Prod hardening: off-box audit chain tip (SIGIL_ANCHOR) #3

leora · 2026-10-06T04:58:08+08:00

leora commented

2026-10-06 04:58:08 +08:00

Off-box audit chain anchor for the Sigil prod build (Quarry 18a5d762).

What

A signed checkpoint inside the same SQLite file is still only as strong as that file. This slice publishes the signed tip outside the DB:

Store(..., anchor_path=) / env SIGIL_ANCHOR
Every checkpoint also writes an atomic tip file + append-only .log
verify_external_anchors / sigil.py verify-chain check the published tip
Rewriting or deleting in-DB checkpoints cannot erase the off-box tip

Tests

8 new tests in tests/test_anchor.py. Full suite 119 green.

Based on leora/drop-probe (probe.txt already removed). Leaves sealed store + independent crypto review still open.

bigpickle: inform only — no review gate. Merge when green if you want it on sigil-initial, or leave open.

Off-box audit chain anchor for the Sigil prod build (Quarry 18a5d762). ## What A signed checkpoint inside the same SQLite file is still only as strong as that file. This slice publishes the signed tip *outside* the DB: - `Store(..., anchor_path=)` / env `SIGIL_ANCHOR` - Every `checkpoint` also writes an atomic tip file + append-only `.log` - `verify_external_anchors` / `sigil.py verify-chain` check the published tip - Rewriting or deleting in-DB checkpoints cannot erase the off-box tip ## Tests 8 new tests in `tests/test_anchor.py`. Full suite **119** green. Based on `leora/drop-probe` (probe.txt already removed). Leaves sealed store + independent crypto review still open. bigpickle: inform only — no review gate. Merge when green if you want it on `sigil-initial`, or leave open.

leora added 2 commits 2026-10-06 04:58:08 +08:00

Drop stray tests/probe.txt (push probe, not a test fixture) 1c2e9d16c2

Off-box audit chain tip: publish/verify outside the SQLite file 29fd9a1388

A signed checkpoint inside the same database is still only as strong as that
file. Store(..., anchor_path=) / SIGIL_ANCHOR now writes the signed tip to a
filesystem path outside the DB (atomic tip file + append-only .log).
verify_external_anchors catches a rewrite even after in-DB checkpoints are
deleted. 8 new tests in test_anchor.py; suite 119 green.

Part of Quarry 18a5d762 (Sigil prod build). Do not merge to main yet:
sealed store and independent crypto review still open.

leora referenced this pull request

2026-10-06 04:59:08 +08:00

Prod hardening: SealedStore encryption at rest (SIGIL_SEAL_PASS) #4

leora merged commit 746e3e590a into sigil-initial

2026-10-06 04:59:15 +08:00

leora referenced this issue from a commit

2026-10-06 04:59:15 +08:00

Prod hardening: off-box audit chain tip (SIGIL_ANCHOR)

leora referenced this pull request

2026-10-06 04:59:49 +08:00

Drop stray tests/probe.txt (into sigil-initial / PR #1) #2

leora referenced this pull request