leora 4e65f6671a Fix R5: SealedStore plaintext tmp is 0600 with fsync/cleanup ...

Plaintext working copy and export backup were creatable world-readable
under a 0700 temp dir. Write via os.open(mode=0600), fsync, unlink on
failure; pin temp dir 0700; remove export after flush. Document SQLCipher
as deferred — seal-on is not an encrypted DB while the process is open.

2026-10-06 06:14:41 +08:00

..

helpers.py

Harden Sigil: tests/helpers.py

2026-10-05 21:26:15 +08:00

test_anchor.py

Off-box audit chain tip: publish/verify outside the SQLite file

2026-10-06 04:58:02 +08:00

test_hardening.py

Harden Sigil: tests/test_hardening.py

2026-10-05 21:26:17 +08:00

test_identity.py

Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol

2026-10-06 06:12:24 +08:00

test_keys.py

Sigil: agent identity for the new internet

2026-10-05 20:43:50 +08:00

test_production.py

Fix R4: checkpoint requires private key match enrolled fingerprint

2026-10-06 06:14:00 +08:00

test_sealed.py

Fix R5: SealedStore plaintext tmp is 0600 with fsync/cleanup

2026-10-06 06:14:41 +08:00

test_sessions.py

Route the human-session tests through the real code path

2026-10-05 21:51:21 +08:00

test_viewcodes.py

Fix R1: invalidate view codes on revoke/rekey/suspend

2026-10-06 06:10:42 +08:00