{"action":"created","comment":{"url":"https://api.github.com/repos/theupdateframework/taps/pulls/comments/94175755","pull_request_review_id":14706941,"id":94175755,"diff_hunk":"@@ -13,21 +13,25 @@\n \n TAP 4 describes how users may specify that a certain repository should be used\n for some targets, while other repositories should be used for other targets.\n-In other words, this TAP allows users to _map_ targets to repositories in a\n-manner similar to how targets can be delegated to roles.\n-This allows users to say that: (1) a target may be found on one of many\n-repositories, each with a different root of trust, and / or (2) many\n-repositories may be required to sign the target.\n+In other words, this TAP allows users to _map_ target names to repositories in a\n+manner similar to how targets with specific names can be delegated to different roles.\n+This allows users to say that a target with a specific type of name (such as \n+django\\* or \\*.tar.gz) may be found on a specific repository.  Each repository\n+has its own root of trust (root role, etc.) so a compromise of one repository\n+does not impact other repositories.  This TAP also discusses how the AND relation can\n+be extended to multiple repositories to have multiple different repositories with \n+separate roots of trust need to sign off on the same target before installation.\n \n # Motivation\n \n TAP 4 has been motivated by the following use cases.\n \n ## Use case 1: obtaining different targets from different repositories\n \n-It is desirable to use the same instance of TUF to download and verify different\n-targets hosted on different repositories (for example, Python packages from\n-PyPI, and Ruby packages from RubyGems).\n+Itmay be desirable to use the same instance of TUF to download and verify different\n+targets hosted on different repositories (for example, some Python packages from\n+their maintainers, while getting other Python packages from PyPI).  In this way,\n+one can securely get all Python packages regardless of where they are hosted.\n There are significant advantages in using the same instance of TUF to manage","path":"tap4.md","position":31,"original_position":31,"commit_id":"640aadc0b44047eba5e4cf8b868e79e6374f2dc1","original_commit_id":"3f3e81369ffd45ee41cd2f5c647b398ba009de56","user":{"login":"trishankkarthik","id":339997,"avatar_url":"https://avatars.githubusercontent.com/u/339997?v=3","gravatar_id":"","url":"https://api.github.com/users/trishankkarthik","html_url":"https://github.com/trishankkarthik","followers_url":"https://api.github.com/users/trishankkarthik/followers","following_url":"https://api.github.com/users/trishankkarthik/following{/other_user}","gists_url":"https://api.github.com/users/trishankkarthik/gists{/gist_id}","starred_url":"https://api.github.com/users/trishankkarthik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/trishankkarthik/subscriptions","organizations_url":"https://api.github.com/users/trishankkarthik/orgs","repos_url":"https://api.github.com/users/trishankkarthik/repos","events_url":"https://api.github.com/users/trishankkarthik/events{/privacy}","received_events_url":"https://api.github.com/users/trishankkarthik/received_events","type":"User","site_admin":false},"body":"Sure. This tries to explain the use case you think is most important: reusing the same updater across multiple repositories. One can try to solve this problem using different updaters, one for each repository, which is the situation today, but that raises more problem than it solves. Does this make sense?","created_at":"2016-12-29T20:15:05Z","updated_at":"2016-12-29T20:23:43Z","html_url":"https://github.com/theupdateframework/taps/pull/14#discussion_r94175755","pull_request_url":"https://api.github.com/repos/theupdateframework/taps/pulls/14","_links":{"self":{"href":"https://api.github.com/repos/theupdateframework/taps/pulls/comments/94175755"},"html":{"href":"https://github.com/theupdateframework/taps/pull/14#discussion_r94175755"},"pull_request":{"href":"https://api.github.com/repos/theupdateframework/taps/pulls/14"}}},"pull_request":{"url":"https://api.github.com/repos/theupdateframework/taps/pulls/14","id":99572766,"html_url":"https://github.com/theupdateframework/taps/pull/14","diff_url":"https://github.com/theupdateframework/taps/pull/14.diff","patch_url":"https://github.com/theupdateframework/taps/pull/14.patch","issue_url":"https://api.github.com/repos/theupdateframework/taps/issues/14","number":14,"state":"open","locked":false,"title":"Update tap4.md","user":{"login":"JustinCappos","id":857871,"avatar_url":"https://avatars.githubusercontent.com/u/857871?v=3","gravatar_id":"","url":"https://api.github.com/users/JustinCappos","html_url":"https://github.com/JustinCappos","followers_url":"https://api.github.com/users/JustinCappos/followers","following_url":"https://api.github.com/users/JustinCappos/following{/other_user}","gists_url":"https://api.github.com/users/JustinCappos/gists{/gist_id}","starred_url":"https://api.github.com/users/JustinCappos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JustinCappos/subscriptions","organizations_url":"https://api.github.com/users/JustinCappos/orgs","repos_url":"https://api.github.com/users/JustinCappos/repos","events_url":"https://api.github.com/users/JustinCappos/events{/privacy}","received_events_url":"https://api.github.com/users/JustinCappos/received_events","type":"User","site_admin":false},"body":"Starting to edit for clarity.","created_at":"2016-12-28T17:20:59Z","updated_at":"2016-12-29T20:23:43Z","closed_at":null,"merged_at":null,"merge_commit_sha":"d90a9f24295f21a89a1cd1ca0a9e83e4d5a4f953","assignee":null,"assignees":[],"milestone":null,"commits_url":"https://api.github.com/repos/theupdateframework/taps/pulls/14/commits","review_comments_url":"https://api.github.com/repos/theupdateframework/taps/pulls/14/comments","review_comment_url":"https://api.github.com/repos/theupdateframework/taps/pulls/comments{/number}","comments_url":"https://api.github.com/repos/theupdateframework/taps/issues/14/comments","statuses_url":"https://api.github.com/repos/theupdateframework/taps/statuses/640aadc0b44047eba5e4cf8b868e79e6374f2dc1","head":{"label":"theupdateframework:JustinCappos-patch-1","ref":"JustinCappos-patch-1","sha":"640aadc0b44047eba5e4cf8b868e79e6374f2dc1","user":{"login":"theupdateframework","id":4633028,"avatar_url":"https://avatars.githubusercontent.com/u/4633028?v=3","gravatar_id":"","url":"https://api.github.com/users/theupdateframework","html_url":"https://github.com/theupdateframework","followers_url":"https://api.github.com/users/theupdateframework/followers","following_url":"https://api.github.com/users/theupdateframework/following{/other_user}","gists_url":"https://api.github.com/users/theupdateframework/gists{/gist_id}","starred_url":"https://api.github.com/users/theupdateframework/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theupdateframework/subscriptions","organizations_url":"https://api.github.com/users/theupdateframework/orgs","repos_url":"https://api.github.com/users/theupdateframework/repos","events_url":"https://api.github.com/users/theupdateframework/events{/privacy}","received_events_url":"https://api.github.com/users/theupdateframework/received_events","type":"Organization","site_admin":false},"repo":{"id":67645288,"name":"taps","full_name":"theupdateframework/taps","owner":{"login":"theupdateframework","id":4633028,"avatar_url":"https://avatars.githubusercontent.com/u/4633028?v=3","gravatar_id":"","url":"https://api.github.com/users/theupdateframework","html_url":"https://github.com/theupdateframework","followers_url":"https://api.github.com/users/theupdateframework/followers","following_url":"https://api.github.com/users/theupdateframework/following{/other_user}","gists_url":"https://api.github.com/users/theupdateframework/gists{/gist_id}","starred_url":"https://api.github.com/users/theupdateframework/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theupdateframework/subscriptions","organizations_url":"https://api.github.com/users/theupdateframework/orgs","repos_url":"https://api.github.com/users/theupdateframework/repos","events_url":"https://api.github.com/users/theupdateframework/events{/privacy}","received_events_url":"https://api.github.com/users/theupdateframework/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/theupdateframework/taps","description":"TUF Augmentation Proposals (TAPs)","fork":false,"url":"https://api.github.com/repos/theupdateframework/taps","forks_url":"https://api.github.com/repos/theupdateframework/taps/forks","keys_url":"https://api.github.com/repos/theupdateframework/taps/keys{/key_id}","collaborators_url":"https://api.github.com/repos/theupdateframework/taps/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/theupdateframework/taps/teams","hooks_url":"https://api.github.com/repos/theupdateframework/taps/hooks","issue_events_url":"https://api.github.com/repos/theupdateframework/taps/issues/events{/number}","events_url":"https://api.github.com/repos/theupdateframework/taps/events","assignees_url":"https://api.github.com/repos/theupdateframework/taps/assignees{/user}","branches_url":"https://api.github.com/repos/theupdateframework/taps/branches{/branch}","tags_url":"https://api.github.com/repos/theupdateframework/taps/tags","blobs_url":"https://api.github.com/repos/theupdateframework/taps/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/theupdateframework/taps/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/theupdateframework/taps/git/refs{/sha}","trees_url":"https://api.github.com/repos/theupdateframework/taps/git/trees{/sha}","statuses_url":"https://api.github.com/repos/theupdateframework/taps/statuses/{sha}","languages_url":"https://api.github.com/repos/theupdateframework/taps/languages","stargazers_url":"https://api.github.com/repos/theupdateframework/taps/stargazers","contributors_url":"https://api.github.com/repos/theupdateframework/taps/contributors","subscribers_url":"https://api.github.com/repos/theupdateframework/taps/subscribers","subscription_url":"https://api.github.com/repos/theupdateframework/taps/subscription","commits_url":"https://api.github.com/repos/theupdateframework/taps/commits{/sha}","git_commits_url":"https://api.github.com/repos/theupdateframework/taps/git/commits{/sha}","comments_url":"https://api.github.com/repos/theupdateframework/taps/comments{/number}","issue_comment_url":"https://api.github.com/repos/theupdateframework/taps/issues/comments{/number}","contents_url":"https://api.github.com/repos/theupdateframework/taps/contents/{+path}","compare_url":"https://api.github.com/repos/theupdateframework/taps/compare/{base}...{head}","merges_url":"https://api.github.com/repos/theupdateframework/taps/merges","archive_url":"https://api.github.com/repos/theupdateframework/taps/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/theupdateframework/taps/downloads","issues_url":"https://api.github.com/repos/theupdateframework/taps/issues{/number}","pulls_url":"https://api.github.com/repos/theupdateframework/taps/pulls{/number}","milestones_url":"https://api.github.com/repos/theupdateframework/taps/milestones{/number}","notifications_url":"https://api.github.com/repos/theupdateframework/taps/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/theupdateframework/taps/labels{/name}","releases_url":"https://api.github.com/repos/theupdateframework/taps/releases{/id}","deployments_url":"https://api.github.com/repos/theupdateframework/taps/deployments","created_at":"2016-09-07T21:34:17Z","updated_at":"2016-10-24T18:03:05Z","pushed_at":"2016-12-28T17:50:00Z","git_url":"git://github.com/theupdateframework/taps.git","ssh_url":"git@github.com:theupdateframework/taps.git","clone_url":"https://github.com/theupdateframework/taps.git","svn_url":"https://github.com/theupdateframework/taps","homepage":null,"size":1021,"stargazers_count":3,"watchers_count":3,"language":null,"has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"open_issues_count":2,"forks":2,"open_issues":2,"watchers":3,"default_branch":"master"}},"base":{"label":"theupdateframework:master","ref":"master","sha":"7471b5ae43e476daf9d4a818e9346b47520fe99f","user":{"login":"theupdateframework","id":4633028,"avatar_url":"https://avatars.githubusercontent.com/u/4633028?v=3","gravatar_id":"","url":"https://api.github.com/users/theupdateframework","html_url":"https://github.com/theupdateframework","followers_url":"https://api.github.com/users/theupdateframework/followers","following_url":"https://api.github.com/users/theupdateframework/following{/other_user}","gists_url":"https://api.github.com/users/theupdateframework/gists{/gist_id}","starred_url":"https://api.github.com/users/theupdateframework/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theupdateframework/subscriptions","organizations_url":"https://api.github.com/users/theupdateframework/orgs","repos_url":"https://api.github.com/users/theupdateframework/repos","events_url":"https://api.github.com/users/theupdateframework/events{/privacy}","received_events_url":"https://api.github.com/users/theupdateframework/received_events","type":"Organization","site_admin":false},"repo":{"id":67645288,"name":"taps","full_name":"theupdateframework/taps","owner":{"login":"theupdateframework","id":4633028,"avatar_url":"https://avatars.githubusercontent.com/u/4633028?v=3","gravatar_id":"","url":"https://api.github.com/users/theupdateframework","html_url":"https://github.com/theupdateframework","followers_url":"https://api.github.com/users/theupdateframework/followers","following_url":"https://api.github.com/users/theupdateframework/following{/other_user}","gists_url":"https://api.github.com/users/theupdateframework/gists{/gist_id}","starred_url":"https://api.github.com/users/theupdateframework/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theupdateframework/subscriptions","organizations_url":"https://api.github.com/users/theupdateframework/orgs","repos_url":"https://api.github.com/users/theupdateframework/repos","events_url":"https://api.github.com/users/theupdateframework/events{/privacy}","received_events_url":"https://api.github.com/users/theupdateframework/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/theupdateframework/taps","description":"TUF Augmentation Proposals (TAPs)","fork":false,"url":"https://api.github.com/repos/theupdateframework/taps","forks_url":"https://api.github.com/repos/theupdateframework/taps/forks","keys_url":"https://api.github.com/repos/theupdateframework/taps/keys{/key_id}","collaborators_url":"https://api.github.com/repos/theupdateframework/taps/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/theupdateframework/taps/teams","hooks_url":"https://api.github.com/repos/theupdateframework/taps/hooks","issue_events_url":"https://api.github.com/repos/theupdateframework/taps/issues/events{/number}","events_url":"https://api.github.com/repos/theupdateframework/taps/events","assignees_url":"https://api.github.com/repos/theupdateframework/taps/assignees{/user}","branches_url":"https://api.github.com/repos/theupdateframework/taps/branches{/branch}","tags_url":"https://api.github.com/repos/theupdateframework/taps/tags","blobs_url":"https://api.github.com/repos/theupdateframework/taps/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/theupdateframework/taps/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/theupdateframework/taps/git/refs{/sha}","trees_url":"https://api.github.com/repos/theupdateframework/taps/git/trees{/sha}","statuses_url":"https://api.github.com/repos/theupdateframework/taps/statuses/{sha}","languages_url":"https://api.github.com/repos/theupdateframework/taps/languages","stargazers_url":"https://api.github.com/repos/theupdateframework/taps/stargazers","contributors_url":"https://api.github.com/repos/theupdateframework/taps/contributors","subscribers_url":"https://api.github.com/repos/theupdateframework/taps/subscribers","subscription_url":"https://api.github.com/repos/theupdateframework/taps/subscription","commits_url":"https://api.github.com/repos/theupdateframework/taps/commits{/sha}","git_commits_url":"https://api.github.com/repos/theupdateframework/taps/git/commits{/sha}","comments_url":"https://api.github.com/repos/theupdateframework/taps/comments{/number}","issue_comment_url":"https://api.github.com/repos/theupdateframework/taps/issues/comments{/number}","contents_url":"https://api.github.com/repos/theupdateframework/taps/contents/{+path}","compare_url":"https://api.github.com/repos/theupdateframework/taps/compare/{base}...{head}","merges_url":"https://api.github.com/repos/theupdateframework/taps/merges","archive_url":"https://api.github.com/repos/theupdateframework/taps/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/theupdateframework/taps/downloads","issues_url":"https://api.github.com/repos/theupdateframework/taps/issues{/number}","pulls_url":"https://api.github.com/repos/theupdateframework/taps/pulls{/number}","milestones_url":"https://api.github.com/repos/theupdateframework/taps/milestones{/number}","notifications_url":"https://api.github.com/repos/theupdateframework/taps/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/theupdateframework/taps/labels{/name}","releases_url":"https://api.github.com/repos/theupdateframework/taps/releases{/id}","deployments_url":"https://api.github.com/repos/theupdateframework/taps/deployments","created_at":"2016-09-07T21:34:17Z","updated_at":"2016-10-24T18:03:05Z","pushed_at":"2016-12-28T17:50:00Z","git_url":"git://github.com/theupdateframework/taps.git","ssh_url":"git@github.com:theupdateframework/taps.git","clone_url":"https://github.com/theupdateframework/taps.git","svn_url":"https://github.com/theupdateframework/taps","homepage":null,"size":1021,"stargazers_count":3,"watchers_count":3,"language":null,"has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"open_issues_count":2,"forks":2,"open_issues":2,"watchers":3,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/theupdateframework/taps/pulls/14"},"html":{"href":"https://github.com/theupdateframework/taps/pull/14"},"issue":{"href":"https://api.github.com/repos/theupdateframework/taps/issues/14"},"comments":{"href":"https://api.github.com/repos/theupdateframework/taps/issues/14/comments"},"review_comments":{"href":"https://api.github.com/repos/theupdateframework/taps/pulls/14/comments"},"review_comment":{"href":"https://api.github.com/repos/theupdateframework/taps/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/theupdateframework/taps/pulls/14/commits"},"statuses":{"href":"https://api.github.com/repos/theupdateframework/taps/statuses/640aadc0b44047eba5e4cf8b868e79e6374f2dc1"}}}}
{"actor":{"display_login":"trishankkarthik"}}