14:28:52 -0400 Subject: [PATCH] TigerPASS: ship the WebTigers production authority + pinned public key as core.ini defaults MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit A fresh install now verifies TigerPASS against the WebTigers production authority out of the box: tiger.pass.authority = https://webtigers.com/shop/authority and a PINNED Ed25519 tiger.pass.public_key. With the key pinned, an unsigned or wrong-key verdict is refused (the require-VALID activation gate), so these defaults are secure to ship. A dev / self-hosted authority overrides both in the config DB tier (global scope), no deploy — e.g. the tiger-dev buyer points at the dev-com seller for testing. Co-Authored-By: Claude Opus 4.8 (1M context) --- CHANGELOG.md | 6 ++++++ configs/core.ini | 9 +++++++++ 2 files changed, 15 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index fc38c04..0874051 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,12 @@ All notable changes to **Tiger Core** (`webtigers/tiger-core`). Format follows ## [Unreleased] +### Added +- **Production TigerPASS defaults in `core.ini`.** A fresh install verifies TigerPASS against the WebTigers + authority out of the box — `tiger.pass.authority` + a **pinned** `tiger.pass.public_key` (Ed25519), so an + unsigned or wrong-key verdict is refused. A dev / self-hosted authority overrides both in the config DB + tier (global scope), no deploy. + ### Security - **TigerPASS activation now requires a positive, signed `valid` verdict from the authority.** Previously `activatePass` only refused a definitive `lapsed` and accepted `unknown` (the ongoing nag-never-disable diff --git a/configs/core.ini b/configs/core.ini index c85390f..596212d 100644 --- a/configs/core.ini +++ b/configs/core.ini @@ -245,6 +245,15 @@ media.scan.image = 0 ; AWS Rekognition image media.scan.video = 0 ; async video moderation + webhook callback media.scan.image_threshold = 80 ; reject at/above this Rekognition confidence (0-100) +; ── TigerPASS — the WebTigers subscription that unlocks the premium module line ───────────────── +; The AUTHORITY a licensed "tigerpass" module verifies against, plus the Ed25519 PUBLIC key its +; signed verdicts are pinned to (an unsigned or wrong-key reply is refused, so a random key can +; never activate — see Tiger_License_Checker + System_Service_Modules::activatePass). These are the +; WebTigers PRODUCTION defaults; a dev / self-hosted authority overrides them in the config DB tier +; (tiger.pass.authority / tiger.pass.public_key, global scope) with no deploy — never edited here. +tiger.pass.authority = "https://webtigers.com/shop/authority" +tiger.pass.public_key = "MTgEX+sZSDIIDe3vkAmwa3B8PbB1Jv2d6XzsvHM2VCI=" + ; staging mirrors production (prod-like); override only what differs per deploy. [staging : production]