self_no_signers

Summary

`[self.signature].signers` is empty

Help

add at least one ssh-ed25519 <base64> <comment> line under [self.signature] in the agent config so verify has a trust root

Details

When this fires

nanook self verify was asked to verify the agent binary but no trust roots are configured under [self.signature].signers in the active agent config. Verifying against an empty trust list cannot succeed, so the command refuses up front rather than printing a misleading "no match" later.

What to check

Get the publisher's .pub line (the contents of the file printed by nanook self sign or nanook keygen --kind signing) and paste it under [self.signature] in your agent config.

[self.signature]
require = true
signers = [
  "ssh-ed25519 AAAA... release@nanook",
]

Then re-run nanook self verify.