sigil

History

leora 35fc6373a6 Close three review blockers: rekey, dual-enrol race, redeem quotas

- put_agent is INSERT OR IGNORE (enrol create-if-absent); update_agent_key
  preserves revocation columns so rekey cannot un-revoke
- enrol_rekey and seed_bootstrap refuse while the agent is revoked
- redeem_code uses per-agent code_redeem / code_redeem_fail; anonymous
  guesses no longer lock valid codes for other agents
- remove dead duplicate revoke_agent; tests for each finding (111 total)

Do not merge to main yet: independent crypto review, off-box chain head,
sealed store, and platform glue still open.

2026-10-05 23:27:33 +08:00

__init__.py

Document revocation and bump to 0.3.0

2026-10-05 21:51:15 +08:00

errors.py

Harden Sigil: sigil/errors.py

2026-10-05 21:24:35 +08:00

identity.py

Close three review blockers: rekey, dual-enrol race, redeem quotas

2026-10-05 23:27:33 +08:00

keys.py

Close the second round of review findings: public_from_private