diff --git a/.forgejo/workflows/sign.yml b/.forgejo/workflows/sign.yml index 6bf70dd..030fe82 100644 --- a/.forgejo/workflows/sign.yml +++ b/.forgejo/workflows/sign.yml @@ -151,7 +151,7 @@ jobs: 3. Paste the unencrypted PEM (BEGIN PRIVATE KEY ...) The encrypted source-of-truth lives on Stefan's Mac at ~/.fai-secrets/flemming-ai-signing.key (passphrase in - mSecure under "F∆I Platform — Module Signing Key (Private)"). + mSecure under "Ch∆In — Module Signing Key (Private)"). See fai/platform infra/cosign/OPERATOR-HANDOFF.md for the full setup runbook and rotation process. diff --git a/README.md b/README.md index 4002f93..3cda7af 100644 --- a/README.md +++ b/README.md @@ -29,7 +29,7 @@ on every successful invocation. Together they answer the audit question "which exact model produced this response?" The digest probe targets Ollama's `/api/show` and is best-effort — non- Ollama endpoints and transient probe failures yield an empty -digest rather than blocking the response. Cf. F∆I Platform +digest rather than blocking the response. Cf. Ch∆In `docs/advanced/compliance-gaps.md` Gap 1. ## Build