---
name: "Cryptographic node auth for distributed mesh"
agent: coder-opus
depends_on: [479]
---

# Story 480: Cryptographic node auth for distributed mesh

## User Story

As a user running a distributed huskies mesh, I want nodes authenticated by Ed25519 keypairs so only trusted machines can join and see pipeline state.

## Acceptance Criteria

- [ ] Each node has an Ed25519 keypair (generated on first run or via CLI command)
- [ ] Trusted nodes defined by a list of known public keys in config
- [ ] Nodes authenticate on WebSocket connect by signing a challenge
- [ ] CRDT node ID derived from public key (already built into bft-json-crdt crate)
- [ ] Unauthorised nodes rejected on connect

## Out of Scope

- TBD
