Commit Graph

Select branches

Hide Pull Requests

leora/close-review-blockers

leora/drop-probe

leora/fix-n1-resolve-recheck

leora/fix-n2-key-history

leora/fix-n3-rekey-rate-bucket

leora/fix-n4-n5-n6-docs-checkpoint-suspend

leora/fix-n7-n8-human-fp-view-ttl

leora/fix-r1-invalidate-view-codes

leora/fix-r11-cryptography-pin

leora/fix-r11-runbook-deps

leora/fix-r2-bootstrap-hygiene

leora/fix-r3-reinstate-requires-rekey

leora/fix-r4-checkpoint-key-binding

leora/fix-r5-sealed-tmp-hardening

leora/fix-r6-r7-r8-cas-rekey-bootstrap

leora/prod-offbox-anchor

leora/prod-sealed-store

leora/readme-links-license

main

sigil-initial

#1

#10

#11

#12

#13

#14

#15

#16

#17

#18

#2

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 8feeff69ce README: where it runs, contributing; suggest MIT LICENSE leora/readme-links-license Leora 2026-10-10 08:37:23 +08:00
• d70ee8b63c Fix N7/N8: human session fingerprint epoch; drop duplicate view_ttl main leora 2026-10-06 06:27:46 +08:00
• ef39ca742b Fix R11: pin cryptography>=44.0.1 and add hash lock leora 2026-10-06 06:23:49 +08:00
• a44b40b5f0 Fix N4/N5/N6: enrol wording, suspended checkpoint, test count leora 2026-10-06 06:23:17 +08:00
• b4d9cbe5f8 Fix N3: dedicated rekey rate-limit bucket; charge only on failure leora 2026-10-06 06:22:48 +08:00
• a609088bdc Fix N2: agent_keys history keeps checkpoints verifiable after revoke leora 2026-10-06 06:22:13 +08:00
• 558d313783 Fix N1: resolve re-checks agent; codes bind key fingerprint leora 2026-10-06 06:21:18 +08:00
• df1ed31bdb Fix R11: pin cryptography; add prod runbook for seal + anchor leora 2026-10-06 06:16:05 +08:00
• 16ed04caea Fix R6/R7/R8: claim_code expiry CAS, rate-limit rekey, delete spent bootstrap leora 2026-10-06 06:15:15 +08:00
• 6e86aeb2af Fix R5: SealedStore plaintext tmp is 0600 with fsync/cleanup leora 2026-10-06 06:14:41 +08:00
• 40c5ee0a3d Fix R4: checkpoint requires private key match enrolled fingerprint leora 2026-10-06 06:14:00 +08:00
• e993f2403b Fix R3: permanent revoke clears key; reinstate requires rekey leora 2026-10-06 06:13:23 +08:00
• a474882f61 Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol leora 2026-10-06 06:12:24 +08:00
• 9eea815805 Fix R1: invalidate view codes on revoke/rekey/suspend leora 2026-10-06 06:10:42 +08:00
• 73f802a5e6 Sealed store: AES-256-GCM encryption at rest for the DB file leora 2026-10-06 04:59:07 +08:00
• 13802d8f59 Off-box audit chain tip: publish/verify outside the SQLite file leora 2026-10-06 04:58:02 +08:00
• 0ecff7ed50 Drop stray tests/probe.txt (push probe, not a test fixture) leora 2026-10-06 04:55:44 +08:00
• 9c4fe06fb5 Close three review blockers: rekey, dual-enrol race, redeem quotas leora 2026-10-05 23:27:33 +08:00
• 557f98e1f9 Document the second pass and what is still open bigpickle 2026-10-05 21:51:25 +08:00
• 53136cc38f Document the second pass and what is still open bigpickle 2026-10-05 21:51:23 +08:00
• 43c55682c7 Route the human-session tests through the real code path bigpickle 2026-10-05 21:51:21 +08:00
• 69669f12ec One test per finding in the second review pass bigpickle 2026-10-05 21:51:18 +08:00
• dbae7dc98f Document revocation and bump to 0.3.0 bigpickle 2026-10-05 21:51:15 +08:00
• 949feb7a32 Expose checkpoint, revoke, reinstate and sweep on the CLI bigpickle 2026-10-05 21:51:13 +08:00
• 2d05f72656 Close the second round of review findings: public_from_private bigpickle 2026-10-05 21:51:10 +08:00
• 5a20bae6a6 Close the second round of review findings: no credentials in the audit log bigpickle 2026-10-05 21:51:08 +08:00
• a7968dd4cb Close the second round of review findings: GrantedCode, no minting from a name bigpickle 2026-10-05 21:51:06 +08:00
• db9a450f0c Close the second round of review findings: revoke, reinstate, expiry bigpickle 2026-10-05 21:51:03 +08:00
• 65cea0d927 Close the second round of review findings: checkpoints, revocation, WAL, sweep bigpickle 2026-10-05 21:51:01 +08:00
• 910ddfde42 Harden Sigil: tests/test_hardening.py bigpickle 2026-10-05 21:26:17 +08:00
• 2f5b24e8f9 Harden Sigil: tests/helpers.py bigpickle 2026-10-05 21:26:15 +08:00
• 0c2fcd91f0 probe bigpickle 2026-10-05 21:25:47 +08:00
• da20d6c539 Harden Sigil: tests/test_viewcodes.py bigpickle 2026-10-05 21:24:53 +08:00
• 4487f15b9e Harden Sigil: tests/test_sessions.py bigpickle 2026-10-05 21:24:50 +08:00
• 71801d31cb Harden Sigil: sigil/viewcodes.py bigpickle 2026-10-05 21:24:48 +08:00
• a3c4e61832 Harden Sigil: sigil/store.py bigpickle 2026-10-05 21:24:45 +08:00
• fba91c1bf7 Harden Sigil: sigil/sessions.py bigpickle 2026-10-05 21:24:43 +08:00
• dc55b9a7aa Harden Sigil: sigil/keys.py bigpickle 2026-10-05 21:24:40 +08:00
• 752e006e0d Harden Sigil: sigil/identity.py bigpickle 2026-10-05 21:24:38 +08:00
• df19aae02f Harden Sigil: sigil/errors.py bigpickle 2026-10-05 21:24:35 +08:00
• 17792d96fb Harden Sigil: sigil/__init__.py bigpickle 2026-10-05 21:24:33 +08:00
• 3d1087c17c Harden Sigil: sigil.py bigpickle 2026-10-05 21:24:31 +08:00
• bcd89a5db1 Harden Sigil: DESIGN.md bigpickle 2026-10-05 21:24:28 +08:00
• 5e1db8afcd Harden Sigil: README.md bigpickle 2026-10-05 21:24:19 +08:00
• f4a044f1d6 Sigil: agent identity for the new internet bigpickle 2026-10-05 20:43:50 +08:00
• 4661a994bf Merge pull request 'Fix N7/N8: human session fingerprint epoch; drop duplicate view_ttl' (#17) from leora/fix-n7-n8-human-fp-view-ttl into sigil-initial sigil-initial leora 2026-10-06 06:27:47 +08:00
• ad51b2548a Fix N7/N8: human session fingerprint epoch; drop duplicate view_ttl leora/fix-n7-n8-human-fp-view-ttl leora 2026-10-06 06:27:46 +08:00
• a5bbbccb29 Merge pull request 'Fix R11: pin cryptography>=44.0.1 with hash lock' (#16) from leora/fix-r11-cryptography-pin into sigil-initial leora 2026-10-06 06:23:50 +08:00
• 9e76d68344 Fix R11: pin cryptography>=44.0.1 and add hash lock leora/fix-r11-cryptography-pin leora 2026-10-06 06:23:49 +08:00
• 618fb5401c Merge pull request 'Fix N4/N5/N6: enrol wording, suspended checkpoint, test count' (#15) from leora/fix-n4-n5-n6-docs-checkpoint-suspend into sigil-initial leora 2026-10-06 06:23:18 +08:00
• 6578a1fe8f Fix N4/N5/N6: enrol wording, suspended checkpoint, test count leora/fix-n4-n5-n6-docs-checkpoint-suspend leora 2026-10-06 06:23:17 +08:00
• c46cd52323 Merge pull request 'Fix N3: dedicated rekey rate-limit bucket; charge only on failure' (#14) from leora/fix-n3-rekey-rate-bucket into sigil-initial leora 2026-10-06 06:22:49 +08:00
• fae03444af Fix N3: dedicated rekey rate-limit bucket; charge only on failure leora/fix-n3-rekey-rate-bucket leora 2026-10-06 06:22:48 +08:00
• a1cc241923 Merge pull request 'Fix N2: agent_keys history; dedicated checkpoint-signer docs' (#13) from leora/fix-n2-key-history into sigil-initial leora 2026-10-06 06:22:14 +08:00
• 73b9ab4515 Fix N2: agent_keys history keeps checkpoints verifiable after revoke leora/fix-n2-key-history leora 2026-10-06 06:22:13 +08:00
• 668577f3ea Merge pull request 'Fix N1: resolve re-checks agent state; codes bind fingerprint' (#12) from leora/fix-n1-resolve-recheck into sigil-initial leora 2026-10-06 06:21:19 +08:00
• 096a7dd072 Fix N1: resolve re-checks agent; codes bind key fingerprint leora/fix-n1-resolve-recheck leora 2026-10-06 06:21:18 +08:00
• 75423dc301 Merge pull request 'Fix R11: pin cryptography; prod runbook for SIGIL_ANCHOR + SIGIL_SEAL_PASS' (#11) from leora/fix-r11-runbook-deps into sigil-initial leora 2026-10-06 06:16:05 +08:00
• 7d1a827ba2 Fix R11: pin cryptography; add prod runbook for seal + anchor leora/fix-r11-runbook-deps leora 2026-10-06 06:16:05 +08:00
• db5aaff6fb Merge pull request 'Fix R6/R7/R8: claim_code expiry CAS, rate-limit rekey, delete spent bootstrap' (#10) from leora/fix-r6-r7-r8-cas-rekey-bootstrap into sigil-initial leora 2026-10-06 06:15:16 +08:00
• 1530bfd010 Fix R6/R7/R8: claim_code expiry CAS, rate-limit rekey, delete spent bootstrap leora/fix-r6-r7-r8-cas-rekey-bootstrap leora 2026-10-06 06:15:15 +08:00
• cd87be6b8d Merge pull request 'Fix R5: SealedStore plaintext tmp 0600 + SQLCipher deferred note' (#9) from leora/fix-r5-sealed-tmp-hardening into sigil-initial leora 2026-10-06 06:14:42 +08:00
• 4e65f6671a Fix R5: SealedStore plaintext tmp is 0600 with fsync/cleanup leora/fix-r5-sealed-tmp-hardening leora 2026-10-06 06:14:41 +08:00
• 7e0ac5020c Merge pull request 'Fix R4: checkpoint binds private key to enrolled fingerprint' (#8) from leora/fix-r4-checkpoint-key-binding into sigil-initial leora 2026-10-06 06:14:01 +08:00
• 7872bd92b9 Fix R4: checkpoint requires private key match enrolled fingerprint leora/fix-r4-checkpoint-key-binding leora 2026-10-06 06:14:00 +08:00
• f39946a983 Merge pull request 'Fix R3: permanent revoke clears key; reinstate requires rekey' (#7) from leora/fix-r3-reinstate-requires-rekey into sigil-initial leora 2026-10-06 06:13:24 +08:00
• b49d2087d6 Fix R3: permanent revoke clears key; reinstate requires rekey leora/fix-r3-reinstate-requires-rekey leora 2026-10-06 06:13:23 +08:00
• 2e0900e15b Merge pull request 'Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol' (#6) from leora/fix-r2-bootstrap-hygiene into sigil-initial leora 2026-10-06 06:12:25 +08:00
• 23cc531711 Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol leora/fix-r2-bootstrap-hygiene leora 2026-10-06 06:12:24 +08:00
• d4af46cc1b Merge pull request 'Fix R1: invalidate view codes on revoke/rekey/suspend' (#5) from leora/fix-r1-invalidate-view-codes into sigil-initial leora 2026-10-06 06:10:55 +08:00
• 4a7b7d6fd7 Fix R1: invalidate view codes on revoke/rekey/suspend leora/fix-r1-invalidate-view-codes leora 2026-10-06 06:10:42 +08:00
• c0027bb9f6 Prod hardening: SealedStore encryption at rest leora 2026-10-06 04:59:29 +08:00
• 746e3e590a Prod hardening: off-box audit chain tip (SIGIL_ANCHOR) leora 2026-10-06 04:59:14 +08:00
• bd7d62c21c Sealed store: AES-256-GCM encryption at rest for the DB file leora/prod-sealed-store leora 2026-10-06 04:59:07 +08:00
• 29fd9a1388 Off-box audit chain tip: publish/verify outside the SQLite file leora/prod-offbox-anchor leora 2026-10-06 04:58:02 +08:00
• 1c2e9d16c2 Drop stray tests/probe.txt (push probe, not a test fixture) leora/drop-probe leora 2026-10-06 04:55:44 +08:00
• 35fc6373a6 Close three review blockers: rekey, dual-enrol race, redeem quotas leora/close-review-blockers leora 2026-10-05 23:27:33 +08:00
• 01279f6282 Document the second pass and what is still open bigpickle 2026-10-05 21:51:25 +08:00
• b24236f740 Document the second pass and what is still open bigpickle 2026-10-05 21:51:23 +08:00
• a59e668ca2 Route the human-session tests through the real code path bigpickle 2026-10-05 21:51:21 +08:00
• 9ce8da7573 One test per finding in the second review pass bigpickle 2026-10-05 21:51:18 +08:00
• e784be8d3f Document revocation and bump to 0.3.0 bigpickle 2026-10-05 21:51:15 +08:00
• 806a97437e Expose checkpoint, revoke, reinstate and sweep on the CLI bigpickle 2026-10-05 21:51:13 +08:00
• 57708eb7ac Close the second round of review findings: public_from_private bigpickle 2026-10-05 21:51:10 +08:00
• fc7858ef82 Close the second round of review findings: no credentials in the audit log bigpickle 2026-10-05 21:51:08 +08:00
• 8ead217556 Close the second round of review findings: GrantedCode, no minting from a name bigpickle 2026-10-05 21:51:06 +08:00
• d402d7e498 Close the second round of review findings: revoke, reinstate, expiry bigpickle 2026-10-05 21:51:03 +08:00
• b3b154fe3c Close the second round of review findings: checkpoints, revocation, WAL, sweep bigpickle 2026-10-05 21:51:01 +08:00
• ea827c8e42 Harden Sigil: tests/test_hardening.py bigpickle 2026-10-05 21:26:17 +08:00
• 47abc7d717 Harden Sigil: tests/helpers.py bigpickle 2026-10-05 21:26:15 +08:00
• 9cbc3f5122 probe bigpickle 2026-10-05 21:25:47 +08:00
• 908ea0439f Harden Sigil: tests/test_viewcodes.py bigpickle 2026-10-05 21:24:53 +08:00
• f1ad41f6d9 Harden Sigil: tests/test_sessions.py bigpickle 2026-10-05 21:24:50 +08:00
• 01a8f5bbe2 Harden Sigil: sigil/viewcodes.py bigpickle 2026-10-05 21:24:48 +08:00
• a3c6c8d5c6 Harden Sigil: sigil/store.py bigpickle 2026-10-05 21:24:45 +08:00
• 128a8db763 Harden Sigil: sigil/sessions.py bigpickle 2026-10-05 21:24:43 +08:00
• 854db7c6a7 Harden Sigil: sigil/keys.py bigpickle 2026-10-05 21:24:40 +08:00
• 995920321a Harden Sigil: sigil/identity.py bigpickle 2026-10-05 21:24:38 +08:00
• f720814b56 Harden Sigil: sigil/errors.py bigpickle 2026-10-05 21:24:35 +08:00
• 05e376f5a2 Harden Sigil: sigil/__init__.py bigpickle 2026-10-05 21:24:33 +08:00