docs(three-machine-rehearsal): map rehearsal shortcuts to a fully distributed ceremony - #4
Merged
mellowcroc merged 1 commit intoAug 20, 2026
Conversation
mellowcroc
force-pushed
the
add-ceremony-tools-installer
branch
from
August 20, 2026 13:27
e5df0f1 to
9f949a0
Compare
…tributed ceremony The rehearsal co-locates roles and centralizes two things (key generation and operational-evidence generation) so it runs fast on three hosts. The README flagged this as 'not production independence evidence' but did not say what actually changes when every role is its own independently operated machine. Add a table mapping each of the three co-location shortcuts to its distributed replacement: - central keygen -> each role generates and enrolls its own key; - central operational evidence (steps 33-41) -> each witness/mirror/auditor produces and signs its own record locally (ops prepare-public-witness-receipt, mirror receipt -> ops prepare-mirror-receipt, audit); - role co-location -> one key per machine (the scripts are already identity-parameterized, so the 3-machine split is illustrative). Points to COORDINATOR_RUNBOOK.md / ROLE_RUNBOOK.md as the authority for the distributed procedure. Docs only.
mellowcroc
force-pushed
the
fix/rehearsal-independence-mapping
branch
from
August 20, 2026 13:28
48b1796 to
e539379
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The three-machine rehearsal co-locates roles and centralizes two things so it runs fast on three hosts. The README flagged this as "not production independence evidence" but did not spell out what actually changes when every role is its own independently operated machine — which is the natural next question after running it.
Adds a "From this rehearsal to a fully distributed ceremony" section mapping each of the three co-location shortcuts to its distributed replacement:
00-coordinator-initialize.shmints all keypairs on Machine 1)ops prepare-public-witness-receipt,relay mirror receipt→ops prepare-mirror-receipt,audit)Points to
COORDINATOR_RUNBOOK.md/ROLE_RUNBOOK.mdas the authority for the distributed procedure. Docs only, single file.Motivation: came up while running the tiny rehearsal end to end on both AWS S3 and Cloudflare R2 — the flow works, but a reader planning a real separate-machine ceremony needs to know exactly which rehearsal shortcuts to drop.