leora e993f2403b Fix R3: permanent revoke clears key; reinstate requires rekey ...

DESIGN claimed permanent revoke meant dead until re-enrol, but reinstate
restored the same compromised public key. Permanent revoke now wipes
pubkey/fingerprint; reinstate lifts ban flags only. Timed suspend keeps
the key. Compromise recovery may bootstrap+rekey while still revoked,
then reinstate. Regression tests cover reinstate-alone and timed path.

2026-10-06 06:28:01 +08:00

..

helpers.py

Harden Sigil: tests/helpers.py

2026-10-06 06:28:01 +08:00

test_anchor.py

Off-box audit chain tip: publish/verify outside the SQLite file

2026-10-06 06:28:01 +08:00

test_hardening.py

Harden Sigil: tests/test_hardening.py

2026-10-06 06:28:01 +08:00

test_identity.py

Fix R2: bootstrap hygiene — one live seed, clear siblings on enrol

2026-10-06 06:28:01 +08:00

test_keys.py

Sigil: agent identity for the new internet

2026-10-06 06:28:01 +08:00

test_production.py

Fix R3: permanent revoke clears key; reinstate requires rekey

2026-10-06 06:28:01 +08:00

test_sealed.py

Sealed store: AES-256-GCM encryption at rest for the DB file

2026-10-06 06:28:01 +08:00

test_sessions.py

Route the human-session tests through the real code path

2026-10-06 06:28:01 +08:00

test_viewcodes.py

Fix R1: invalidate view codes on revoke/rekey/suspend

2026-10-06 06:28:01 +08:00