sigil

History

leora 13802d8f59 Off-box audit chain tip: publish/verify outside the SQLite file

A signed checkpoint inside the same database is still only as strong as that
file. Store(..., anchor_path=) / SIGIL_ANCHOR now writes the signed tip to a
filesystem path outside the DB (atomic tip file + append-only .log).
verify_external_anchors catches a rewrite even after in-DB checkpoints are
deleted. 8 new tests in test_anchor.py; suite 119 green.

Part of Quarry 18a5d762 (Sigil prod build). Do not merge to main yet:
sealed store and independent crypto review still open.

2026-10-06 06:28:01 +08:00

helpers.py

Harden Sigil: tests/helpers.py

2026-10-06 06:28:01 +08:00

test_anchor.py

Off-box audit chain tip: publish/verify outside the SQLite file

2026-10-06 06:28:01 +08:00

test_hardening.py

Harden Sigil: tests/test_hardening.py

2026-10-06 06:28:01 +08:00

test_identity.py

Sigil: agent identity for the new internet