be9ca9e · Oversight

Update default domain from oversight.example to oversightprotocol.dev

Beacon URLs, registry domain, and Caddyfile now point to the production
domain. DNS beacons resolve under *.t.oversightprotocol.dev, HTTP beacons
under b.oversightprotocol.dev, OCSP under ocsp.oversightprotocol.dev.

be9ca9e Zion Boggan committed on Apr 20, 2026 (2 months ago)

Caddyfile +5 -5

		@@ -1,17 +1,17 @@
		# OVERSIGHT registry - production Caddy config.
		#
	-	# Replace `oversight.example.com` with the beacon domain you actually own
	+	# Replace `oversightprotocol.dev` with the beacon domain you actually own
		# (the one whose hostname is baked into the beacon URLs you mint).
		#
		# Beacons look like:
	-	# https://b.oversight.example.com/p/{token}.png
	-	# https://ocsp.oversight.example.com/r/{token}
	-	# https://lic.oversight.example.com/v/{token}
	+	# https://b.oversightprotocol.dev/p/{token}.png
	+	# https://ocsp.oversightprotocol.dev/r/{token}
	+	# https://lic.oversightprotocol.dev/v/{token}
		#
		# The simplest setup uses a single apex + path-based routing. Caddy auto-provisions
		# TLS via Let's Encrypt.

	-	oversight.example.com {
	+	oversightprotocol.dev {
		encode gzip

		# Attribution / evidence API - lock down with auth in production.

cli/oversight.py +1 -1

		@@ -417,7 +417,7 @@ def main():
		s.add_argument("--issuer-id", required=True)
		s.add_argument("--issuer-key", required=True)
		s.add_argument("--registry-url", required=True)
	-	s.add_argument("--registry-domain", default="oversight.example")
	+	s.add_argument("--registry-domain", default="oversightprotocol.dev")
		s.add_argument("--out", required=True)
		s.add_argument("--content-type", default="application/octet-stream")
		s.add_argument("--watermark", action="store_true", help="embed text watermarks")

cli/oversight_rich.py +2 -2

		@@ -209,7 +209,7 @@ def cmd_init(args):
		config = {
		"issuer_identity": "",
		"registry_url": args.registry_url or "http://localhost:8000",
	-	"registry_domain": args.registry_domain or "oversight.example",
	+	"registry_domain": args.registry_domain or "oversightprotocol.dev",
		"default_watermark": True,
		"content_type": "application/octet-stream",
		}
		@@ -506,7 +506,7 @@ def cmd_seal(args):

		# Resolve settings
		registry_url = args.registry_url or cfg.get("registry_url", "http://localhost:8000")
	-	registry_domain = args.registry_domain or cfg.get("registry_domain", "oversight.example")
	+	registry_domain = args.registry_domain or cfg.get("registry_domain", "oversightprotocol.dev")
		issuer_id = args.issuer_id or issuer.get("id", "issuer")
		do_watermark = args.watermark if args.watermark is not None else cfg.get("default_watermark", True)
		content_type_val = args.content_type or cfg.get("content_type", "application/octet-stream")