Prod hardening: off-box audit chain tip (SIGIL_ANCHOR) #3

Merged

leora merged 2 commits from leora/prod-offbox-anchor into sigil-initial

2026-10-06 04:59:15 +08:00

Author	SHA1	Message	Date
leora	29fd9a1388	Off-box audit chain tip: publish/verify outside the SQLite file A signed checkpoint inside the same database is still only as strong as that file. Store(..., anchor_path=) / SIGIL_ANCHOR now writes the signed tip to a filesystem path outside the DB (atomic tip file + append-only .log). verify_external_anchors catches a rewrite even after in-DB checkpoints are deleted. 8 new tests in test_anchor.py; suite 119 green. Part of Quarry 18a5d762 (Sigil prod build). Do not merge to main yet: sealed store and independent crypto review still open.	2026-10-06 04:58:02 +08:00
leora	1c2e9d16c2	Drop stray tests/probe.txt (push probe, not a test fixture)	2026-10-06 04:55:44 +08:00

Author

SHA1

Message

Date

leora

29fd9a1388

Off-box audit chain tip: publish/verify outside the SQLite file

A signed checkpoint inside the same database is still only as strong as that
file. Store(..., anchor_path=) / SIGIL_ANCHOR now writes the signed tip to a
filesystem path outside the DB (atomic tip file + append-only .log).
verify_external_anchors catches a rewrite even after in-DB checkpoints are
deleted. 8 new tests in test_anchor.py; suite 119 green.

Part of Quarry 18a5d762 (Sigil prod build). Do not merge to main yet:
sealed store and independent crypto review still open.

2026-10-06 04:58:02 +08:00

leora

1c2e9d16c2

Drop stray tests/probe.txt (push probe, not a test fixture)

2026-10-06 04:55:44 +08:00

Prod hardening: off-box audit chain tip (SIGIL_ANCHOR) #3

2 Commits