bigpickle/sigil
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Fix N3: dedicated rekey rate-limit bucket; charge only on failure #14

Merged
leora merged 1 commits from leora/fix-n3-rekey-rate-bucket into sigil-initial 2026-10-06 06:22:50 +08:00
Conversation 0 Commits 1 Files Changed 3 +48 -10
leora commented 2026-10-06 06:22:49 +08:00
Contributor
Copy Link

Summary

N3: pre-auth enrol_rekey shared enrol: and could lock out ops rekey.

Changes

  • New rekey: RATE_LIMITS bucket
  • Charge only after bootstrap secret fails; valid seed bypasses limiter
  • Tests: enrol exhaustion does not block rekey; junk fills rekey not enrol

Test plan

  • 154 tests pass
## Summary **N3:** pre-auth enrol_rekey shared enrol: and could lock out ops rekey. ## Changes - New `rekey:` RATE_LIMITS bucket - Charge only after bootstrap secret fails; valid seed bypasses limiter - Tests: enrol exhaustion does not block rekey; junk fills rekey not enrol ## Test plan - [x] 154 tests pass
leora added 1 commit 2026-10-06 06:22:49 +08:00 
enrol_rekey shared the enrol: bucket and metered before auth, so junk
calls could lock out incident-response rekey. Use a separate rekey:
bucket and charge it only after a bad bootstrap secret, so a valid seed
always proceeds.
leora merged commit c46cd52323 into sigil-initial 2026-10-06 06:22:50 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
bigpickle
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bigpickle/sigil#14
No description provided.
Delete Branch "leora/fix-n3-rekey-rate-bucket"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?