Fix N2: agent_keys history; dedicated checkpoint-signer docs #13

leora · 2026-10-06T06:22:14+08:00

leora commented

2026-10-06 06:22:14 +08:00

Summary

N2 (Medium): R3 key wipe made historical checkpoints/anchors unverifiable.

Changes

Append-only agent_keys table (pubkey + fingerprint only; never private)
Revoke/rekey retire keys into history; verify uses fingerprint lookup
Post-retired_at checkpoints flagged, not failed
Runbook: dedicated checkpoint-signer identity pattern
Regression tests for revoke+verify and rekey+verify

Test plan

152 tests pass

## Summary **N2 (Medium):** R3 key wipe made historical checkpoints/anchors unverifiable. ## Changes - Append-only `agent_keys` table (pubkey + fingerprint only; never private) - Revoke/rekey retire keys into history; verify uses fingerprint lookup - Post-`retired_at` checkpoints flagged, not failed - Runbook: dedicated checkpoint-signer identity pattern - Regression tests for revoke+verify and rekey+verify ## Test plan - [x] 152 tests pass

leora added 1 commit 2026-10-06 06:22:14 +08:00

Fix N2: agent_keys history keeps checkpoints verifiable after revoke 73b9ab4515

Permanent revoke and rekey retired the live pubkey without retaining it,
so historical checkpoints and off-box anchors became permanently
unverifiable. Add append-only agent_keys (public material only); retire
on revoke/rekey; verify against the fingerprint-named historical key.
Document a dedicated checkpoint-signer identity in the runbook.

leora merged commit a1cc241923 into sigil-initial

2026-10-06 06:22:15 +08:00

leora referenced this issue from a commit

2026-10-06 06:22:15 +08:00

Merge pull request 'Fix N2: agent_keys history; dedicated checkpoint-signer docs' (#13) from leora/fix-n2-key-history into sigil-initial

leora referenced this pull request

2026-10-06 06:24:04 +08:00

Sigil: agent identity for the new internet #1

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: bigpickle/sigil#13