| --- | |
| license: apache-2.0 | |
| tags: | |
| - voice | |
| - wake-word | |
| - tts | |
| - piper | |
| - openwakeword | |
| - signed | |
| --- | |
| # WCPDR-AI / voice-models | |
| Signed voice-model artifacts for the wcpdr-agent Windows desktop assistant. The agent fetches models from this repo at first run via `huggingface_hub`; every artifact is verified against the Ed25519 | |
| signature below before it touches the runtime. | |
| ## Asset layout | |
| ``` | |
| voice-models/ | |
| ├── README.md # this file | |
| ├── manifest.json # canonical asset list (signed) | |
| ├── manifest.json.sig # Ed25519 signature over manifest.json | |
| ├── wake/ | |
| │ ├── hey_jarvis_v1.onnx # mirrored from openWakeWord v0.5.1 stock model | |
| │ ├── hey_jarvis_v1.onnx.sig | |
| │ ├── hey_alex_v1.onnx # custom-trained variants land here | |
| │ ├── hey_alex_v1.onnx.sig | |
| │ └── ... | |
| └── piper/ | |
| ├── en_US-amy-medium.onnx | |
| ├── en_US-amy-medium.onnx.sig | |
| ├── en_US-amy-medium.onnx.json # Piper voice metadata | |
| ├── es_MX-claude-high.onnx | |
| ├── es_MX-claude-high.onnx.sig | |
| └── es_MX-claude-high.onnx.json | |
| ``` | |
| ## Signing key | |
| All artifacts in this repo are signed with a single Ed25519 key dedicated to voice models. The key is **separate from the MSI installer-update signing key** so the two rotation calendars don't have to | |
| coordinate, and a leak of one has narrower blast radius. | |
| **Public key fingerprint** (SHA-256 of `VOICE_MODEL_PUBLIC_KEY_B64`, hex): | |
| ``` | |
| 716f3bfefd5b887e735adc198231d8c58b4917257f401eee3ce930b79cc4feb1 | |
| ``` | |
| The matching public key value (base64-encoded raw 32 bytes): | |
| ``` | |
| KO8A6pii2YrmgFcTtGMX0cltdWjyfgo+vdB/VJTvyMk= | |
| ``` | |
| The wcpdr-agent build pipeline stamps this same value into the agent's signing module at compile time. Operators can verify their installed agent's bundled key matches by checking the agent's | |
| `--print-voice-pubkey` output (when available); the printed value should hash to the fingerprint above. If it doesn't, the agent is from a different rotation cycle than the artifacts in this repo and won't | |
| trust them — either re-sign artifacts with the agent's expected key (operators) or upgrade the agent (users). | |
| ## Verification chain | |
| Top-down chain of trust for any artifact in this repo: | |
| 1. Agent is built with `VOICE_MODEL_PUBLIC_KEY_B64` baked into its signing module. | |
| 2. Agent fetches `manifest.json` + `manifest.json.sig` from this repo. | |
| 3. Agent verifies `manifest.json.sig` against the bundled public key — failure = refuse all artifacts in this manifest. | |
| 4. Agent reads asset entries from `manifest.json` (each entry has `repo_path`, `sha256`, `signature_filename`). | |
| 5. For each artifact the agent needs, it fetches the artifact + its `.sig` companion file. | |
| 6. Agent verifies SHA-256 against the manifest entry, then verifies the per-artifact Ed25519 signature. | |
| 7. Verified artifact gets atomically renamed into the agent's local cache and loaded into the runtime (Whisper / openWakeWord / Piper). | |
| A failure at any step surfaces as `voice_error{code: model_signature_invalid}` IPC to the tray; voice mode stays off; no silent "load anyway" fallback. | |
| ## License | |
| This repo's contents are individually licensed: | |
| - `wake/hey_jarvis_v1.onnx` — bit-identical mirror of openWakeWord v0.5.1's `hey_jarvis_v0.1.onnx` (Apache-2.0). | |
| - `piper/en_US-amy-medium.onnx` and `piper/es_MX-claude-high.onnx` — upstream Piper TTS voices (MIT). Voice attribution lives in each `.json` metadata companion. | |
| - Custom-trained wake-word variants (e.g. `hey_alex_v1.onnx`) — Apache-2.0 (matches openWakeWord training pipeline output). | |
| - This README and `manifest.json` — Apache-2.0. | |
| Re-distributable under the terms of each artifact's individual license. | |
| ## Reporting a compromised key | |
| If you have evidence the signing key has leaked, contact the wcpdr-agent maintainers directly. Do **not** include the leaked key value in any message — describe the suspected leak vector (where you saw it, | |
| when, who has access) and we'll initiate the rotation procedure. | |
| The wcpdr-agent source repository is private; if you don't have access, route the report through your wcpdr point of contact. Once a leak is confirmed, the maintainers rotate per the agent's internal | |
| voice-models runbook and re-sign every artifact in this repo within 24 hours. A new agent release tag (with the new public key baked in) follows on the same day. | |