Closed jku closed 1 year ago
Iirc, root metadata is first created - at this point root is added to unsigned (because user could sign it). A little later a targets signer is invited: this makes root not signable anymore (because we know there will be more changes)...
It's possible that another order of operations would remove the need to do this tracking
@lukas: I think these both make sense to merge, assuming we can still do a dry-run tomorrow to make sure it all works.
Changes are: