Jordan Mecom ee6ca5fa28 Remove public relay signing key fallback (#6729) ...

Require `BUZZ_RELAY_PRIVATE_KEY` on every relay startup and remove the
shared public fallback key completely.

For local development, `just bootstrap` now generates a random key once
in the gitignored `.env` file. Re-running bootstrap preserves that key,
so relay-authored events retain the same identity across restarts. The
local relay recipes reload `.env`, while isolated CI and E2E launchers
pass explicit per-run keys.

Startup fails immediately when the key is missing or invalid, before
connecting to Postgres or Redis. Deployed relays continue to receive
their stable key from the existing chart-managed secret.

Validated with:

- `./scripts/test-ensure-local-relay-key.sh`
- `cargo test -p buzz-relay --bin buzz-relay`
- `cargo clippy -p buzz-relay --bin buzz-relay -- -D warnings`
- `cargo fmt --all -- --check`
- `shellcheck scripts/ensure-local-relay-key.sh
scripts/test-ensure-local-relay-key.sh`

Signed-off-by: Jordan Mecom <jm@squareup.com>

2026-08-25 13:57:23 -07:00

..

examples

chore: mesh upgrade, clean up legacy special case code, simplify model selection for mesh (#5289)

2026-08-11 11:40:07 -04:00

src

Remove public relay signing key fallback (#6729)

2026-08-25 13:57:23 -07:00

Cargo.toml

feat(deletion): add durable whole-community deletion (#4425)

2026-08-12 09:25:58 -07:00

CHANGELOG.md

chore(release): release Buzz Relay version 0.2.1 (#2856)

2026-08-08 12:26:24 -04:00