Added signed registry, key management and remote fabric

.github/workflows/ci.yml

@@ -0,0 +1,44 @@
+name: ci
+
+on:
+  push:
+    branches: [main, feat/*]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install system deps
+        run: sudo apt-get update && sudo apt-get install -y libfuse3-dev pkg-config
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy, rustfmt
+
+      - name: Cache cargo
+        uses: Swatinem/rust-cache@v2
+
+      - name: Format check
+        run: cargo fmt --check
+
+      - name: Clippy
+        run: cargo clippy -- -D warnings
+
+      - name: Tests
+        run: cargo test --locked
+
+      - name: Build
+        run: cargo build --locked
+
+      - name: Verify binary works
+        run: |
+          ./target/debug/taproot --help
+          ./target/debug/taproot keys generate --id ci-test --keys /tmp/ci-keys
+          ./target/debug/taproot init --repo ci/test --branch main --commit ci123 --state-path /tmp/ci-state.json
+          ./target/debug/taproot verify --state-path /tmp/ci-state.json
+          ./target/debug/taproot registry push --state-path /tmp/ci-state.json --registry /tmp/ci-registry
+          ./target/debug/taproot registry list --registry /tmp/ci-registry ci/test

.github/workflows/taproot.yml

@@ -0,0 +1,44 @@
+name: taproot
+
+on:
+  pull_request:
+    paths:
+      - ".taproot/state.json"
+      - "src/**"
+      - "action.yml"
+      - "scripts/**"
+      - ".github/workflows/taproot.yml"
+  push:
+    branches: [main]
+    paths:
+      - ".taproot/state.json"
+      - "src/**"
+
+jobs:
+  baseline:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install system deps
+        run: sudo apt-get update && sudo apt-get install -y libfuse3-dev pkg-config
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Build taproot
+        run: cargo build --locked
+
+      - name: Verify head state
+        run: cargo run -- verify --state-path .taproot/state.json || echo "no head state — first init?"
+
+      - name: Baseline check (strict)
+        uses: ./
+        with:
+          state-path: ".taproot/state.json"
+          baseline-ref: ${{ github.base_ref }}
+          fail-on-drift: "true"

.gitignore

@@ -0,0 +1,5 @@
+/target
+.useit/
+.taproot/registry/
+.taproot/fabric/
+.taproot/keys/

.taproot/state.json

@@ -0,0 +1,14 @@
+{
+  "state": {
+    "version": "1.0",
+    "base": {
+      "repo": "Epoch-AI-Lab/taproot",
+      "branch": "main",
+      "commit": "36c7303"
+    },
+    "created_at": "2026-08-30T10:46:10.124709842Z"
+  },
+  "hash": "75941f7fb5788aa7cfe254184a28271100e9da3bb138ee91c764e5f9d8cdab6d",
+  "signature": "rfLudTBHu6HM+zTpvkT6jSkaj5+9FruNsIHlLMIduyYleM2RGdn4cv6YlKwxwCcQPa9YT9ox2peM2J1Lzt8IDw==",
+  "public_key": "2i4UyQMVJd9cSKllOgE8APowY3u9CICuaFnnkr5RSKw="
+}