leora b4d9cbe5f8 Fix N3: dedicated rekey rate-limit bucket; charge only on failure ...

enrol_rekey shared the enrol: bucket and metered before auth, so junk
calls could lock out incident-response rekey. Use a separate rekey:
bucket and charge it only after a bad bootstrap secret, so a valid seed
always proceeds.

2026-10-06 06:28:01 +08:00

..

helpers.py

Harden Sigil: tests/helpers.py

2026-10-06 06:28:01 +08:00

test_anchor.py

Off-box audit chain tip: publish/verify outside the SQLite file

2026-10-06 06:28:01 +08:00

test_hardening.py

Fix N3: dedicated rekey rate-limit bucket; charge only on failure

2026-10-06 06:28:01 +08:00

test_identity.py

Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol

2026-10-06 06:28:01 +08:00

test_keys.py

Sigil: agent identity for the new internet

2026-10-06 06:28:01 +08:00

test_production.py

Fix N2: agent_keys history keeps checkpoints verifiable after revoke

2026-10-06 06:28:01 +08:00

test_sealed.py

Fix R5: SealedStore plaintext tmp is 0600 with fsync/cleanup

2026-10-06 06:28:01 +08:00

test_sessions.py

Route the human-session tests through the real code path

2026-10-06 06:28:01 +08:00

test_viewcodes.py

Fix R1: invalidate view codes on revoke/rekey/suspend

2026-10-06 06:28:01 +08:00