557f98e1f9
Document the second pass and what is still open
2026-10-06 06:28:01 +08:00
53136cc38f
Document the second pass and what is still open
2026-10-06 06:28:01 +08:00
43c55682c7
Route the human-session tests through the real code path
2026-10-06 06:28:01 +08:00
69669f12ec
One test per finding in the second review pass
2026-10-06 06:28:01 +08:00
dbae7dc98f
Document revocation and bump to 0.3.0
2026-10-06 06:28:01 +08:00
949feb7a32
Expose checkpoint, revoke, reinstate and sweep on the CLI
2026-10-06 06:28:01 +08:00
2d05f72656
Close the second round of review findings: public_from_private
2026-10-06 06:28:01 +08:00
5a20bae6a6
Close the second round of review findings: no credentials in the audit log
2026-10-06 06:28:01 +08:00
a7968dd4cb
Close the second round of review findings: GrantedCode, no minting from a name
2026-10-06 06:28:01 +08:00
db9a450f0c
Close the second round of review findings: revoke, reinstate, expiry
2026-10-06 06:28:01 +08:00
65cea0d927
Close the second round of review findings: checkpoints, revocation, WAL, sweep
2026-10-06 06:28:01 +08:00
910ddfde42
Harden Sigil: tests/test_hardening.py
2026-10-06 06:28:01 +08:00
2f5b24e8f9
Harden Sigil: tests/helpers.py
2026-10-06 06:28:01 +08:00
0c2fcd91f0
probe
2026-10-06 06:28:01 +08:00
da20d6c539
Harden Sigil: tests/test_viewcodes.py
2026-10-06 06:28:01 +08:00
4487f15b9e
Harden Sigil: tests/test_sessions.py
2026-10-06 06:28:01 +08:00
71801d31cb
Harden Sigil: sigil/viewcodes.py
2026-10-06 06:28:01 +08:00
a3c4e61832
Harden Sigil: sigil/store.py
2026-10-06 06:28:01 +08:00
fba91c1bf7
Harden Sigil: sigil/sessions.py
2026-10-06 06:28:01 +08:00
dc55b9a7aa
Harden Sigil: sigil/keys.py
2026-10-06 06:28:01 +08:00
752e006e0d
Harden Sigil: sigil/identity.py
2026-10-06 06:28:01 +08:00
df19aae02f
Harden Sigil: sigil/errors.py
2026-10-06 06:28:01 +08:00
17792d96fb
Harden Sigil: sigil/__init__.py
2026-10-06 06:28:01 +08:00
3d1087c17c
Harden Sigil: sigil.py
2026-10-06 06:28:01 +08:00
bcd89a5db1
Harden Sigil: DESIGN.md
2026-10-06 06:28:01 +08:00
5e1db8afcd
Harden Sigil: README.md
2026-10-06 06:28:01 +08:00
f4a044f1d6
Sigil: agent identity for the new internet
...
Replace passcode identity with Ed25519 challenge-response.
- Enrolment consumes a one-time bootstrap secret, after which no static
secret is used on the wire again.
- Nonces are single-use and consumed before the signature is judged, so a
captured or bad signature cannot be retried.
- Sessions are short-lived, scoped, and typed agent vs human_via_agent.
- Human view access uses one-time codes with a 5 minute redemption window
and a 1 hour session, deliberately different numbers: the code is a key,
the session is the door.
- Invariant: only an agent signature may act as an agent. Enforced and tested.
- Append-only audit trail.
54 tests, covering refusals rather than only the happy path.
Reference implementation, not reviewed or hardened. See README Status.
2026-10-06 06:28:01 +08:00
7f0e73f281
Initialise bigpickle/sigil
...
Component repo for Sigil. Content arrives by pull request.
2026-10-05 20:44:17 +08:00
