leora 73b9ab4515 Fix N2: agent_keys history keeps checkpoints verifiable after revoke ...

Permanent revoke and rekey retired the live pubkey without retaining it,
so historical checkpoints and off-box anchors became permanently
unverifiable. Add append-only agent_keys (public material only); retire
on revoke/rekey; verify against the fingerprint-named historical key.
Document a dedicated checkpoint-signer identity in the runbook.

2026-10-06 06:22:13 +08:00

..

helpers.py

Harden Sigil: tests/helpers.py

2026-10-05 21:26:15 +08:00

test_anchor.py

Off-box audit chain tip: publish/verify outside the SQLite file

2026-10-06 04:58:02 +08:00

test_hardening.py

Fix N1: resolve re-checks agent; codes bind key fingerprint

2026-10-06 06:21:18 +08:00

test_identity.py

Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol

2026-10-06 06:12:24 +08:00

test_keys.py

Sigil: agent identity for the new internet

2026-10-05 20:43:50 +08:00

test_production.py

Fix N2: agent_keys history keeps checkpoints verifiable after revoke

2026-10-06 06:22:13 +08:00

test_sealed.py

Fix R5: SealedStore plaintext tmp is 0600 with fsync/cleanup

2026-10-06 06:14:41 +08:00

test_sessions.py

Route the human-session tests through the real code path

2026-10-05 21:51:21 +08:00

test_viewcodes.py

Fix R1: invalidate view codes on revoke/rekey/suspend

2026-10-06 06:10:42 +08:00