# radrootsd

This is the README for `radrootsd` which is a long-running daemon for
authenticated publishing and optional NIP-46 control on Rad Roots networks.

NIP-46 kind-24133 request and response events are locally completed through a
dedicated protocol helper and then relayed as already-signed transport
messages. Remote `sign_event` results are accepted only when the author and
canonical event ID match the exact unsigned request and the complete NIP-01
event verifies.

## Verification

Run the native standalone checks with the declared Rust toolchain and committed
lockfile. In an extbuild-enabled checkout, first run `cargo extbuild doctor`
and route each command through `cargo extbuild run --`:

```text
cargo fmt --all --check
cargo check --workspace --all-targets --locked
cargo test --workspace --all-targets --locked
cargo clippy --workspace --all-targets --locked -- -D warnings
RUSTDOCFLAGS="-D warnings" cargo doc --workspace --no-deps --locked
scripts/verify-boundaries.sh
scripts/verify-supply-chain.sh
```

The boundary command byte-compares the root-only public API against its
reviewed baseline and rejects forbidden repository roots or credential
material. The supply-chain command checks the locked dependency, license,
advisory, and immutable public-source policy. Nix and OCI are deferred and
unclaimed through RCLD-RSHR-170.

## Copyright

Except as otherwise noted, all files in the `radrootsd` distribution are

    Copyright (c) 2025 Tyson Lupul

## License

This repository is licensed under AGPL-3.0-or-later. See LICENSE.