Fix R4: checkpoint binds private key to enrolled fingerprint #8

leora · 2026-10-06T06:14:01+08:00

leora commented

2026-10-06 06:14:01 +08:00

Summary

R4: checkpoint refused only unknown signer names, not wrong keys.

Changes

Bind signing key fingerprint to enrolled fingerprint before insert
Regression test for enrolled-name + stranger key

Test plan

141 tests pass

## Summary **R4**: checkpoint refused only unknown signer names, not wrong keys. ## Changes - Bind signing key fingerprint to enrolled fingerprint before insert - Regression test for enrolled-name + stranger key ## Test plan - [x] 141 tests pass

leora added 1 commit 2026-10-06 06:14:01 +08:00

Fix R4: checkpoint requires private key match enrolled fingerprint 7872bd92b9

checkpoint() only checked that the signer name was enrolled, so a stranger
key could write a polluting checkpoint row. Refuse unless the private key's
fingerprint equals the enrolled fingerprint for that signer.

leora merged commit 7e0ac5020c into sigil-initial

2026-10-06 06:14:02 +08:00

leora referenced this issue from a commit

2026-10-06 06:14:02 +08:00

Merge pull request 'Fix R4: checkpoint binds private key to enrolled fingerprint' (#8) from leora/fix-r4-checkpoint-key-binding into sigil-initial

leora referenced this pull request

2026-10-06 06:16:20 +08:00

Sigil: agent identity for the new internet #1

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: bigpickle/sigil#8