SET UP EXTENSION TRUST

Prerequisites: Swamp installed, authenticated with swamp auth login.

Check the current trust list

swamp extension trust list

Trusted Collectives

Explicit:
  swamp

Auto-trust membership collectives: disabled

Resolved (effective):
  swamp

By default, only the swamp collective is trusted.

Add a trusted collective

swamp extension trust add myorg

Added trusted collective: myorg
Trusted collectives: swamp, myorg

After adding, any extension published under myorg can be pulled and installed without prompting.

Verify the updated list

swamp extension trust list

Trusted Collectives

Explicit:
  swamp
  myorg
...

Enable auto-trust for membership collectives

If you want to trust every collective you belong to:

swamp extension trust auto-trust true

Auto-trust membership collectives: enabled

With auto-trust enabled, the resolved list includes all collectives where you have membership. This is convenient for team repositories where everyone publishes under their own collective. For CI repositories where you want tight control, prefer explicit trust add entries instead.

Remove a collective

swamp extension trust rm myorg

Removed trusted collective: myorg
Trusted collectives: swamp

Verify trust behavior

1. Try to run a model that uses an extension from an untrusted collective:

   swamp model method run my-model some-method

   The command refuses with an error naming the untrusted collective.

2. Add the collective to the trust list:

   swamp extension trust add the-collective

3. Re-run the method — it executes without the trust error.

For the full trust model, see the extensions reference.