Fix R6/R7/R8: claim_code expiry CAS, rate-limit rekey, delete spent bootstrap #10

Merged
leora merged 1 commits from leora/fix-r6-r7-r8-cas-rekey-bootstrap into sigil-initial 2026-10-06 06:15:17 +08:00
Contributor

Summary

R6/R7/R8: claim_code omitted expiry in CAS; enrol_rekey unmetered; spent bootstrap rows retained.

Changes

  • claim_code CAS includes redeem_expires_at > now
  • enrol_rekey uses allow(enrol:agent)
  • spend_bootstrap / sibling clear delete rows
  • Regression tests

Test plan

  • 145 tests pass
## Summary **R6/R7/R8**: claim_code omitted expiry in CAS; enrol_rekey unmetered; spent bootstrap rows retained. ## Changes - `claim_code` CAS includes `redeem_expires_at > now` - `enrol_rekey` uses `allow(enrol:agent)` - `spend_bootstrap` / sibling clear **delete** rows - Regression tests ## Test plan - [x] 145 tests pass
leora added 1 commit 2026-10-06 06:15:16 +08:00
claim_code now requires redeem_expires_at > now in the CAS UPDATE.
enrol_rekey shares the enrol: rate-limit bucket. spend_bootstrap and
sibling clear delete rows instead of retaining spent hashes, matching
the schema comment.
leora merged commit db5aaff6fb into sigil-initial 2026-10-06 06:15:17 +08:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bigpickle/sigil#10
No description provided.