Skip to content

CQRP Policy RC1 - #22

Merged
ryancdickson merged 15 commits into
mainfrom
CQRP-policy-RC1
Oct 28, 2026
Merged

ryancdickson merged 15 commits into
mainfrom
CQRP-policy-RC1

Conversation

@ChristopherRC

Copy link
Copy Markdown
Collaborator

Fourth draft release with additional feedback considered and updated to align with draft-ietf-plants-merkle-tree-certs-07. This draft is considered Release Candidate (RC) Version 1.0.0.

Align with CQRP Policy RC1
Align with CQRP Policy RC1
Align with CQRP Policy RC1
Align with CQRP Policy RC1
Update the draft policy to RC1.
Nit: change to mtcs [at] chromium [dot] org
Fixes applied:
- sample_percentage in Schema: Changed "minimum": 3.0 to "exclusiveMinimum": 0.0 so CAs hitting the 100,000-certificate cap (on >3.33M eligible certificates) don't fail schema validation.
- results.items.required in Schema: Added "renewal_timestamp" to the required array.
- $id / $schema URLs: Changed /tree/main/ to /blob/main/
Parity with the fixes just applied to the schema.
Nit: change 3 days to 72 hours
Nits:
- change `facility_certification` to `facility_certification_url` so it matches the actual property name in mtc-disclosures.schema.json.
- publicly-accessible Repository → publicly accessible Repository to match the unhyphenated style in the Policy.
- Support staged Mirroring-first onboarding by allowing `ca_cosigner_keys` and `global_disclosures.facility_certification_url` to be omitted until applying as an MTC CA Operator (enforced conditionally via `if`/`then` when `ca_cosigner_keys` is present).
- Update `policy_documents_url` and `facility_certification_url` descriptions to reflect the combined CP/CPS and accepted facility certification frameworks (ISO/IEC 27001, SOC 2 Type II / SOC 3).
- Add `minLength: 1` validation to `operator_name` and `friendly_name`.
- Update `$id` URL from `/tree/main/` to `/blob/main/`.
Match the schema changes.
@ryancdickson
ryancdickson merged commit 1c4598a into main Oct 28, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants