.env.example

# Local Python master example. Keep every credential in a private file.
BASE_NETUID=1
BASE_CHAIN_ENDPOINT=finney
BASE_CHAIN_FALLBACK_ENDPOINTS=[]
BASE_STATE_DIR=.local/state
BASE_OWNER_PUBKEY_FILE=config/owner.pubkey
BASE_CHALLENGES_FILE=config/challenges.toml
BASE_MEASUREMENTS_FILE=config/measurements.toml
BASE_GATEWAY_SK_FILE=.local/secrets/gateway.seed
BASE_GATEWAY_ADMIN_TOKEN_FILE=.local/secrets/operator.token
PROOF_SK_FILE=.local/secrets/proof.seed
# Leaf seeds of container challenges: <dir>/<id>.key for every trusted id but proof.
BASE_CHALLENGE_KEYS_DIR=.local/secrets
# Optional operator registry; see docs/CHALLENGES.md. Unset runs no container challenge.
# BASE_CHALLENGE_REGISTRY_FILE=deploy/challenges/registry.toml
BASE_CHALLENGE_SECRETS_DIR=.local/challenge-secrets

# Shared topic/experiment VM shape; see deploy/README.md for host capacity.
PROOF_RLM_VM_VCPUS=1
PROOF_RLM_VM_MEM_MIB=1024
PROOF_RLM_VM_DISK_MIB=16384

# Live integrations remain disabled until the operator provides verified endpoints
# and locally computed artifact pins.
# PROOF_VM_ORCHESTRATOR_URL=https://proof-vm.internal:9443
# PROOF_VM_ORCHESTRATOR_TOKEN_FILE=.local/secrets/proof-vm.token
# PROOF_VM_ORCHESTRATOR_CA_FILE=.local/secrets/proof-vm-ca.pem
# PROOF_RLM_VM_IMAGE_DIGEST=sha256:<locally-computed-rootfs-digest>
# PROOF_INFERENCE_OFFER_COMMITMENT=<operator-signed-offer-commitment>
# PROOF_VM_RUNNER_CUSTOM_IDS=<registered-topic-runner-id>