Open-core layer

Ref-consensus local certificates for GitCaster builders

GitCaster now publishes the ref-consensus package and local certificate workflow as a public-alpha developer layer. Builders can inspect signed ref updates, append-only local ledgers, conflict evidence, double-sign detection, and blocked public consensus proofs while remote durability, normal git transport, managed deployment, and production runtime claims stay blocked.

Ref consensus source Fixture Markdown docs

Public artifacts

These files are safe contribution surfaces for local ref certificate work.

public-alpha

Ref consensus package

Certificate issuing, policy checks, append-only local ledger helpers, verification, conflict evidence, and double-sign detection.

packages/ref-consensus

Ref routes

Local node ref route handling with signed-mutation requirements and unsigned mutation blockers.

apps/node/src/routes/refs.ts

Local ref fixture

Redacted public fixture for certificate, conflict, double-sign, and blocked proof shapes.

examples/refs/local-ref-certificate-workflow.example.json

Ref consensus evidence

Deterministic proof for local certificates, append-only ledger verification, conflict evidence, double-sign detection, and HTTP blockers.

launch/evidence/ref-consensus-local-certificate-source.json

Local certificate scope

The checker proves local ledger behavior without claiming public infrastructure.

alpha-local runtime

First certificate

A local node accepts a signed update from null and issues an alpha-local ref certificate.

Second certificate

A second update must use the current head as its from value.

Append-only ledger

Existing local ledger entries are not mutated or removed.

Conflict evidence

Wrong-from updates produce blocked conflict evidence for manual review.

Double-sign evidence

Same node, same repo, same ref, same from, and different to values produce blocked node adjudication evidence.

Unsigned blocker

Unsigned HTTP ref mutations return blocked responses instead of updating refs.