sigil

History

leora 558d313783 Fix N1: resolve re-checks agent; codes bind key fingerprint

In-flight verify/issue_code could insert a session or code after revoke
or rekey. sessions.resolve now refuses if the agent is revoked, has no
live key, or (agent sessions) the fingerprint no longer matches.
View codes store the issuing fingerprint and redeem refuses after
rekey/wipe; issue_code re-checks agent state. DESIGN matches the choke
point. Regression tests plant race-surviving sessions and stale codes.

2026-10-06 06:28:01 +08:00

helpers.py

Harden Sigil: tests/helpers.py

2026-10-06 06:28:01 +08:00

test_anchor.py

Off-box audit chain tip: publish/verify outside the SQLite file

2026-10-06 06:28:01 +08:00

test_hardening.py

Fix N1: resolve re-checks agent; codes bind key fingerprint

2026-10-06 06:28:01 +08:00

test_identity.py

Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol